Firmware Update: Ubiquiti EdgeMAX EdgeRouter 1.10.5

Ubiquiti Networks has released version 1.10.5 of the firmware for the EdgeMax EdgeRouters. The EdgeRouters are characterized by extensive setting options, but require some network knowledge to get it running properly. Also, not all settings can be adjusted via the gui and you will therefore have to start via the command line. The list of changes looks like this:

New features:

• Offloading – Added CLI commands to resize flow table on Octeon-based routes. Discussed here
  set system offload ipv4 table size 65536
  Prior to 1.10.5 firmware, table-size was hardcoded to 8192 for all platforms. Default table size of 8192 buckets was ok for ER-lite (which has 512Mb of RAM) but totally not ok for ER-Infinity (which has 16GB of RAM). Now admins can tune offload ipv4 table-size to improve forwarding performance. General recommendation is following – if you see that coutner ipv4_create_flow_not_found_replaced_non_expired is constantly growing then it means that table-size is too small for your traffic profile and you are advised to increase it past default 8192 value:
  $ show ubnt offload statistics |grep replaced_non_expired
  ipv4_create_flow_not_found_replaced_non_expired 357345 ipv6_create_flow_not_found_replaced_non_expired 0
  Right now the only limitation for table-size is that it should be power of 2 (8192, 16384, 32768, 65536…)

Enhancements and bug fixes:

• PoE – Keep POE status during reset for ER-X-SFP/EP-R6/EP-R8/ER-12 devices
• DHCP – Fixed DHCPv6 failure with VIF-0 interface.
• SSH – Disable weak ARCFOUR ciphers
• SSH – Disable SSH port forwarding for operator user
• Interface – Fixed bug when SFP interface link was down after upgrade on ER-X-SFP
• BGP – Fixed bug when commit failed when setting inactive BGP peer.
• DNS – Upgraded Dynamic DNS client to support cloudflare API v4.
  Following DDNS providers require manual configuration changes:
  • Cloudflare – server www.cloudflare.com should be removed from config:
    delete service dns dynamic interface eth0 service custom-cloudflare server www.cloudflare.com
  • Namecheap – config entry host-name should not contain second level domain name. For instance for eatmyshorts.bart.com you should remove the bart.com suffix from host-name and leave only eatmyshorts:
    delete service dns dynamic interface eth0 service namecheap host-name eatmyshorts.bart.com
    set service dns dynamic interface eth0 service namecheap host-name eatmyshorts
• Interface – Fixed random bug when interface stopped passing traffic after changing speed/duplex
• Interface – Fixed bug when eth0 speed/duplex could not be changed on ER-Infinity
• System – Fixed bug when processes randomly crashed with SIGBUG on ER-X
• System – Fixed bug when PoE status was not reset when doing “factory-reset”
• System – Fixed bug when “ubnt-util” crashes with SIGFPE if smart-queue rate was less than 1kbps.
• UNMS – downgraded ubnt-udapi bridge to v0.3.13 to get rid of bug when UNMS connection freezed

Known issues:

• Bug with corrupted downloads via PPPoE interface is not fixed for ER-8-XG (it is fixed on all other ER models). Workaround – disable PPPoE offloading on ER-8-XG:
  configure
  set system offload ipv4 pppoe disable
  set system offload ipv6 pppoe disable
  commit
  save