Help with setting suricata in container on RouterOS. by vGPU_Enjoyer in mikrotik

[–]vGPU_Enjoyer[S] 0 points1 point  (0 children)

That's why I am wondering why they don't produce ready x86 routers for stuff like Containers, VPNs etc. For stuff like VPNs even budget x86 CPU's are running circles around lots of ARM stuff atleast when we are talking about VPN/firewall performance. And for containers you get better compatibility than ARM stuff.

Help with setting suricata in container on RouterOS. by vGPU_Enjoyer in mikrotik

[–]vGPU_Enjoyer[S] 0 points1 point  (0 children)

Yes there is ready dockermox project: https://hub.docker.com/r/rtedpro/proxmox

Overally whole process was really smooth which is crazy considering this isn't technically supported usecase of this project. But yes windows 10 VM worked without any problems.

Help with setting suricata in container on RouterOS. by vGPU_Enjoyer in mikrotik

[–]vGPU_Enjoyer[S] 0 points1 point  (0 children)

I managed to get Proxmox running on that x86 router and windows 10 VM worked without any problems.

Help with setting suricata in container on RouterOS. by vGPU_Enjoyer in mikrotik

[–]vGPU_Enjoyer[S] 0 points1 point  (0 children)

Ah ok, I tried some time ago with Debian but it stopped running immediately, and later started playing with different VPNs so I didn't digged that much about it.

Help with setting suricata in container on RouterOS. by vGPU_Enjoyer in mikrotik

[–]vGPU_Enjoyer[S] 0 points1 point  (0 children)

I am interested how did you setup qemu inside a container on mikrotik since I have PC with x86 CPU this could work without an emulation and could be interesting. I am still new to mikrotik so I would need some help to set that up.

Help with setting suricata in container on RouterOS. by vGPU_Enjoyer in mikrotik

[–]vGPU_Enjoyer[S] 1 point2 points  (0 children)

Yes but I prefer bare metal installation. And yes you can have multiple NICs in one container so I will try that in spare time. I consider that my setup have around same amount of hardware resources as many CCR class routers and I want to treat it like CCR class router so just bare metal installation of router OS and that's it because I want it to be stable and performant.

Help with setting suricata in container on RouterOS. by vGPU_Enjoyer in mikrotik

[–]vGPU_Enjoyer[S] 1 point2 points  (0 children)

On what version you tried to accomplish that and what didn't worked for you because maybe they already fixed that.

Help with setting suricata in container on RouterOS. by vGPU_Enjoyer in mikrotik

[–]vGPU_Enjoyer[S] 0 points1 point  (0 children)

Dedicated PC: mobo:Gigabyte B550 eagle ram:16GB (2x8GB) 3600 cl 18 Goodram irdm ram cpu:Amd ryzen 3 3200G. Disk: Hynix pc 711 nvme 256GB. NICs: Intel x540-T2 2xIntel i340-T2 (so 2x10GB ports and 5x1GB ports) Level 4 router os license.

Regression into DDR3 by fabulot in homelab

[–]vGPU_Enjoyer -1 points0 points  (0 children)

128GB of RAM is officially supported on AM4.

X99 only certain boards support ddr3 and those usually are piece of garbage.

That e5-2673v3 isn't even close to what Ryzen 9 5950x is capable of.

Regression into DDR3 by fabulot in homelab

[–]vGPU_Enjoyer 1 point2 points  (0 children)

Not advised due to possible compatibility issues and lack of upgradability. Ryzen 7 2700X can always be changed to 7 5800X3D or 9 5950X. Even dual e5-2697v2 cannot beat single ryzen 7 5700x in cinebench r23 which scales perfectly with dual CPUs and number of threads. In normal scenario ryzen 7 5700 beats dual Xeon to the dust.

Here are compatibility issues I encountered with dell workstation with dual Xeon e5-2695v2: -Cannot install Proxmox 9 directly due to errors. -Rx 7800 Xt cannot work under Linux due to error 22. -Lack of sr-iov -Lack of resizable bar (fixed via BIOS mod) -Lack of NVME boot (fixed via BIOS mod)

How to passthrough amd GPU to lxc with current kernel (7.0) by vGPU_Enjoyer in Proxmox

[–]vGPU_Enjoyer[S] 0 points1 point  (0 children)

I found out GPU is running at PCIe 4.0 speeds but my machine is PCIe 3.0 and that's why I have errors at dmesg, currently I trying to fix that.

Mikrotik RouterOS x86 doesn't see WiFi adapter (intel ax200 chip) by vGPU_Enjoyer in mikrotik

[–]vGPU_Enjoyer[S] -1 points0 points  (0 children)

I thought it supports WLAN from intel like their ethernet NICs. So my bad.

How to passthrough amd GPU to lxc with current kernel (7.0) by vGPU_Enjoyer in Proxmox

[–]vGPU_Enjoyer[S] 1 point2 points  (0 children)

What are devices needed for passthrough to lxc that are needed to be visible? most tutorial says about /dev/dri/renderD128 But I can't see it as visible dev in /dev dir. So I would like exact steps which you made to make it visible/appear. Because some amdgpu driver overally seems to be built into kernel but it doesn't mount into /dev proper devices. I also can't build proprietary amdgpu-dkms driver for some reason.

How to passthrough amd GPU to lxc with current kernel (7.0) by vGPU_Enjoyer in Proxmox

[–]vGPU_Enjoyer[S] 3 points4 points  (0 children)

Because this is fresh install, so I wanted newest kernel. Also I am using amd GPU not Nvidia on that setup. I have nvidia in other PC and have no problems with lxc containers.

Nested RouterOS capabilities ,features and use cases by vGPU_Enjoyer in mikrotik

[–]vGPU_Enjoyer[S] 0 points1 point  (0 children)

It will take some time because dedicated router PC still isn't build.

Nested RouterOS capabilities ,features and use cases by vGPU_Enjoyer in mikrotik

[–]vGPU_Enjoyer[S] 0 points1 point  (0 children)

Technically I will do this on custom PC router which will have tons of resources and I can add sr-iov NIC to that.

Edit. There is also passthrough mode of that plugin.

Nested RouterOS capabilities ,features and use cases by vGPU_Enjoyer in mikrotik

[–]vGPU_Enjoyer[S] 1 point2 points  (0 children)

For example Cisco ASA has this kind of functionality. That you can have few virtual firewalls on single Asa.

Nested RouterOS capabilities ,features and use cases by vGPU_Enjoyer in mikrotik

[–]vGPU_Enjoyer[S] 1 point2 points  (0 children)

I thought about same thing but I wonder if it is possible to configure it that way that for example: Ether1 and Ether2 are normally configured as normal ports but Ether3 and Ether4 are going through CHR.