-Network environment:

The network environment here, the telecom package 189 sent 20 broadband. Where 1 is 300 meters below 30 meters, 1 is 20 meters below 100 meters, 18 is 50 meters below 100 meters, and there is another Unicom with the equivalent of 100 meters, plus two 50 meters pulled behind. 3 telecom optical cats, 1 Unicom optical cats, several routers and switches.

-CDN node * * * Enjoy (exchange idle traffic for money):

In the early days, there were not so many network environments, so we played the Red Crystal of Thunder, then went to Thunder for routing, and then made money and went to Keyun, which can be said to be all the way. Among them, the generation of Shengcaibao and Shengcaibao pro have been hanging for the longest time. Later, I stopped making money and sold most of them. Because of the limitation of the network, the player cloud left several sets, and most of them were arrested as traitors. Since there are so many broadband lines, involving multi-line and multi-dial, then soft routing must be set up, which is quick to choose, simple to operate and good in shunting effect. Since there is so much idle bandwidth, cash has just appeared in the geek cloud. I bought a few sets to try, and the effect was good, so I bought more than 20 sets to earn a little money. After all, I am poor.

-The problem began to appear:

I didn't think this thing could really run. The upload traffic rate of more than 20 devices has reached Gigabit. After using the 32 15U 4 cord for several years, it began to feel a little overwhelmed. I wonder if it's caused by stars. Anyway, I don't think I can stand it, but surfing the internet is fine. But after a while, I found that when ap's ac88u and wifi started, it was unbearable for the queen who likes to eat chicken. Obviously, being scolded is for sure. At first, I thought 86u was disconnected. Using exclusion method, acrh 17 as ap, the problem still exists, which seems to be the pot of soft routing. Just telecom has a 500M point-to-point discount package, which is handled decisively. In order not to be limited by gigabit ports, let the telecom brother pull another optical fiber. At this time, there are 4 light cats at home, 3 telecom, Unicom 1. A 4-port soft routing port is not enough. Too much broadband, it is easy to reach the gigabit bottleneck, the bandwidth of a light cat1g.

-The performance is not enough.

Just as my colleague needed soft routing, I gave it to 32 15u. I still have dq77kb+e3 1265l v2 on hand. I bought a 4-port network card as a soft route, which was too small to understand at that time. I went to Taobao and bought i350-t4 (Zika). But it can still be used. No problem. This performance should not be a bottleneck. But sometimes wifi can't be connected, which seems to be a bug that loves fast. But I have loved it for many years, and many configurations are in it. It will take a long time to change the firmware and adjust the configuration, such as ddns, port forwarding and shunting. However, the problem of wifi cannot be solved. I just saw someone in the group say that love is fast. This happens when the equipment runs too much, and the last three-layer switch solves the problem. Then go to a fish and find a second-hand three-layer switch to try. Later, I saw that someone in the group mentioned nat types, which was helpful to increase income. So I got a general understanding and posted it to everyone.

-Nat type

1. full cone NAT (NAT 1 for short):

All requests from the same internal tuple X are translated into the same external tuple Y by NAT, regardless of whether these requests belong to the same application or multiple applications. In addition, when the conversion relationship between X and Y is established, any external host can take the address and port in Y as the target address and port at any time and send UDP messages to the internal host. Because there is no restriction on the source of external requests, this method is simple enough, but not so secure.

2. Restricted cone NAT (NAT2 for short):

It is a limited version of Full Cone: all requests from the same internal tuple X are translated into the same external tuple Y by NAT, which is the same as Full Cone, but the difference is that only after the internal host has sent a message to the external host (assuming its IP address is Z), the external host can send a UDP request message to the internal host with the information in Y as the target address and port. This means that NAT devices only forward inbound (destination address/port translation) UDP packets from currently known external hosts, thus ensuring the security of external request sources.

3. Port Restricted Cone NAT (NAT3 for short):

It is a further restricted version of the restricted content. Only when the internal host has sent a message to the external host (assuming that its IP address is Z and its port is P), the external host can send a UDP message to the internal host with the destination address and port of the information in Y, and the source port of its request message must be P, which further strengthens the restriction on the source of external message requests, thus being more secure than Restrictd Cone.

4. Symmetric NAT (NAT4 for short):

This is a more flexible conversion method than all Cone NAT: in Cone NAT, the conversion mapping relationship between the internal tuple and the external tuple of the internal host has nothing to do with the target address and port in the UDP message sent by the internal host, that is, it has nothing to do with the target tuple.

I am from Baidu. Anyway, as long as I think nat 1 is the best, according to my experience, soft routes like Aikuai and Hi-Tech are all nat4. Music can be nat 1, while the nat type of ordinary routing dialing is 3, and nat 1 can be realized by brushing Hi-Tech and openwrt. Of course, as long as your router is dmz, it can also become nat 1, but this can only specify one host in the intranet, not multiple hosts. Does nat 1 help to increase income? In this regard, I also made a special test, took out the slag newifi3, compiled the corresponding openwrt firmware, thanked the source code of the carving, started to hang up, and did a few days of testing. The conclusion is that it can really improve the revenue, and it is also helpful for p2p game download.

-currently supports nat 1 firmware:

Openwrt series, any openwrt that can be brushed in theory can be used.

K2p high strength fastener,

Acrh 17 can also realize full cone through merlin update (thanks to the firmware of the big carving, it is fully functional. )

Merlin firmware is currently only supported by new kernels, such as ac86u and ax88u.