In reply to a post by dragon2611:

I wonder if it's configurable but not exposed on the WebUI (Or hidden somewhere)
Do the ftriz boxes have a CLI based config as well?
I know of at least one router that exposed additional firewall parameters in TR69 that weren't anywhere in the WEB-UI.

All good questions, apologies, I'm not a Frizbox expert. I gather the manufacturer (AVM) has good support for their products.

I believe there is no telnet access

The Fritz!Box 7530 supports OpenWRT I see.
The DSL (and VoIP) functions aren't supported, but I could use it with the Zyzel in modem brodge mode (or the HG612) so no problem there/

Are you noticing any other issues, other than the BQM graphs? I'd be inclined to think it's merely the Frtitzbox throttling its response to ICMP packets.

In other words, you're not really loosing packets, it's just the Frtizbox being overly eger to rate limit ping responses.

I used Zen's supplied Fritzbox for a while, but I replaced it. Maybe it's stable, but it's a bit of a toy when it comes to being able to actually configure how it works. I don't have the same model, but on mine, you couldn't even change the internal domain name it used. So every machine on the LAN had to be [hostname].fritz.box.

I replaced it with an EdgeRouter X. Little bit harder to get it configured, but once it's set up, I haven't had to touch it.

Yes I think it's just what the Fritzbox does. It's strange that some days it's small and other days it shows up 40% loss (even overnight when no traffic). Switching the Zyxel out of brdge mode (without even resyncing) so that it is replying to the BQM always cures it.

See this one:
BQM 29-01-2021
The period with no loss is where I switched the Zyxel's router in, then shortly after I switched the Fritz back in again, the loss came back but not as bad.

A couple of days ago I flashed OpenWRT onto the Fritz and obviously the 'problem' has gone. I realise I don't really gain anything as this packet loss on the BQM does not seem to affect my internet experience, but I'd still like a router that allows me to monitor my connection properly, which I now seem to have.

I can always flash back if I find any negatives with OpenWRT.

Edited by Glenn2 (Wed 03-Feb-21 13:40:21)

In reply to a post by Glenn2:

but I'd still like a router that allows me to monitor my connection properly, which I now seem to have.

That was always my thoughts about the Fritz hardware. I want to be in charge, not the router. If there is a configuration option for throttling ICMP on/off that would change my opinion. It seems to be memory of pre-router home internet that being "pingable" was a problem. Seemingly invented by Netgear, and the likes of ZoneAlarm and Steve Gibson raising hysteria. Patch the TCP/IP stack if it has a security vulnerability, otherwise why not reply to ICMP ECHO as normally ??!

Yes - many protocols / service ports could be the subject of a flood or fragment-reassembly bug, and the focus on PING was something came to prominence because of a high profile bug in the network stack of Windows 98 as I recall.

Rate-limiting is ok as long as it is adjustable, and can be source-specific or in response to authentication failures (e.g. like fail2ban).

Unfortunately blanket blocking of ICMP is often embedded in enterprise thinking too, which creates obstacles for troubleshooting as well as rolling out IPv6.

In reply to a post by prlzx:

Rate-limiting is ok as long as it is adjustable, and can be source-specific or in response to authentication failures (e.g. like fail2ban).

Completely agree, and with the enterprise thinking.