Skip to content
gwlim edited this page Apr 24, 2020 · 9 revisions

SFE & Flow Offload which do I choose?

SFE and Flow Offload are functionally equivalent.

They do the same thing, bypass some network translation layers for traffic that is allowed so it is faster.

You will not get X2 the performance if you enable both at the same time.

I included both because some people like SFE while others like Flow Offload, it is a new feature that LEDE 17 does not have made by Openwrt developers.

It is up to you to decide which you want therefore it is disabled by default so users can choose.

However between SFE and Flow Offload I benchmarked, one is faster on TP-Link WR1043NDv1.

To enable SFE start the Service in SYSTEM -> STARTUP

To enable Flow Offload check enable Flow Offload in NETWORK -> Firewall

Missing cake queuing discipline, sqm scripts installed (sqm-scripts, luci-app-sqm) ?

Go to SYSTEM- > STARTUP ENABLE and START SQM Then go to luci-sqm and choose CAKE

Unable to install kernel modules, kernel module loading errors ?

Download and extract the kernel modules included in the firmware folder, upload to the /tmp directory in the router and install from there.

Due to kernel hardening and optimization options openwrt kmods are not compatible so the compatible kernel modules are included in a tar.gz file.

Unable to connect to Wireless?

On older Atheros Wireless Chipset (eg. AR9285,AR9132) , features like 802.11w Management Frame Protection are not supported.

If the feature is turned on the Wireless AP will not start.

Therefore to be able to use it, 802.11w Management Frame Protection MUST BE DISABLED.

Unfortunately for WPA3-SAE standard, 802.11w Management Frame Protection is mandatory therefore on older Atheros Hardware WPA3-SAE cannot be supported.

If your Wireless Client Device cannot support Management Frame Protection then you cannot use WPA-SAE and the Wireless AP Management Frame Protection must be set to either Optional or Disabled

DFS Issues

If you enable DFS on the AP, you may find that some older Wireless AC Devices will refuse to connect to it. In that case it would be better not to use DFS channels