ATT- Transparent Proxies - Loss of Internet Randomly - Big Thread Of info

Related to Router Devices ONLY
Forum rules
Use the SEARCH function for related issues PRIOR to posting for assistance.
serverside
Posts: 81
Joined: Wed Jul 11, 2018 3:02 pm
Has thanked: 2 times
Been thanked: 5 times

ATT- Transparent Proxies - Loss of Internet Randomly - Big Thread Of info

Post by serverside » Mon Oct 26, 2020 10:56 am

The below is the solution to this issue with dd-wrt and wireguard.

New Update + Final Solution: So with KeepSolid, it's $99 for a lifetime, then I spend $12.50 a month for a private IP, everything works now, gaming/P2P/VOIP/etc. This is the recommended route I suggest you go with for any VPN provider you land upon, as having your own IP will allow you to access everything without sites blocking you if they know it's a known IP.

OpenVPN will kill your connection speed, this is not a solution. Installing VPN Apps on everything is also not a solution. The below is a decent solution between the two.

To solve this issue, I turned my Archer C7 (TP-Link) v2 into my main router. I purchased a VPN from KeepSolid and used this guide to run everything through Wireguard now. Speed is about 75% of my main speed (which is fine). This could be improved with a stronger hardware router. So pretty impressed with Wireguard.

https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=324624

My config now goes like this:

WG-3526 + MC7455 (XXX.XXX.1.1) = Internet -> Line into DDWRT router(XXX.XXX.0.1(Archer C7) Wan Port (internet port). Rest of my lan now runs through it.

This works for now, since I've had connection drops continually for the past 3+ weeks. Since I use this for my job, I cannot have these drops. Yes my speed is slower I'm fine with it. If it's stable and doesn't die every 1-4 hours.

This setup didn't take much to do. I'll continue to monitor the wan connection to see if it drops, maybe in a few months I'll get lucky and not have to go through wireguard, but at this point, I'm not worried about it.


------------------------------------
Hello all.

As a lot of you know, or having issues and don't know, AT&T has started putting Transparent proxies in front of our connections. In turn this is causing modems to stay connected but lose DNS. (You can Ping googles servers via IP 8.8.8.8, or anything else IP wise, but you cannot hit websites via DNS). So I wanted to start a thread and compile all the info/work arounds that have been presented(tested or not tested), and trying and just have a single thread for helping everyone. (This is mostly for my sanity to keep everything together). This is mainly for ROOTer firmware, but the solutions (if they work) should be able to be used on other software/hardware combos.

https://forums.att.com/conversations/ot ... 341?page=6

Solutions so far:

If you're on a MOFI firmware - update it and set your connection monitor to ping something like google.com or another website. The MOFI software will reboot the modem. You're issue should be resolved. (viewtopic.php?p=13321#p13321)

GoldenOrb/ROOTer:

[*]IPV6 only - I have not been able to get this to work at this time. A lot of info I have found is for sprint and not AT&T. (It's suggested that IPV6 isn't forced to go through AT&Ts transparent proxy, which resolves this issue). (viewtopic.php?f=15&t=1985&p=13577&hilit=ipv6#p13577)(thread has no current resolution)(viewtopic.php?f=21&t=6) This thread is for T-Mobile :/

Found This for IPV6, haven't tested it yet though, removed the MBIM activation since Golden Orb Now works with IPV6 and QMI mode.

Code: Select all

at!entercnd="A710"
at+cgdcont=1,"ipv4v6","broadband"
At!custom="IPV6ENABLE",1
at!selrat=06
at!reset
----------------------------------

[*]VPN Service - This I've tried, and it does work, but using OPENVPN inside of the ROOTer software kills bandwidth, using the application of your vendor seems to have better results, but it's going to be needed per device, and is not what I would consider a fix. Figuring out why openvpn causes a massive loss in speed is something to be looked at. I'm currently working with PIA, but since I have updated to the latest golden orb I can no longer get the OPENvpn settings working, no matter what I do.

----------------------------------

[*]L2TP - (viewtopic.php?p=10964#p10964) - Still trying to figure out how to do a L2TP on the ROOTer Firmware.

----------------------------------

[*]MTU Settings - (viewtopic.php?f=8&t=1403&hilit=tracert&start=110#p13311) Testing this, this morning.
(Network -> Interfaces -> WWAN0(WAN1) -> Edit -> Advanced -> Override MTU)

Edit: This did not resolve the issue. Today having multiple disconnects already in a 5 hour working time.

----------------------------------

[*]Modem Reboot Script - This hasn't been updated in a while (viewtopic.php?f=21&t=121) Seems to only be avaialbe for WiFix. WiFix works for the WG3526 and others, places LTEFix Ping Test as enabled, but 10mins per ping to check is WAY to long. This needs to be done every 5-10 seconds, not 10mins. As once the ports 80/443 are closed, no one wants to wait up to 10mins for this to figure out it's down.

serverside
Posts: 81
Joined: Wed Jul 11, 2018 3:02 pm
Has thanked: 2 times
Been thanked: 5 times

Re: ATT- Transparent Proxies - Loss of Internet Randomly - Big Thread Of info

Post by serverside » Mon Oct 26, 2020 4:06 pm

Updated: Wifix LTEfix Ping Test, while I'm sure it works, isn't a solution, waiting 10mins before it checks ping is way to long. A version in which this is shortened to like 5-10 seconds could help, but the 10min mark, you're already going into the router page and rebooting it yourself.

cstring
Posts: 2
Joined: Wed Sep 09, 2020 4:11 pm
Has thanked: 0
Been thanked: 0

Re: ATT- Transparent Proxies - Loss of Internet Randomly - Big Thread Of info

Post by cstring » Mon Oct 26, 2020 4:44 pm

I am on ATT, will try the IPV6 fix.

tetranz
Posts: 40
Joined: Thu Aug 13, 2020 11:53 am
Has thanked: 2 times
Been thanked: 8 times

Re: ATT- Transparent Proxies - Loss of Internet Randomly - Big Thread Of info

Post by tetranz » Mon Oct 26, 2020 5:17 pm

Would a VPN fix this?

I'm just tethering to a phone via Wireguard and EasyTether to Windscribe VPN. All I ever pass over cellular are UDP packets.

Edit: I see that someone already mentioned VPN. FWIW, Wireguard is working well for me. I probably get about 75% or more of full speed.

serverside
Posts: 81
Joined: Wed Jul 11, 2018 3:02 pm
Has thanked: 2 times
Been thanked: 5 times

Re: ATT- Transparent Proxies - Loss of Internet Randomly - Big Thread Of info

Post by serverside » Mon Oct 26, 2020 9:17 pm

cstring wrote:
Mon Oct 26, 2020 4:44 pm
I am on ATT, will try the IPV6 fix.
Let me know how it goes.
tetranz wrote:
Mon Oct 26, 2020 5:17 pm
Would a VPN fix this?

I'm just tethering to a phone via Wireguard and EasyTether to Windscribe VPN. All I ever pass over cellular are UDP packets.

Edit: I see that someone already mentioned VPN. FWIW, Wireguard is working well for me. I probably get about 75% or more of full speed.
Your edit does answer the question, but to clarify are you using the openvpn settings in the rooter software or are you using the application on your phone/pc from wireguard?

corywf
Posts: 20
Joined: Thu Nov 07, 2019 5:57 pm
Has thanked: 3 times
Been thanked: 0

Re: ATT- Transparent Proxies - Loss of Internet Randomly - Big Thread Of info

Post by corywf » Mon Oct 26, 2020 10:17 pm

serverside wrote:
Mon Oct 26, 2020 4:06 pm
Updated: Wifix LTEfix Ping Test, while I'm sure it works, isn't a solution, waiting 10mins before it checks ping is way to long. A version in which this is shortened to like 5-10 seconds could help, but the 10min mark, you're already going into the router page and rebooting it yourself.
A ping test won't work because pings are successful even when you can't get http or https to load. I can ping any domain when I lose connectivity but can't get to any websites (other than Google). Already opened sessions (eg zoom calls) continue to work as well. ATT is black-holing web (80/443) traffic, not icmp (ping) traffic.

tetranz
Posts: 40
Joined: Thu Aug 13, 2020 11:53 am
Has thanked: 2 times
Been thanked: 8 times

Re: ATT- Transparent Proxies - Loss of Internet Randomly - Big Thread Of info

Post by tetranz » Mon Oct 26, 2020 10:32 pm

serverside wrote:
Mon Oct 26, 2020 9:17 pm
Your edit does answer the question, but to clarify are you using the openvpn settings in the rooter software or are you using the application on your phone/pc from wireguard?
I'm not running OpenVPN. I have a Raspberry Pi that has an Ethernet cable from the WAN port of my router and USB to the phone.

The Pi runs Wireguard and EasyTether so it's all transparent to devices on the LAN side of the router.

It can also tether to an iPhone with USB using usbmuxd. Thinking about that got my attention when I read of the ATT problems here. I haven't quite got the iPhone tether (using Visible) working properly. It only seems to pass TCP intermittently. I had an idea to put it through Wireguard and to my surprise, it works perfectly. I guess that means it's passing UDP no problem but not TCP for some reason.

The phone is a cheap dual SIM Samsung Galaxy. Until a few days ago I had both T-Mobile and ATT but I've drop the ATT plan for now. I know it's kind of a toy setup compared to a separate modem and external antenna but I'm quite pleased with my little project. It's kind of nice to have low cost plug and play "unlimited" data with the Android because of EasyTether and "unlimited" on Verizon with Visible and nothing for the carriers to detect or object to provided I don't go crazy with the amount of traffic.

serverside
Posts: 81
Joined: Wed Jul 11, 2018 3:02 pm
Has thanked: 2 times
Been thanked: 5 times

Re: ATT- Transparent Proxies - Loss of Internet Randomly - Big Thread Of info

Post by serverside » Tue Oct 27, 2020 8:54 am

corywf wrote:
Mon Oct 26, 2020 10:17 pm
A ping test won't work because pings are successful even when you can't get http or https to load. I can ping any domain when I lose connectivity but can't get to any websites (other than Google). Already opened sessions (eg zoom calls) continue to work as well. ATT is black-holing web (80/443) traffic, not icmp (ping) traffic.
So I was hoping this ping test was more pinging an https site vs IP. If it's IP, what's the point of it when the connection manager does it better with more options? This seems like a silly feature to have if it does what the orginal LEDE did better already.
tetranz wrote:
Mon Oct 26, 2020 10:32 pm
I'm not running OpenVPN. I have a Raspberry Pi that has an Ethernet cable from the WAN port of my router and USB to the phone.

The Pi runs Wireguard and EasyTether so it's all transparent to devices on the LAN side of the router.

It can also tether to an iPhone with USB using usbmuxd. Thinking about that got my attention when I read of the ATT problems here. I haven't quite got the iPhone tether (using Visible) working properly. It only seems to pass TCP intermittently. I had an idea to put it through Wireguard and to my surprise, it works perfectly. I guess that means it's passing UDP no problem but not TCP for some reason.

The phone is a cheap dual SIM Samsung Galaxy. Until a few days ago I had both T-Mobile and ATT but I've drop the ATT plan for now. I know it's kind of a toy setup compared to a separate modem and external antenna but I'm quite pleased with my little project. It's kind of nice to have low cost plug and play "unlimited" data with the Android because of EasyTether and "unlimited" on Verizon with Visible and nothing for the carriers to detect or object to provided I don't go crazy with the amount of traffic.
Ah, yea so it seems the application is passing bandwidth better as described above. Thanks for the info. the more on this topic the better. What VPN provider are you using?

tetranz
Posts: 40
Joined: Thu Aug 13, 2020 11:53 am
Has thanked: 2 times
Been thanked: 8 times

Re: ATT- Transparent Proxies - Loss of Internet Randomly - Big Thread Of info

Post by tetranz » Tue Oct 27, 2020 9:05 am

serverside wrote:
Tue Oct 27, 2020 8:54 am
Ah, yea so it seems the application is passing bandwidth better as described above. Thanks for the info. the more on this topic the better. What VPN provider are you using?
https://windscribe.com

At first I created my own Wireguard server at Digital Ocean but Windscribe works great so there's no point or saving in having my own since I paid for a year at Windscribe for $45. It has a config generator which gives you raw configuration rather than forcing you to use their client.

I might write it all up as a blog post. It was mostly just a fun project with a Raspberry Pi but I'm now using it all the time for work with Zoom and Slack etc. I'm in a good T-Mobile signal area right now but will try it in our RV soon.

serverside
Posts: 81
Joined: Wed Jul 11, 2018 3:02 pm
Has thanked: 2 times
Been thanked: 5 times

Re: ATT- Transparent Proxies - Loss of Internet Randomly - Big Thread Of info

Post by serverside » Tue Oct 27, 2020 1:27 pm

tetranz wrote:
Tue Oct 27, 2020 9:05 am
https://windscribe.com

At first I created my own Wireguard server at Digital Ocean but Windscribe works great so there's no point or saving in having my own since I paid for a year at Windscribe for $45. It has a config generator which gives you raw configuration rather than forcing you to use their client.

I might write it all up as a blog post. It was mostly just a fun project with a Raspberry Pi but I'm now using it all the time for work with Zoom and Slack etc. I'm in a good T-Mobile signal area right now but will try it in our RV soon.
what was your original bandwidth vs with the VPN on?

Post Reply