@antipesto 

As you described that you have tested many routers, that is to say that ER8411 is reset to default status and without any possible config that might cause a problem in DNS resolution or HTTPS, you performed the downloads and it always fails?

What's the DNS resolution for the domain of the file you are trying to download?

BTW, what URL did you use?

Got an example?

  @Clive_A 

Hey, Yes I have tried it fully reset, and in both standalone + controller mode.

Some examples

- speedtest.net download tests on certain servers

- Most downloads result in the issue, but not all, for example, steam downloads are fine and download very fast, however, 90% of others fail (any device on network, and browser)

I am unable to post links on the forum, but downloading "Jetbrains intellij" or "arch linux" or "opnsense" or even downloading from dropbox files or tp-link firmware fails

The downloads do start (which I can see from curl) but very quickly fail

  @antipesto 

antipesto wrote

  @Clive_A 

 

Hey, Yes I have tried it fully reset, and in both standalone + controller mode.

 

Some examples

- speedtest.net download tests on certain servers

- Most downloads result in the issue, but not all, for example, steam downloads are fine and download very fast, however, 90% of others fail (any device on network, and browser)

 

I am unable to post links on the forum, but downloading "Jetbrains intellij" or "arch linux" or "opnsense" or even downloading from dropbox files or tp-link firmware fails

 

The downloads do start (which I can see from curl) but very quickly fail

 

 

 

From our static link, static.tp-link.com SSL would also fail? Will send this to the test team and see how they respond.

About the GRO, it is enabled by default. No option to disable it.

BTW, what's your curl version?

curl --version

The team replied that we got no reproduction of your reported issue on this version.

curl --version
curl 7.58.0 (x86_64-pc-linux-gnu) libcurl/7.58.0 OpenSSL/1.1.1 zlib/1.2.11 libidn2/2.0.4 libpsl/0.19.1 (+libidn2/2.0.4) nghttp2/1.30.0 librtmp/2.3
Release-Date: 2018-01-24
Protocols: dict file ftp ftps gopher http https imap imaps ldap ldaps pop3 pop3s rtmp rtsp smb smbs smtp smtps telnet tftp
Features: AsynchDNS IDN IPv6 Largefile GSS-API Kerberos SPNEGO NTLM NTLM_WB SSL libz TLS-SRP HTTP2 UnixSockets HTTPS-proxy PSL

  @Clive_A 

Thanks for your help!

I have tried curl on latest mac os (older) + windows (8.10.1)

Here is an example output when downloading formware from static.tp-link.

The setup here is simplyTelus NH20A modem in bridge mode -> RJ45 to WAN on ER8411

The results are the same when I reset the model fully and leave the configuration fully on default.

The issue is resolved if I switch to another router

  @antipesto 

Also attaching image of it working when I switch router to a different brand

  @antipesto 

Download from tp-link, ER8411

download from tp-link unifi router

I do a test from a raspberry pi ER8411 router

Thank you, I guess there is some incompatibility with my ISP... I tried to ask them but they only support if you use their own equipment only :(

  @antipesto 

yes the router works, also tested on ER605v2, ER707-M2 and ER706W, it worked on all

  @antipesto 

I picked up an ER707-M2 out of curiosity, and it worked fine

Factory reset ER707 in standalone mode = fine

Factory reset ER8411 in standadlone fine = SSL errors

Clearly there is a difference between the routers, but specficically some feature of the ER8411 that is not compatible with my ISP (or ISP modem)

I don't have the skills to figure out what it might be so will find an alternative 10g router but happy to test anything you suggest!

  @antipesto 

antipesto wrote

  @antipesto 

 

I picked up an ER707-M2 out of curiosity, and it worked fine

 

Factory reset ER707 in standalone mode = fine

Factory reset ER8411 in standadlone fine = SSL errors

 

Clearly there is a difference between the routers, but specficically some feature of the ER8411 that is not compatible with my ISP (or ISP modem)

 

I don't have the skills to figure out what it might be so will find an alternative 10g router but happy to test anything you suggest!

If you need to get to the reason, at least provide the curl version. That's important.

Many of us have not reproduced this issue. It could be a problem with the curl version.