[dn42] AS4242420263 configuration - speedrun to the first peering session (Part 2/5)

apt install wireguard wireguard-tools

cd /etc/wireguard/
umask 077; wg genkey | tee privatekey | wg pubkey > publickey

auto lo:10

iface lo:10 inet static
    address 172.22.144.161
    netmask 255.255.255.248
    network 172.22.144.160

iface lo:10 inet6 static
    address fd28:7515:7d51:a::1/64

ifup lo:10

[Interface]
PrivateKey = **REDACTED**
ListenPort = 51821
PostUp = /sbin/ip addr add dev %i fe80::101/128 peer fe80::ade0/128
Table = off

# Kioubit
[Peer]
PublicKey = sLbzTRr2gfLFb24NPzDOpy8j09Y6zI+a7NkeVMdVSR8=
Endpoint = fr1.g-load.eu:20263
PersistentKeepalive = 30
AllowedIPs = 172.16.0.0/12, 10.0.0.0/8, fd00::/8, fe80::/10

systemctl enable --now wg-quick@wg-peer-kioubit

wg show wg-peer-kioubit
interface: wg-peer-kioubit
  public key: 8JNlIxV5BTOxNBB2wDs/A5HSvzcZxSLbIEVzz7b94Qc=
  private key: (hidden)
  listening port: 51821

peer: sLbzTRr2gfLFb24NPzDOpy8j09Y6zI+a7NkeVMdVSR8=
  endpoint: [2001:41d0:2:36e::1]:20263
  allowed ips: 172.16.0.0/12, 10.0.0.0/8, fd00::/8, fe80::/10
  latest handshake: 1 minute, 18 seconds ago
  transfer: 331.89 KiB received, 315.65 KiB sent
  persistent keepalive: every 30 seconds

ip address show dev wg-peer-kioubit
8: wg-peer-kioubit: <POINTOPOINT,NOARP,UP,LOWER_UP> mtu 1420 qdisc noqueue state UNKNOWN group default qlen 1000
    link/none 
    inet6 fe80::101 peer fe80::ade0/128 scope link
       valid_lft forever preferred_lft forever

ping -c1  fe80::ade0
PING fe80::ade0(fe80::ade0) 56 data bytes
64 bytes from fe80::ade0%wg-peer-kioubit: icmp_seq=1 ttl=64 time=5.20 ms

--- fe80::ade0 ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 5.203/5.203/5.203/0.000 ms

apt install bird2

# This is AS4242420263 bird configuration file on the DN42 overlay network.
#
# Please refer to the BIRD User's Guide documentation, which is also available
# online at http://bird.network.cz/ in HTML format, for more information on
# configuring BIRD and adding routing protocols.

# Configure logging
# log syslog all;
# log stderr all;
# debug protocols all;

# local configuration
######################

# keeping router specific in a seperate file,
# so this configuration can be reused on multiple routers in your network
include "/etc/bird/variables.conf";

# Convenient functions
include "/etc/bird/utilities.conf";

# Router configuration
######################

router id OWNIP;

# Device status
protocol device {
    scan time 10;
}

# Kernel routing tables
########################

# The Kernel protocol is not a real routing protocol. Instead of communicating
# with other routers in the network, it performs synchronization of BIRD's
# routing tables with the OS kernel.
protocol kernel {
    scan time 20;

    ipv4 {
        import none;
        export filter {
            if source = RTS_STATIC then {
                print "Static route filtered: ", net;
                reject;
            }
            /*
                krt_prefsrc defines the source address for outgoing connections.
                On Linux, this causes the "src" attribute of a route to be set.

                Without this option outgoing connections would use the peering IP which
                would cause packet loss if some peering disconnects but the interface
                is still available. (The route would still exist and thus route through
                the TUN/TAP interface but the VPN daemon would simply drop the packet.)
            */
            krt_prefsrc = OWNIP;
            accept;
        };
    };
}

protocol kernel {
    scan time 20;

    ipv6 {
        import none;
        export filter {
            if source = RTS_STATIC then {
                print "Static route filtered: ", net;
                reject;
            }
            krt_prefsrc = OWNIPv6;
            accept;
        };
    };
};

# Static routes
###############

protocol static {
    route OWNNET reject;

    ipv4 {
        import all;
        export none;
    };
}

protocol static {
    route OWNNETv6 reject;

    ipv6 {
        import all;
        export none;
    };
}


# Include ROA tables definition
###############################

include "/etc/bird/roa.conf";


# BGP - DN42 peers
##################

# Community and import filters
include "/etc/bird/bgp_community_filters.conf";

template bgp dnpeers {
    local as OWNAS;
    # metric is the number of hops between us and the peer
    path metric 1;
    ipv4 {
        import limit 9000 action block;
        import table;
    };

    ipv6 {
        import limit 9000 action block;
        import table;
    };
}

include "/etc/bird/bgp_peers/*";

# Configuration variables
#########################

define OWNAS       = 4242420263;

define OWNIP       = 172.22.144.161;
define OWNNET      = 172.22.144.160/27;
define OWNNETSET   = [172.22.144.160/27+];

define OWNNETv6    = fd28:7515:7d51::/48;
define OWNIPv6     = fd28:7515:7d51:a::1;
define OWNNETSETv6 = [fd28:7515:7d51::/48+];

# BGP community
define BANDWIDTH   = 24;   # >= 100Mbps
define LINKTYPE    = 34;   # encrypted with safe vpn solution with PFS (Perfect Forward Secrecy)
define REGION      = 41;   # Europe
define COUNTRY     = 1250; # France (ISO-3166-1 numeric country code + 1000)

function is_self_net() {
    return net ~ OWNNETSET;
}

function is_valid_network() {
    return net ~ [
        172.20.0.0/14{21,29}, # dn42
        172.20.0.0/24{28,32}, # dn42 Anycast
        172.21.0.0/24{28,32}, # dn42 Anycast
        172.22.0.0/24{28,32}, # dn42 Anycast
        172.23.0.0/24{28,32}, # dn42 Anycast
        172.31.0.0/16+,       # ChaosVPN
        10.100.0.0/14+,       # ChaosVPN
        10.127.0.0/16{16,32}, # neonetwork
        10.0.0.0/8{15,24}     # Freifunk.net
    ];
}

function is_self_net_v6() {
    return net ~ OWNNETSETv6;
}

function is_valid_network_v6() {
    return net ~ [
        fd00::/8{44,64} # ULA address space as per RFC 4193
    ];
}

roa4 table dn42_roa;
roa6 table dn42_roa_v6;

protocol static {
    roa4 { table dn42_roa; };
    include "/etc/bird/roa/roa_dn42.conf";
};

protocol static {
    roa6 { table dn42_roa_v6; };
    include "/etc/bird/roa/roa_dn42_v6.conf";
};

#!/bin/bash
roa4URL="https://dn42.burble.com/roa/dn42_roa_bird2_4.conf"
roa6URL="https://dn42.burble.com/roa/dn42_roa_bird2_6.conf"

dirname="/etc/bird/roa"
roa4FILE="${dirname}/roa_dn42.conf"
roa6FILE="${dirname}/roa_dn42_v6.conf"

mkdir -p "${dirname}"

cp "${roa4FILE}" "${roa4FILE}.old"
cp "${roa6FILE}" "${roa6FILE}.old"

if curl -f -o "${roa4FILE}.new" "${roa4URL}" ;then
    diff "${roa4FILE}.new" "${roa4FILE}"
    mv "${roa4FILE}.new" "${roa4FILE}"
fi

if curl -f -o "${roa6FILE}.new" "${roa6URL}" ;then
    diff "${roa6FILE}.new" "${roa6FILE}"
    mv "${roa6FILE}.new" "${roa6FILE}"
fi

if birdc configure ; then
    rm "${roa4FILE}.old"
    rm "${roa6FILE}.old"
else
    mv "${roa4FILE}.old" "${roa4FILE}"
    mv "${roa6FILE}.old" "${roa6FILE}"
fi

[Unit]
Description=Update DN42 ROA

[Service]
Type=oneshot
ExecStart=/usr/local/bin/dn42-roa-update.sh

[Unit]
Description=Update DN42 ROA periodically

[Timer]
OnBootSec=2m
OnUnitActiveSec=15m
AccuracySec=1m

[Install]
WantedBy=timers.target

systemctl enable --now dn42-roa.timer

systemctl list-timers dn42-roa.timer
NEXT                         LEFT      LAST                         PASSED   UNIT           ACTIVATES
Sat 2024-07-20 15:36:47 CEST 6min left Sat 2024-07-20 15:21:47 CEST 8min ago dn42-roa.timer dn42-roa.service

1 timers listed.

wc -l /etc/bird/roa/roa_dn42{,_v6}.conf
  2638 /etc/bird/roa/roa_dn42.conf
  2499 /etc/bird/roa/roa_dn42_v6.conf
  5137 total

(64511, 1) :: latency \in (0, 2.7ms]
(64511, 2) :: latency \in (2.7ms, 7.3ms]
(64511, 3) :: latency \in (7.3ms, 20ms]
(64511, 4) :: latency \in (20ms, 55ms]
(64511, 5) :: latency \in (55ms, 148ms]
(64511, 6) :: latency \in (148ms, 403ms]
(64511, 7) :: latency \in (403ms, 1097ms]
(64511, 8) :: latency \in (1097ms, 2981ms]
(64511, 9) :: latency > 2981ms
(64511, x) :: latency \in [exp(x-1), exp(x)] ms (for x < 10)

(64511, 21) :: bw >= 0.1mbit
(64511, 22) :: bw >= 1mbit
(64511, 23) :: bw >= 10mbit
(64511, 24) :: bw >= 100mbit
(64511, 25) :: bw >= 1000mbit
(64511, 2x) :: bw >= 10^(x-2) mbit
bw = min(up,down) for asymmetric connections

(64511, 31) :: not encrypted
(64511, 32) :: encrypted with unsafe vpn solution
(64511, 33) :: encrypted with safe vpn solution (but no PFS - the usual OpenVPN p2p configuration falls in this category)
(64511, 34) :: encrypted with safe vpn solution with PFS (Perfect Forward Secrecy)

Propagation:
- - for latency pick max(received_route.latency, link_latency)
- - for encryption and bandwidth pick min between received BGP community and peer link

function update_latency(int link_latency) {
    bgp_community.add((64511, link_latency));
         if (64511, 9) ~ bgp_community then { bgp_community.delete([(64511, 1..8)]); return 9; }
    else if (64511, 8) ~ bgp_community then { bgp_community.delete([(64511, 1..7)]); return 8; }
    else if (64511, 7) ~ bgp_community then { bgp_community.delete([(64511, 1..6)]); return 7; }
    else if (64511, 6) ~ bgp_community then { bgp_community.delete([(64511, 1..5)]); return 6; }
    else if (64511, 5) ~ bgp_community then { bgp_community.delete([(64511, 1..4)]); return 5; }
    else if (64511, 4) ~ bgp_community then { bgp_community.delete([(64511, 1..3)]); return 4; }
    else if (64511, 3) ~ bgp_community then { bgp_community.delete([(64511, 1..2)]); return 3; }
    else if (64511, 2) ~ bgp_community then { bgp_community.delete([(64511, 1..1)]); return 2; }
    else return 1;
}

function update_bandwidth(int link_bandwidth)
int local_bandwidth ; {
    if link_bandwidth > BANDWIDTH then local_bandwidth = BANDWIDTH;
    else local_bandwidth = link_bandwidth;

    bgp_community.add((64511, local_bandwidth));
         if (64511, 21) ~ bgp_community then { bgp_community.delete([(64511, 22..29)]); return 21; }
    else if (64511, 22) ~ bgp_community then { bgp_community.delete([(64511, 23..29)]); return 22; }
    else if (64511, 23) ~ bgp_community then { bgp_community.delete([(64511, 24..29)]); return 23; }
    else if (64511, 24) ~ bgp_community then { bgp_community.delete([(64511, 25..29)]); return 24; }
    else if (64511, 25) ~ bgp_community then { bgp_community.delete([(64511, 26..29)]); return 25; }
    else if (64511, 26) ~ bgp_community then { bgp_community.delete([(64511, 27..29)]); return 26; }
    else if (64511, 27) ~ bgp_community then { bgp_community.delete([(64511, 28..29)]); return 27; }
    else if (64511, 28) ~ bgp_community then { bgp_community.delete([(64511, 29..29)]); return 28; }
    else return 29;
}

function update_crypto(int link_crypto) {
    bgp_community.add((64511, link_crypto));
         if (64511, 31) ~ bgp_community then { bgp_community.delete([(64511, 32..34)]); return 31; }
    else if (64511, 32) ~ bgp_community then { bgp_community.delete([(64511, 33..34)]); return 32; }
    else if (64511, 33) ~ bgp_community then { bgp_community.delete([(64511, 34..34)]); return 33; }
    else return 34;
}

function update_flags(int link_latency; int link_bandwidth; int link_crypto)
{
    update_latency(link_latency);
    update_bandwidth(link_bandwidth);
    update_crypto(link_crypto);
    return true;
}

function update_route_origin(int region; int country)
{
    bgp_community.add((64511, region));
    bgp_community.add((64511, country));
}

# IPv4 filters

function dn42_import_filter(int link_latency; int link_bandwidth; int link_crypto) {
    # accept every valid subnets except our own advertised subnet
    if is_valid_network() && !is_self_net() then {
        # Reject when invalid according to ROA
        if (roa_check(dn42_roa, net, bgp_path.last) != ROA_VALID) then {
            print "[dn42] ROA check failed for ", net, " ASN ", bgp_path.last;
            reject;
        } else {
            update_flags(link_latency, link_bandwidth, link_crypto);
            accept;
        }
    } else reject;
}

function dn42_export_filter(int link_latency; int link_bandwidth; int link_crypto) {
    if (is_valid_network() && source ~ [RTS_STATIC, RTS_BGP]) then {
        # Set the route origin for routes originating from our network
        if source = RTS_STATIC then update_route_origin(REGION, COUNTRY);
        # Set the other community flags
        update_flags(link_latency, link_bandwidth, link_crypto);
        accept;
    } else {
        reject;
    }
}

# IPv6 filters

function dn42_import_filter_v6(int link_latency; int link_bandwidth; int link_crypto) {
    # accept every valid subnets except our own advertised subnet
    if is_valid_network_v6() && !is_self_net_v6() then {
        # Reject when invalid according to ROA
        if (roa_check(dn42_roa_v6, net, bgp_path.last) != ROA_VALID) then {
            print "[dn42] ROA check failed for ", net, " ASN ", bgp_path.last;
            reject;
        } else {
            update_flags(link_latency, link_bandwidth, link_crypto);
            accept;
        }
    } else reject;
}

function dn42_export_filter_v6(int link_latency; int link_bandwidth; int link_crypto) {
    if (is_valid_network_v6()  && source ~ [RTS_STATIC, RTS_BGP]) then {
        if source = RTS_STATIC then update_route_origin(REGION, COUNTRY);
        update_flags(link_latency, link_bandwidth, link_crypto);
        accept;
    } else {
        reject;
    }
}

define KIOUBIT_LATENCY = 2; # latency in [2.7ms, 7.3ms]

protocol bgp kioubit_v6 from dnpeers {
    neighbor fe80::ade0 as 4242423914;
    interface "wg-peer-kioubit";

    ipv4 {
        import where dn42_import_filter(KIOUBIT_LATENCY, BANDWIDTH, LINKTYPE);
        export where dn42_export_filter(KIOUBIT_LATENCY, BANDWIDTH, LINKTYPE);
        extended next hop on;
    };

    ipv6 {
        import where dn42_import_filter_v6(KIOUBIT_LATENCY, BANDWIDTH, LINKTYPE);
        export where dn42_export_filter_v6(KIOUBIT_LATENCY, BANDWIDTH, LINKTYPE);
        extended next hop off;
    };
}

systemctl enable --now bird

birdc show status
BIRD 2.0.12 ready.
BIRD 2.0.12
Router ID is 172.22.144.161
Hostname is gw-dn42
Current server time is 2024-07-21 00:45:07.047
Last reboot on 2024-07-21 00:21:37.824
Last reconfiguration on 2024-07-21 00:37:06.363
Daemon is up and running

birdc show protocols all kioubit_v6
Name       Proto      Table      State  Since         Info
kioubit_v6 BGP        ---        up     00:21:41.333  Established
  BGP state:          Established
    Neighbor address: fe80::ade0%wg-peer-kioubit
    Neighbor AS:      4242423914
    Local AS:         4242420263
    Neighbor ID:      172.20.53.102
    Local capabilities
      Multiprotocol
        AF announced: ipv4 ipv6
      Route refresh
      Extended next hop
        IPv6 nexthop: ipv4
      Graceful restart
      4-octet AS numbers
      Enhanced refresh
      Long-lived graceful restart
    Neighbor capabilities
      Multiprotocol
        AF announced: ipv4 ipv6
      Route refresh
      Extended next hop
        IPv6 nexthop: ipv4
      Graceful restart
      4-octet AS numbers
      Enhanced refresh
      Long-lived graceful restart
    Session:          external AS4
    Source address:   fe80::101
    Hold timer:       232.893/240
    Keepalive timer:  4.029/80
  Channel ipv4
    State:          UP
    Table:          master4
    Preference:     100
    Input filter:   (unnamed)
    Output filter:  (unnamed)
    Import limit:   9000
      Action:       block
    Routes:         761 imported, 541 exported, 276 preferred
    Route change stats:     received   rejected   filtered    ignored   accepted
      Import updates:           2838          0          6         25       2807
      Import withdraws:            2          0        ---          2          0
      Export updates:           3424        820         16        ---       2588
      Export withdraws:            6        ---        ---        ---         54
    BGP Next hop:   :: fe80::101
  Channel ipv6
    State:          UP
    Table:          master6
    Preference:     100
    Input filter:   (unnamed)
    Output filter:  (unnamed)
    Import limit:   9000
      Action:       block
    Routes:         745 imported, 490 exported, 257 preferred
    Route change stats:     received   rejected   filtered    ignored   accepted
      Import updates:            892          0          2         17        873
      Import withdraws:            2          0        ---          2          0
      Export updates:           1498        809         16        ---        673
      Export withdraws:            2        ---        ---        ---         54
    BGP Next hop:   :: fe80::101

birdc show route protocol kioubit_v6

ip route | grep -i wg-peer-kioubit

ip route get fd42:d42:d42:54::1
fd42:d42:d42:54::1 from :: via fe80::ade0 dev wg-peer-kioubit proto bird src fd28:7515:7d51:a::1 metric 32 pref medium

ping -c1 fd42:d42:d42:54::1
PING fd42:d42:d42:54::1(fd42:d42:d42:54::1) 56 data bytes
64 bytes from fd42:d42:d42:54::1: icmp_seq=1 ttl=63 time=5.18 ms

--- fd42:d42:d42:54::1 ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 5.178/5.178/5.178/0.000 ms

dig -tAAAA burble.dn42 @fd42:d42:d42:54::1

; <<>> DiG 9.18.24-1-Debian <<>> -tAAAA burble.dn42 @fd42:d42:d42:54::1
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 63469
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; QUESTION SECTION:
;burble.dn42.                   IN      AAAA

;; ANSWER SECTION:
burble.dn42.            3517    IN      AAAA    fd42:4242:2601:ac80::1

;; Query time: 7 msec
;; SERVER: fd42:d42:d42:54::1#53(fd42:d42:d42:54::1) (UDP)
;; WHEN: Sat Jul 20 23:02:27 CEST 2024
;; MSG SIZE  rcvd: 68

nameserver fd42:d42:d42:54::1
nameserver fd42:d42:d42:53::1
nameserver 172.20.0.53
nameserver 172.23.0.53
search dn42

DNS=fd42:d42:d42:54::1 fd42:d42:d42:53::1 172.20.0.53 172.23.0.53
Domains=dn42

ssh hcartiaux@shell.fr.burble.dn42
bsdgames-adventure

Welcome to Adventure!!  Would you like instructions?
yes

Somewhere nearby is Colossal Cave, where others have found fortunes in
treasure and gold, though it is rumored that some who enter are never
seen again.  Magic is said to work in the cave.  I will be your eyes
and hands.  Direct me with commands of 1 or 2 words.  I should warn
you that I look at only the first five letters of each word, so you'll
have to enter "northeast" as "ne" to distinguish it from "north".
(Should you get stuck, type "help" for some general hints.  For
information on how to end your adventure, etc., type "info".)
                              - - -
This program was originally developed by Will Crowther.  Most of the
features of the current program were added by Don Woods.  Address
complaints about the UNIX version to Jim Gillogly (jim@rand.org).

You are standing at the end of a road before a small brick building.
Around you is a forest.  A small stream flows out of the building and
down a gully.

ssh hcartiaux@shell.fr.burble.dn42
mkdir ~/public_html
echo See you space cowboy > index.html

curl -k https://shell.fr.burble.dn42/~hcartiaux/
See you space cowboy

ssh hcartiaux@shell.lax.burble.dn42
tracepath -n fd28:7515:7d51:a::1
 1?: [LOCALHOST]                        0.039ms pmtu 4260
 1:  fd42:4242:2601:1018::1                                0.262ms
 1:  fd42:4242:2601:1018::1                                0.212ms
 2:  fd42:4242:2601:1018::1                                0.218ms pmtu 1420
 2:  fd42:4242:2601:2a::1                                  0.626ms
 3:  fdc8:dc88:ee11:193::1                                 1.522ms
 4:  fdc8:dc88:ee11:197::1                               132.102ms asymm  3
 5:  fd28:7515:7d51:a::1                                 153.749ms reached

ping -c5 fd28:7515:7d51:a::1
PING fd28:7515:7d51:a::1(fd28:7515:7d51:a::1) 56 data bytes
64 bytes from fd28:7515:7d51:a::1: icmp_seq=1 ttl=61 time=153 ms
64 bytes from fd28:7515:7d51:a::1: icmp_seq=2 ttl=61 time=154 ms
64 bytes from fd28:7515:7d51:a::1: icmp_seq=3 ttl=61 time=153 ms
64 bytes from fd28:7515:7d51:a::1: icmp_seq=4 ttl=61 time=154 ms
64 bytes from fd28:7515:7d51:a::1: icmp_seq=5 ttl=61 time=153 ms

--- fd28:7515:7d51:a::1 ping statistics ---
5 packets transmitted, 5 received, 0% packet loss, time 4006ms
rtt min/avg/max/mdev = 152.951/153.448/153.995/0.390 msi

mtr -rc10 fd28:7515:7d51:a::1
Start: 2024-07-16T21:47:39+0000
HOST: shell-lax                   Loss%   Snt   Last   Avg  Best  Wrst StDev
  1.|-- fd42:4242:2601:1018::1     0.0%    10    0.3   0.4   0.3   0.5   0.1
  2.|-- tier1.us-lax1.burble.dn42  0.0%    10    1.0   0.9   0.8   1.1   0.1
  3.|-- LosAngeles1.ca.us.sun.dn4  0.0%    10    2.1   2.0   1.8   2.3   0.2
  4.|-- London1.uk.sun.dn42        0.0%    10  132.3 132.8 132.1 134.5   0.7
  5.|-- fd28:7515:7d51:a::1        0.0%    10  157.2 154.1 153.4 157.2   1.1

ssh hcartiaux@shell.fr.burble.dn42 iperf3 -s &
iperf3 -c shell.fr.burble.dn42
Connecting to host shell.fr.burble.dn42, port 5201
[  5] local fd28:7515:7d51:a::1 port 49198 connected to fd42:4242:2601:1016:216:3eff:fe01:2f1f port 5201
[ ID] Interval           Transfer     Bitrate         Retr  Cwnd
[  5]   0.00-1.00   sec  2.50 MBytes  20.9 Mbits/sec    0    269 KBytes
[  5]   1.00-2.00   sec  3.12 MBytes  26.2 Mbits/sec    6    398 KBytes
[  5]   2.00-3.00   sec  4.00 MBytes  33.6 Mbits/sec    0    404 KBytes
[  5]   3.00-4.00   sec  2.00 MBytes  16.8 Mbits/sec    0    408 KBytes
[  5]   4.00-5.00   sec  3.50 MBytes  29.4 Mbits/sec    0    413 KBytes
[  5]   5.00-6.00   sec  3.25 MBytes  27.3 Mbits/sec    0    433 KBytes
[  5]   6.00-7.00   sec  4.38 MBytes  36.7 Mbits/sec    0    467 KBytes
[  5]   7.00-8.00   sec  5.12 MBytes  43.0 Mbits/sec    0    516 KBytes
[  5]   8.00-9.00   sec  5.12 MBytes  43.0 Mbits/sec    0    584 KBytes
[  5]   9.00-10.00  sec  5.12 MBytes  43.0 Mbits/sec    0    673 KBytes
- - - - - - - - - - - - - - - - - - - - - - - - -
[ ID] Interval           Transfer     Bitrate         Retr
[  5]   0.00-10.00  sec  38.1 MBytes  32.0 Mbits/sec    6             sender
[  5]   0.00-10.12  sec  37.1 MBytes  30.7 Mbits/sec                  receiver

iperf Done.