eap_proxy

I haven't had any trouble with AT&T fiber. My bandwidth has never been capped. I don't run public servers from my home, but I do have family who stream from a Plex server and it's never been an issue. I bypass the AT&T router: https://github.com/jaysoffian/eap_proxy (I'm a crazy person so I also relocated their ONT to inside my home to keep it out of the summer temperatures.)

I built an EAP proxy that runs on my EdgeRouter 4 so that I don't have to use the router that AT&T would otherwise require me to: https://github.com/jaysoffian/eap_proxy It's been running for years now out-of-sight and out-of-mind. Which reminds me... I should probably take a look at those pull requests.

Wrote this for myself and tossed it up on GitHub. It ended up being more popular than I expected. Years later it's still quietly doubt its job on by EdgeRouter: https://github.com/jaysoffian/eap_proxy

With my wife, I built two kids both in college now. That's definitely the most impactful. In the online world, I've contributed bits and pieces to open-source here and there as far back as the late 90s. I think my first contribution was to the shadow package, but I've contributed to Apache, Radius, git, random packages that I use that I discover bugs in, etc. A python script I wrote to allow folks to bypass AT&T's residential gateway was used by more people than I ever expected: https://github.com/jaysoffian/eap_proxy

Making an ICMP echo query in Python from scratch: https://github.com/jaysoffian/eap_proxy/blob/78a058ffe67c253... The dnspython package is pure python and it's a lot of code, but it supports pretty much everything related to DNS: https://github.com/rthalley/dnspython

Another example: https://github.com/jaysoffian/eap_proxy/blob/master/eap_prox...

Yup, this is me: https://github.com/jaysoffian/eap_proxy AT&T has transitioned to issuing a combined ONT/Router, where this will no longer be possible, but apparently the newer gear doesn't have any of the performance issues of the Pace 5268AC. BTW, I was annoyed that AT&T installed the ONT on the southern wall of my home where it was baking in full sun everyday, so I relocated it myself into my network closet. You can just unplug the ONT and extend the existing fiber with an optical coupler and an SC-APC to SC-APC single-mode patch cable.

About 18 months ago I started using Letterboxd. Also, I like Roger Ebert's reviews. I wanted both in one place. So I wrote some code to scrape his nearly 8000 reviews from rogerebert.com and then import them to letterboxd: https://letterboxd.com/re2/ (I only put the first two paragraphs of his review on letterboxd then link to his full review on his site.) The hard parts of this were: - Extracting the text of his reviews correctly from his site's HTML. That wasn't too terrible though. - Matching his reviews to the correct movies on TMDB. This just required a bunch of trial and error and about 20-30 manual corrections. I employed various strategies to match by using movie title, year of review, year of movie release (if on his review, but often off by a year or two), director, producer, cast if on his review. I also built this for myself:

If you are willing to move to Ubiquiti hardware (recommended, security breach from today notwithstanding) there's a relatively straightforward bypass method where the authentication packets are forwarded from the ONT to the AT&T box but it's otherwise out of the loop, and you have fully native routing with the Ubiquiti USG (a really nice router and ecosystem). Instructions: https://medium.com/@mrtcve/at-t-gigabit-fiber-modem-bypass-u... Github project that makes it possible: https://github.com/jaysoffian/eap_proxy It's definitely not plug and play but I've been using this setup for a year and a half and I get my full 1gb bandwidth throughout my network with lots of hosts.

If you have some time, you can MITM the 802.1x auth packets [1] and use a less crappy router. I run this with a VyOS router and the same 5268ac that you have, but it works with things like Ubiquiti routers too. The only catch is you need three NICs on your router, but a cheap USB 10/100 one will do for the port that connects to the 5268ac. Another option is getting the 802.1x certificate out of a hacked router, but it's not possible as far as I know on the 5268ac. You could buy a hackable ATT router but they're not cheap. Some sellers even sell the key by itself. Mysteriously, doing this fixed an issue I previously had where SSHing into AWS would fail. [1] https://github.com/jaysoffian/eap_proxy

How are you bypassing the EAP authentication on your AT&T provided gateway? Are you using https://github.com/jaysoffian/eap_proxy ? My router is also getting a public IP address, I've set my AT&T gateway to bridge mode, but the AT&T gateway is still a monster-in-the-middle, a tumor I can't excise because it has to be between your router and the ONT or else the fiber turns off.

I previously used Hurricane Electric, too, but Netflix blocked it. A more practical challenge, Hurricane Electric is a 6in4 tunnel, not layered over TCP nor UDP. Some ISP-provided residential gateway devices (AT&T) don’t support 6in4, not even if you configure your device as a “DMZ” with a public IP address. Also, I frequently find myself in situations with IPv4 NAT and no public IPv4 addresses at all. The only free IPv6 tunnel service that supported UDP was SixXS, which shut down in 2017. Nowadays, AT&T supports IPv6 natively, and I went through an annoying amount of effort to bypass their gateway device and control the entire /60 instead of being limited to a /64 and being limited by their NAT. https://github.com/jaysoffian/eap_proxy

Not totally relevant, but if you have AT&T Gigafiber (and you don't have TV or landline phone service), you can actually bypass AT&T's god-awful router by getting an UBNT EdgeRouter or USG and setting up eap_proxy [0]. [0] https://github.com/jaysoffian/eap_proxy/

I wrote this to scratch my own itch but mostly just for the fun of it and some people ended up using it. https://github.com/jaysoffian/eap_proxy This was a really simple project but tickled all my fancies: Python, low-level, networking, reverse engineering, system administration. Just do it! Who cares if people use it? Alternatively, contribute something to some open source project you use. I’ve done that too. Just small stuff here and there but that’ll guarantee someone uses your code if that’s what’s important to you. It only takes 39 commits to get on this page: https://github.com/git/git/graphs/contributors :-)

You can bypass the AT&T RG: https://github.com/jaysoffian/eap_proxy/ That said, I haven’t had any trouble with it as a router.