Most active commenters
  • the_mitsuhiko(5)
  • Aaron2222(3)

←back to thread

250 points pabs3 | 41 comments | | HN request time: 1.333s | source | bottom
Show context
pabs3 ◴[] No.41643508[source]
BTW: in the EU there is movement towards mandating ISPs allow BYOD, including fibre ONTs.

https://fsfe.org/activities/routers/

replies(5): >>41644411 #>>41644682 #>>41645903 #>>41645983 #>>41650536 #
1. the_mitsuhiko ◴[] No.41644682[source]
I think it's vital that you can run your own modem but I'm not convinced that it's a good idea to force a custom ONT. An ONT is about as dumb as it gets and it's entirely transparent on the stack.

The benefit with an ONT (or even DOCSIS dumb modem) managed by the ISP is that they can do fleet upgrades much quicker as they don't have to keep all old protocols running. For instance the GPON -> XGSPON upgrade that some ISPs are running right now (or DOCSIS 3 upgrade) really only works well if you can turn off the old protocol which requires swapping out all ONTs/DOCSIS modems.

If customers bring their own stuff then you're stuck with these things for much longer.

replies(7): >>41644842 #>>41645271 #>>41646144 #>>41646849 #>>41648076 #>>41648114 #>>41659323 #
2. cillian64 ◴[] No.41644842[source]
In some places it sounds like the ONT is integrated with the router (like with DOCSIS), and being forced to use the ISP’s router is a problem.

But in cases where the ONT just looks like a media converter and you have a separate router I really can’t see any reason for the customer to provide their own ONT. Especially given PON is a shared medium so a misbehaving ONT can affect other customers.

replies(6): >>41644886 #>>41645412 #>>41645844 #>>41647426 #>>41647963 #>>41649367 #
3. the_mitsuhiko ◴[] No.41644886[source]
> In some places it sounds like the ONT is integrated with the router (like with DOCSIS), and being forced to use the ISP’s router is a problem.

I agree, and that is a problem. The rules and regulations are different in different countries. In Austria for instance the ISP can force you to use a specific DOCSIS modem or ONT but they have to provide you with a transparent way to connect to it (bridge mode etc.). Which from where I'm standing is a good tradeoff because it gives the ISP the flexibility to do mass migrations without having to consider very old deployed infrastructure.

With PON I think it doesn't matter all _that_ much but for instance people running ancient DOCSIS modems and limited frequency availability has been a massive pain for people stuck with DOCSIS infrastructure that want more upstream and can't.

replies(3): >>41647590 #>>41648111 #>>41654599 #
4. pbasista ◴[] No.41645271[source]
> If customers bring their own stuff then you're stuck

Why? There is nothing preventing an ISP from saying that from date X, only protocols A, B and C are supported. If you want to use your own device, make sure it supports these protocols.

In other words, the requirement to allow customers to use their own devices does not mean that they can choose all available protocols. The allowed protocols can still be controlled by the ISPs.

replies(3): >>41645310 #>>41645558 #>>41646384 #
5. thefz ◴[] No.41645310[source]
> Why? There is nothing preventing an ISP from saying that from date X, only protocols A, B and C are supported. If you want to use your own device, make sure it supports these protocols.

A lot of overhead for ISP support in those cases in which a customer knows they can buy any router with any ONT, plugs it and forgets it without zero knowledge of what a protocol even is.

6. Aaron2222 ◴[] No.41645412[source]
> But in cases where the ONT just looks like a media converter and you have a separate router

That's how it works in New Zealand, but we take it a step further. The GPON/XGS-PON fibre network is run by a separate company[0] from the ISPs (and the company running the fibre network is prohibited from providing internet services[1]). So the ONT just functions as a media converter[2], and all our ISPs deliver internet over the same fibre network. This decoupling between the fibre network provider and ISP means you can change ISPs without any swapping of ONTs or repatching of fibre[3][4] (in fact, the process can be entirely automated, switching to some ISPs can take effect within an hour or two of placing the order). That and most ISPs allow bringing your own router (as there's no monopoly in the ISP space).

[0]: The NZ Government contracted four companies to build, own, and run fibre networks (three being new companies co-owned by local lines companies and the government to serving their local area, with the rest of the country being served by Chorus, the company that owns the country's copper network). These fibre companies are heavily regulated (including how much they can charge ISPs).

[1]: In fact, this requirement resulted in Telecom (the company that owned our copper network and who was one of the companies that provided phone and internet service to consumers) being split up, with Chorus being spun off, owning the copper network and owning the fibre network for the majority of the country.

[2]: Chorus did start deploying ONTs with a built-in router/AP a while back. They did offer this to ISPs to use, but uptake was very low, so it's since been discontinued.

[3]: I don't know how it works over in European countries where ISPs run their own fibre networks when switching ISPs, I assume they have to either install their own fibre line into the premises or the existing fibre is repatched to their network?

[4]: The fibre companies are required to offer use of their fibre network directly to ISPs, with the ISPs PON network running in parallel to the fibre company's, with the ISP providing their own fibre splitters and ONTs (which would be run on a second fibre line that each premises already has) and running their own OLTs. I believe this requirement still exists, but no-one ever took them up on it.

replies(2): >>41647191 #>>41649217 #
7. appendix-rock ◴[] No.41645558[source]
Hahahaha! Have you ever done any customer support!? This is not how it works.
replies(2): >>41645639 #>>41647098 #
8. tuetuopay ◴[] No.41645639{3}[source]
Well this is about allowing customer supplied ONT, not supporting them. As in, you have to follow upgrade procedures announced X days in advance, etc.
replies(2): >>41645910 #>>41647554 #
9. jeroenhd ◴[] No.41645844[source]
In theory the ONT can act like a listening device. They're also often Linux or BSD devices that can get hacked.

If you're paranoid, you may want to run an ONT that you control, just in case. I doubt it's something that matters to a lot of people, but even if it only matters to some, it shouldn't be made impossible for those that want to.

RE: misbehaving hardware: the same is very much true for cable internet and there are plenty of countries where people hook up their own modem without any trouble. If someone wanted to mess with the fiber network they could just disconnect the ONT and shine a laser pointer down there. All off-the-shelf devices are built to just work and follow the necessary standards, because there's nothing to be gained by messing with the PON network like that.

replies(2): >>41645896 #>>41649024 #
10. the_mitsuhiko ◴[] No.41645896{3}[source]
> In theory the ONT can act like a listening device

Sure, but so can the other endpoint. Even many AON installations these days are just hidden XPS-PON and similar, you just never see the ONT. (See a lot of ISPs in Switzerland)

replies(1): >>41647934 #
11. the_mitsuhiko ◴[] No.41645910{4}[source]
In theory yes. In practice that might work that way if ~5% of your users are in that situation. If ~50% of your user base is running on a legacy protocol and you're running into Churn risks, the company is going to re-evaluate if they want to retire the old protocol.

There _is_ a reason even legacy cable TV and ancient DOCSIS channels are still being available in many countries because actually retiring a lot of old modems has shown to be risky to the business.

12. zokier ◴[] No.41646144[source]
> I think it's vital that you can run your own modem but I'm not convinced that it's a good idea to force a custom ONT.

Did you mean "router" instead of "modem" here?

13. naming_the_user ◴[] No.41646384[source]
You are at the end of the day still running a business.

It's like saying that Spotify could suddenly decide to retire support for Android 12 or something. They could, but how many customers are they going to lose and how much support burden is that going to generate?

replies(1): >>41661898 #
14. teeray ◴[] No.41646849[source]
That’s all great and wonderful, but I shouldn’t have to pay to rent a device that really only benefits the ISP. I would rather have a slick ONU SFP+ module in my router, than yet another plastic block on my telecom panel I need to find space and power for. “This makes our network easier to manage” AND “we make extra money doing this” is double-dipping.
15. beerandt ◴[] No.41647098{3}[source]
I mean you're right in general- but we're talking about a subset of customers that want to mess with their own fiber connection.

That's either a horde that understands the issue, or is an even smaller subset that is going to be a pita anyway.

16. ensignavenger ◴[] No.41647191{3}[source]
I am curious about this model. How well is this working in practice? How many ISPs do you have to choose from, and how do they differentiate? How close to wholesale are the retail prices?
replies(3): >>41650591 #>>41651587 #>>41654508 #
17. woodrowbarlow ◴[] No.41647426[source]
as long as the ISP isn't charging a rental fee for the ONT.
18. Rinzler89 ◴[] No.41647590{3}[source]
>but they have to provide you with a transparent way to connect to it

Can you provide the source for that? Because the Wifi 6 enabled Modem from Magenta doesn't support bridge mode.

replies(1): >>41647695 #
19. the_mitsuhiko ◴[] No.41647695{4}[source]
> Can you provide the source for that?

There has not been an official ruling, but that was not necessary because there is a soft commitment by ISPs to provide bridge mode which was enough for the RTR: https://www.rtr.at/TKP/was_wir_tun/telekommunikation/konsume...

But they are very explicit:

> Gleichzeitig gibt es eine gesetzlich garantierte Endgerätefreiheit (Art. 3 Abs. 1 TSM-VO). Auf Grund dieser haben alle Nutzer:innen das Recht, einen Router ihrer Wahl zu verwenden. Stellt der Anbieter einen Router mit integriertem Modem zur Verfügung, muss es möglich sein, diesen Router in den sogenannten "Brigde-Modus" zu schalten.

> Because the Wifi 6 enabled Modem from Magenta doesn't support bridge mode.

It does. Call customer support and they enable it for you. It turns into a dumb modem afterwards behind which you need to put your own infrastructure.

It's also mentioned on their FAQ: https://www.magenta.at/faq/entry/~technische-anfrage~kabelin...

20. bobmcnamara ◴[] No.41647934{4}[source]
And so can all the other endpoints if they're not encrypting downstream traffic
21. bobmcnamara ◴[] No.41647963[source]
I replaced my Google fiber ONT by cloning the network parameters into a cheap SFP one because the Google supplied one only supports gigabit Ethernet but uses 2.5/1.25gbit optics. The upgrade reduced latency a small, but measurable amount, and improved my NTP jitter.
22. NoMoreNicksLeft ◴[] No.41648076[source]
If ISPS weren't cheapskate assholes, then they'd offer the ONT SFP module, so I didn't have some shitty plastic doodad hanging from my router because there's no place to put a mounting bracket for it and get it in the panel. I'm sure you'll tell me why the black bakelight rotary telephones were the only telephones I really needed, and I was just making trouble for little ole AT&T when I wanted something more.
23. kilburn ◴[] No.41648111{3}[source]
This is the same in Spain: ISP-provided ont/router combos are fine but they must have a bridge mode (you may have to call support to enable it).
24. neelc ◴[] No.41648114[source]
When I had CenturyLink, I replaced the ONT via a JTAG cable on the new ONT. The stock CL ONT (Calix 716GE-I R2) had a 16384 connection limit, which prevented me from running high-bandwidth Tor relays. The new ONT (Calix 803G) did not.

Calix for some reason makes it easy to clone some models.

I have a post on this: https://www.neelc.org/posts/clone-calix-ont/

Now I'm in NYC with Verizon Fios where I don't need a cloned ONT. Woo! The Verizon ONT is big and has a huge power brick, presumably because of RFoG alongside GPON.

replies(3): >>41648516 #>>41649081 #>>41649310 #
25. ImSorryButWho ◴[] No.41648516[source]
That's very cool, but just to point out: that's not JTAG, it's serial (UART).

JTAG is a much lower level protocol, typically used for hardware or low-level software debugging. Serial/UART gives you a command-line interface to the software that's running.

Using a JTAG interface is a lot more complicated. If you're interested in playing with it, check out OpenOCD.

26. worewood ◴[] No.41649024{3}[source]
In the year 2024 it is prudent to think of everything that leaves the premises as potentially listened upon.

That's why we've got HTTPS an DoT/DoH so widespread these days

replies(1): >>41652211 #
27. muppetman ◴[] No.41649081[source]
How is the ONT, a Layer2/Ethernet device, involved in L3 sessions? Was it also the default gateway/router all rolled up into one?
replies(1): >>41649682 #
28. bauruine ◴[] No.41649217{3}[source]
About [3]. In Switzerland most of the fiber network is built by Swisscom, a former telecom monopoly and still 51% state owned company that also owns the old copper network. Other ISPs can use the network but everyone has their own router with an integrated ONT. ONTs as a separate device are pretty much unknown. On XGS-PON only certified ONTs are whitelisted [0] The wholesale price list is public [1] For actuall prices see [2] They differentiate mostly through support, price and additional services like TV. Data caps are basically unheard of (I don't call something like the fiber7 FUP of 600TB a data cap) and CGNAT is, while not uncommon, at most a phone call to disable it.

[0] https://www.swisscom.ch/dam/swisscom/en/ws/documents/E_BBCS-...

[1] https://www.swisscom.ch/content/dam/swisscom/de/ws/documents...

[2] https://en.comparis.ch/telecom/zuhause/angebote/internet-abo

29. bauruine ◴[] No.41649310[source]
Consumer routers are all extremely limited when it comes to many connections. Even an Ubiquiti UDM Pro only allows 65536 by default.
30. cmsj ◴[] No.41649367[source]
Definitely agree. The smart place to demarcate the connection is the point at which a device does DHCP/SLAAC to get whatever IPs the ISP assigns the customer.
31. neelc ◴[] No.41649682{3}[source]
There is a mis-feature on the ONT called "Broadcom Packet Flow Cache". It apparently speeds up TCP sessions but at the expense of allowing a large amount of then.

Lumen fortunately moved off these ONTs. However, the new Smart NIDs have their fair share of issues from what I heard. I moved out of Lumen territory so have no experience with them.

32. cycomanic ◴[] No.41650591{4}[source]
I believe the number of ISPs differs regionally (I suspect due to where they have network equipment), but I just put in my adress into the main search website (https://www.broadbandcompare.co.nz) and it came back with 13+ ISPs (although some of them might belong to same parent companies). Prices tend to be quite similar (which I suspect indicates that it is operating close to cost) and differentiation happens mainly on bundling with other services (mobile, power, TV, included Netflix...) Keep in mind that I have only lived here for 1.5 years, but from my limited experience it definitely seems like there is a healthy amount of competition.
replies(2): >>41651212 #>>41654457 #
33. ensignavenger ◴[] No.41651212{5}[source]
Cool, one similiar network in the US is UTOPIA in Utah... they seem to have similiar results. https://www.utopiafiber.com/residential-pricing/

But I have read that some other communities that have tried the same model have had trouble attracting ISPs.

34. bdavbdav ◴[] No.41651587{4}[source]
The UK does the same thing. openreach own the infra and sell the transit wholesale to providers. It works really well on the whole.
35. lxgr ◴[] No.41652211{4}[source]
There’s still a huge privacy impact if anyone can listen to your traffic (since hostnames are almost always plaintext due to SNI).
36. Aaron2222 ◴[] No.41654457{5}[source]
Chorus does let ISPs handover in just a single or a couple of points to provide service nationwide (well, for the areas they serve), instead of needing to do it at all 27 handover locations. I imagine it's possible to interconnect with the other fibre companies over a backhaul connection as well. So smaller ISPs can definitely offer service nationwide without having to put networking equipment all over the country.

My understanding is that the margins on fibre connections for ISPs are quite slim. The three big telcos do both broadband and cellular, and they definitely try and push customers with lighter needs over to wireless internet delivered over 4G or 5G (which has more margins for them). There has been a bit of consolidation among the major players (one of the big telcos (2Degrees, who do both broadband and cellular) merged with one of the big broadband-only telcos (Vocus) a couple of years ago). But there's plenty of smaller ISPs. And a couple of the electricity retailers have gotten in on providing internet as well. And it's not uncommon for local WISPs to offer fibre as well.

Differentiation between ISPs is definitely mainly on cost, quality of support, and bundled services. They all have their own networks (the fibre companies only provide L2 connectivity from the customers to the ISPs), and there can be some differences there. For example, another of the big broadband+cellular telcos (Spark, who was the ISP side of Telecom before they were split up) is the only major ISP that doesn't offer IPv6 and doesn't peer at local peering exchanges.

Some ISPs have cheaper plans with data caps, but many ISPs don't even offer data-capped plans, and everyone offers uncapped plans. Similarly, most ISPs let you use your own router. And about the only variation in how you'd need to configure your router is PPPoE vs IPoE/DHCP and VLAN 10 vs untagged. So you can usually switch ISPs and all you need to do is maybe change your router config.

As a side note, of particular interest to the audience here is the existence of a new-ish residential ISP (Quic) that offers things like static IP for a one-off cost, /28 IPv4 subnets, self-service rDNS management, and self-service access to the ONT status, connection logs, etc. One of the advantages of having competition in the ISP space.

37. Aaron2222 ◴[] No.41654508{4}[source]
It seems to be working quite well in terms of ISP choice (see my reply to cycomanic). And Chorus is offering up to 8 Gbps connections over XGS-PON, with most of the other fibre companies either also offering XGS-PON or working to offer it.

I suppose there are a couple of downsides compared to being able to use your own ONT, in that residential customers can't get SPF ONTs, and Chorus's XGS-PON ONT is quite large and not wall-mountable, which has caused a few people to hold out on XGS-PON offerings (they're working to offer a smaller one, but it got set back a bit, and they also won't start offering it until they run out of the old XGS-PON ONTs). But that's all quite minor (a residential customer wanting an SPF ONT is very niche indeed, as is a genuine need for a residential XGS-PON connection).

38. abofh ◴[] No.41654599{3}[source]
So at least in Portugal, my ISP gives me their device, it has a bridge mode, but it also serves as their wifi access point network (think Xfinity wifi) -- which I don't object to except that their wifi can't be disabled and their signal interferes with my wifi access points.

I want a dumb gpon sfp not because they won't give me a bridge, but because their bridge makes too much noise.

replies(1): >>41662560 #
39. bcrl ◴[] No.41659323[source]
You can actually run GPON and XGSPON simultaneously over the same PON segment as they use different wavelengths of light, so there is no reason to rip out all the GPON nodes at the same time. This allows deferring the truck roll and ONT costs until the customer upgrades to higher speeds.

With DOCSIS there is much more pressure to upgrade all CPE as any given chunk of RF spectrum can only run one version of DOCSIS. One 6MHz channel of RF spectrum on coax has a puny amount of bandwidth compared to a single lambda on fibre.

40. pbasista ◴[] No.41661898{3}[source]
I am unsure if the analogy you have offered is relevant here.

The major difference is that the ISPs in this particular case do not need to offer any support apart from listing standardized protocols which are supported. If someone brings in their own device, it is on them to set it up and make sure it works with the currently supported protocols.

Also, this business model is nothing new. For example, mobile network operators have been using it for decades. Their base calling services might remain working even on the oldest phones. But when it comes to data services, they are gradually upgrading. Many of them are switching off their 3G networks to free up frequencies, for instance. Millions of people are affected. And yet, there is no drama around it.

One of the reasons might be that these phase-outs are announced and planned very long time in advance so the customers have the time to prepare. And they have a choice. Either upgrade their phones or live without fast-ish data or switch carriers if possible. Which is fair, in my opinion.

It seems to me that the ISPs could use a similar approach and be just fine.

41. tlavoie ◴[] No.41662560{4}[source]
I have to wonder, why can't their wi-fi be disabled? Is it one of those scenarios where it is being used to support other ISP customers in your area?

My ISP (note: also owned by my employer) doesn't have this, so the modem I've got is theirs, but I can disable wi-fi. I do, too, so the only client on this thing is my firewall. I assume that everything past my firewall could potentially be hostile.