OpenWRT runs on a lot of hardware and its a great way to extend the life of a router past the manufacturers patches as well as gain a lot of capabilities. I wouldn't buy a commercial router that wasn't supported by OpenWRT now.
https://openwrt.org/voting/2025-02-12-openwrt-two
Otherwise this router from GL.iNet has OpenWRT preinstalled, Wifi 7, 5x2.5G:
If you want plain unassuming looking hardware get dedicated wifi access points and place them all over the building. There are plenty of those shaped liked big smoke detectors.
If you want single device there are also quite a few trash can shaped home routers.
Somehow ordinary non tech consumers got it into their heads that something which looks like a f117 with many spiky antennas sticking out of it must be faster.
I have a U7 Lite and it is very directional compared to other routers I have used (spider style, trash can style, etc.)
Personally, I find it better to have multiple low end access points (like the TP-Link Archer C80 which has 3x3 MIMO on 5 GHz) deployed to achieve excellent coverage in a house. Sadly, the U7 line is a bit too expensive for that. Plus, I'm loathe to deal with UniFi deployments now that I am well versed in the glass jaws in the platform.
There really is space in the market for a product line that is basically what UniFi is, but done "right". Ie: can be debugged or you can fix it without an internet connection or recover the system when the owner forgets the password and lost access to the email account used for 2FA. UniFi is an absolute nightmare the moment anything goes even slightly wrong.
Almost none of the Ubiquity stuff looks like that. Xiaomi has plenty of white/gray cylinders or boxes with rounded corners. TP-link has whole Deco series, Asus has ZenWifi series. Majority of MikroTik non rack mounted hardware also targets more neutral design.
You also have to consider who is the target audience for dedicated all in one wifi routers. Majority of regular people are fine with the WiFi that's builtin the modem provided by their ISP. Any serious commercial office will have the IT team to setup separate (rack mounted) router/switches and ceiling mounted access points that look like previously mentioned smoke alarms. People with large enough house to need multiple access points but aren't IT specialists willing to wire up Ethernet everywhere -> various product lines described as mesh routers. Like the trash can shaped TP link Deco series and similar from other manufacturers. If your house is not that big, nothing stops you to buy one of them and ignore the mesh functionality. That leaves people living in small enough house/apartment to be served by single router/switch/Wifi access point combo but for some reason not being satisfied what the ISP provides and also wanting multiple wired connections. Exclude the IT specialists willing to set up home lab and you are left with gamers (potentially impressed by black spider) and few others who have hopefully have enough rationality to place the router where it's not an eyesore or picking some of the previously mentioned stuff.
Another factor is move from antennas that are simple correctly size wire maybe with some spiral which easily fits in small rounded antenna to flat pcb antennas which encourage more rectangular design of the antenna housing and rest of the router. A lot of it is still partially just for the show, trying to give the impression "this one has more/bigger antennas must be better WiFi", but oversized partially empty plastic antenna housing were a thing even before current spider trend.
White slightly rounded 8 legged spider still looks like spider. Trash cans have a bunch of antennas but they hide them in larger volume. Dedicated access points have the advantage of being placed more predictably (near ceiling with little obstacles), they also have advantage of being distributed less work for each of them instead of single router covering whole house.
As for why it needs multiple antennas, it's for MIMO and beam forming.
I bought it in anticipation of the Nintendo DS having WiFi capabilities, which I had never heard of before (I was like 13 or 14 then). Had to convince my parents to get broadband internet too.
And they don't look fugly.
It is a tremendous shame that cisco hasn't opensourced / unlocked this generation of kit.
Cisco's mobility express just runs on one of the APs and can fail over to another of the APs; it's a slick piece of software.
And yes, it isn't open source, which is a real shame since cisco's killed it (as far as I can tell) and it probably represents an enormous and sophisticated investment in effort and engineering and it'll just melt into entropy.
I loath cisco and don't recommend their kit lightly. In this one case, they seem to have accidentally made (for my use case, running 5 APs at home) a perfect product. They're cheap, extremely reliable, my wife doesn't hate them (though mostly they're in the attic or basement; only one is visible), they've got a (relatively) easy to use UI that manages all of them at once, and (Except for the switch 2) they seem to just work even though I've got vlans and lots of SSIDs and other goofy stuff).
If I had a simpler house to support, I'd just get a single WRT capable "big fast" router / AP...
You have any docs on how to set these up? I believe a firmware change is required.
That said, the cisco firmware for this specific generation of access points is actually free and trivial to get -- create yourself a cisco account and go to downloads and download the 3802 "mobility express" firmware. The last ME firmware came out in 2024 and all this equipment and software is now totally unsupported by cisco so don't run PCI transactions at home... I'd also avoid running their captive portal or some of their other weird features...
Actually setting it up is a bit of a chore but it is a full featured "enterprise" (cough) AP management system with all the knobs and twiddles you could ask for.
It's really only a good idea if you don't value your time (like me) or if you have a sprawling plaster house where you want to have lots of cheap access points instead of a couple super fast ones.
Lastly, for better or worse, I haven't been able to make my kid's switch 2 work on the network.
Uni has an adapter for USB to Ethernet (if wired is an option) that works with those Nintendo devices, I have one that an extended family member borrowed (unknown if the Switch was a 1 or 2).
[1]: https://www.networkworld.com/article/967954/beamforming-expl...
But it's probably easier / cheaper to get maximum coverage at larger distances from a single AP using a big array of sticking out antennae, and that's what a normal home user is going to want.
I feel like there's an untapped market here. I want them to go with the alien spaceship concept all the way thru; I wanna see mini Death Star mesh nodes, X Wing routers and Millennium Falcon access points, dammit. Or hell, cross the multiverse and give me Borg Cube mesh nodes, complete with green shiny LEDs that actually indiacte network/hardware status.
I love the phrasing, we usually call this design language as transformers mating.
I guess they think consumers need them to look like this crap.
This lends itself to a spider like design with just a ton of antennas sticking out of a box, or a trash can with the antennas hidden inside around the outside edge.
Do you have other ideas for how to lay it out?
https://mikrotik.com/product/hap_be3_media
https://eero.com/shop/eero-pro-7
https://www.asus.com/us/networking-iot-servers/whole-home-me...
Another setup is circular or semicircular. I suppose it allows for a more uniform directional diagram across the entire 360°, because a straight phased array has harder time emitting sideways.
On the other hand, if you can live with Wifi 6 and only 2x2.5Gbps ports (and 4x1Gbps), Flint 2 is powered with a Mediatek chipset, that runs a 100% vanilla OpenWRT.
Both are 1GB RAM, 8GB emmc little beasts that can even run some docker containers. IMHO Flint2 is in the top 5 for SOHO OpenWRT supported routers
I got the Flint 2 to avoid that, and I'm really happy with it for the reasons you mentioned.
BTW, even though there are mentions that OpenVPN is accelerated on this router, WireGuard is still times faster. I had to switch from ExpressVPN to Proton as ExpressVPN doesn't support WG profiles.
Glinet are doing a great job with their routers. I have the Beryl AX which is fully openwrt compatible. The new Beryl 7 is also fully compatible now. Mediatek chips might not be as high performance as Qualcomm but they make up in openness.
Edit: They just announced Flint 4 with a Mediatek chip:
I didn't realise routers like theirs existed, and had been paying through the nose for your standard brands like TPLink and hoping it didn't get popped.
I have two old Amplifi HD units in wireless backhaul mesh that I’d like to upgrade
T-T. Any update on the timeframe (and presumably also I would expect the expected price to be solidly in the mid to high 300s at this point)?
But Israeli, no can't find that. Sure you didn't confuse it with some other company?
They have a tiny Hong Kong office that handles marketing as well as a US office for technical support, but the entirety of engineering and manufacturing is in Shenzhen and Chengdu.
Because they provide a hosted site-to-site VPN service they are obligated to hold a B13 license. One of the conditions of which is the ability for the Chinese government to request access to devices worldwide.
I've got 10Gbps fiber at home (egregious, I know), and the only OpenWRT router I found that can saturate it is the Turris Omnia NG[0]. The price tag is a notch up from others but it's legitimately one of the best pieces of hardware I've ever owned. A perf3 test against an in-town server was able to pull 800 Megabytes per second; the router is no joke.
If you have a thick line to your ISP, I highly recommend!
Why not use OPNsense on a mini PC?
The Omnia NG is fanless, meaning quiet and power-efficient. It's also small and relatively stylish. The small hardware LCD is very handy, and everything Just Works. The whole package is just so well put together.
I mean is it supported by vanilla OpenWRT image?
I do like the board though.
There are even people who have gotten NixOS running on it, apparently.
It's easy to customize, I have a script to notify me when a new device connects to my router[1] and I also have a script to notify me when someone logins into my router[2].
Earlier I used to connect my openwrt router directly to the ISP's switch but now a days they've started to force their 'AI powered' router which is centrally managed. I now have to usee OpenWrt to defend against the ISP's router first and then the broader public network.
[1] https://abishekmuthian.com/openwrt-new-devices-connection-al...
Huh, how? Either ISPs are doing deep packet inspection, and can track your browsing data regardless of what firmware you run, or they don't, and it still doesn't matter what firmware you use on your switches/routers, you ISP still won't be able to see TLS traffic, which most internet traffic is today.
I would rather just connect a separate wireless AP to my switch, preferably also with PoE. And then I can upgrade and expand that as needed while leaving the perfectly fine router alone.
Is there any closed-sourced firmware that exceeds OpenWRT performance on the same level of hardware?
I think that some proprietary firmware may have hardware optimizations that aren’t possible in a community-developed environment.
You can get a Wifi 7 device and 2x2.5GBps with Wifi 7 support already with the Asus BT8 and a few other devices. Asus's bootloader firmware flasher will take the initial OpenWRT image so its really quite simple to get going.
Why choose this over the https://openelab.io/a/s/products/banana-pi-bpi-r4-pro-1 ?
Fot example from my ISP I can have two options for PPPoE connection, first is legacy IPv4 only but lacks IPv6, second is IPv4 but behind CGNAT and with modern IPv6. With OpenWRT, I am able to make two PPPoE connection over the same wire and have the best of both worlds.
I would really love to see something like this with just 10 sfp cages, no switching all routed interfaces. A real open source alternative to mikrotik.
There's a couple of fun examples like that. xda-developers is named after the O2 xda, a smartphone from 25 years ago that not many people ended up developing software for.
LinkSys got sued to release the firmware as it was GPL linked. This dump got modified to make the WRT54G way more powerful than LinkSys ever planned but they got to sell the hardware for years more than would have been expected at the time.
A mainstream hardware company releasing a specific product SKU to support third party firmware really sounds crazy from the perspective of the current market where a substantial portion of the value in selling hardware is supposed to come from subscriptions and surveillance.
Despite this, I could expect 3-5 people to hunt me down at PyCon when I was running the wireless to tell me that I had misconfigured the wifi because it was set to low power. More reports of that than reports of wifi not working, IIRC. ;-)
(I was running the wireless because the people we paid do to the wifi would just set up one or two APs and crank the power)
Only if your clients are competent at roaming.
Been using OpnSense for about 8 years now though... it's just been the best option for me, I use separate commercial AP.
I used a pair to provide Internet access at a Customer's construction site back in 2010. Cell phone hotspot wasn't a thing for me yet. We took a pair of WRT54Gs, configured one as a WiFi client, the other as a bog-standard router/AP, connected the LAN from the client to the WAN on the router/AP, pur a directional antenna onto the "client", and pointed it down the road toward a big business who offered free WiFi for Customers. We leeched off that until the real Internet service got installed. (It was a restaurant and we ate there at least once so we were Customers, right? >smile<)
---
They don't often offer inexpensive, deliberately-hackable units like the WRT54GL, I think, because of support costs.
And by "support costs," I don't mean that it was expensive to hold users' hands while they installed custom firmware -- that's never been a service that has been provided.
Instead, I mean that there are people who start goofing with this stuff and run out of skill when hacking close-ish to the metal on this kind of hardware. They don't know how to get themselves out of a jam and unbrick their device.
So they find a way to lie their way into getting an RMA and get the device replaced under warranty, and that's expensive for companies to deal with.
(Those people fucking suck.)
I just received my OpenWrt One because I’m tired of dealing with the questionable quality of most routers.
And I don’t feel like resurrecting my old PC that I used as a router for a while. I stopped doing that because it’s loud. Pretty sure the power supply fan is about to fly off.
But Qualcomm WiFi pci card with giant antenna in a dirt cheap PC running ancient Ubuntu and a simple hostapd setup is so far the most reliable WiFi router I’ve ever had. I hope openwrt one is even better :-)
The learning curve is a little steeper than more consumer stuff but it is by no means beyond a person who is capable of using OpenWRT and the docs and forum support are better than 99.9% of open source projects I have seen over the past 25 years.
So that's 10 kWh/mo for the PC vs 4 kWh/mo for the OpenWrt One.
Spending hundreds on new hw to save $20 a year in power cost.
I don't think you're quite right on this, or at least you're imagining using something inappropriate when the comparison here involves buying something new right? So it's not "OpenWrt One" vs "whatever you happen to have in your closet" but "OpenWrt One (~$110-130)" vs "whatever can be bought used for $110-130, if you have nothing appropriate". And while they won't go to near-zero like some ARM stuff might, idle power for PCs improved a ton after around the 2013 era. There are lots and lots of small systems available for equivalent prices on Ebay or the like made since then (like Intel NUCs or various other mini PCs) that will idle around 4-10W. Like to take something in the same price range as this OpenWrt One, I regularly see 7th gen era NUCs going for <$140. An i5-7260U will have single threaded performance about the same as the MediaTek in this unit and multi-thread close, but will also generally have 8-16 GB of RAM and often a 250-500GB NVMe drive as well. It'll probably have only one native ethernet, but USB or TB adapters work fine with Linux & FreeBSD at this point.
There's definitely a question of values and exactly what you're trying to focus on, but there are a lot of niceties in having lots of RAM on tap and extremely standard fallbacks to interface with a system, back it up, etc.
>or an OpenWrt One which will possibly also have newer, faster WiFi standards (WiFi 6)
If you want an AIO style device that's definitely a consideration, though again USB WiFi dongles are a thing too. But regardless of router choice, for someone considering going beyond what their ISP offers at all I think it's usually well worth spending the $50-80 to get a dedicated wireless access point. It'll make a major difference in real world performance in most spaces I've seen to just physically have a unit in an ideal spot (on a ceiling or high up on a wall, away from metal). Aesthetically the clean disks or rectangles those tend to have also blend well and mean that various boxes can be tucked away. And of course you get to upgrade networking bits separately from your router.
Anyway, definitely good there are multiple approaches, this is an area of life where people can have very different needs driven by very different physical environments and "stakeholders" (like significant others). But I think OPNsense (or other bog-standard-PC FOSS alternatives like VyOS) can be competitive even in TCO, depending on how much value you place on pushing your networking stack and what else you have going on (like solar power).
It was the most incredibly hassle free router I've ever had.
Hopefully, the OpenWrt One is like that. But if not, I'm going to go back to killing the planet with my loud ass beater PC.
Beside the potential performance and environmental issues the other big downsides tend to include firmware availability - either because download from the site requires a login on the vendor's site or, increasingly commonly, the gear has hit LDOS and images just aren't posted. Obviously there are other "unofficial" places for such images, but the risk/legality are a whole other (potentially serious) question.
There's an additional issue mapping the requirements of home networking to enterprise gear: Ethernet switches are lousy firewalls (little or no NAT, primitive built-in security, DLNA/mDNS and friends aren't really sane options, etc). Finally, even at "1/5" the price the gear may still be quite a bit more expensive than other options. And if it's not expensive, it's usually because nobody wants it any more because of the issues mentioned above (being near- or beyond- LDOS).
FWIW this is from someone who literally built a commercial-class machine room in his house with dedicated AC, subpanels, commercial UPS, etc for data center class Ethernet, Fibre Channel and Infiniband switching as well as carrier-grade routers and still runs "enterprise" grade WLAN and switching and can lay hands on as much as I could reasonably want without too much drama or cost... Going down this road can absolutely be amazing if you either have a.) the background to properly source and run the hardware/software or b.) have a driving desire to learn how to do so or c.) have some very atypical requirements for home networking. Otherwise it tends to not be something to be done lightly.
My latest 3 home routers have been mikrotik, mikrotik and juniper.
And the Juniper is still in there, just running as a switch. The old juniper srx sucks at uPNP but is otherwise still a fantastic router if I wanted to swap back to it.
Middle tier mikrotik took a power surge and lost 50% of its ports. It still routed just enough for me to get a replacement.
Latest tik is doing great.
I dont see what the One offers me at all tbh.
OpenWRT is very good, but the installation and upgrades are not easy. There is a zoo of images for different hardware, installation options and tools. It has to run on small devices, so there are limitations. The documentation on Wiki is scattered and could be improved.
I had to search forums for weeks for a custom package installation for my router. Right now I have been trying to upgrade to the latest version via LUCI for a while, and it stucks. Probably have to wait for few weeks, go through CLI and maybe search forums again.
I just thought I am paying a hefty time price for a bit more expensive x86 mini pc and AP.
It's been included in all suitable default image configurations starting with OpenWrt release 25.12.
I do run OpenWrt on my x86-based router, on my AP, and even on my managed switches, and have no regrets.
Previous OpenWrt releases at least as far back as 21.02 could be equipped with the same degree of ASU support by installing a single package (luci-app-attendedsysupgrade) and its dependencies.
Agreed that separate router and dumb AP is the way. Every time I updated OpenWRT there was some gotcha that created an unexpected headache where I had to rebuild my elaborate configuration from scratch.
I'm not convinced A -> G upgrade paths are tested, only A -> B -> ... -> F -> G but who manually updates with that level of discipline?
The solution is to use image-builder and bake your config into the image.
Mmm, no. Unexpected downtime for infrastructure is godawful... just ask Windows Home users.
OpenWRT has a "Click a button to upgrade" thing, just like just about every consumer/prosumer-grade equipment does. [0] It also has a command-line tool that one can use to automate upgrades, for environments where the phrase "production grade" is actually an important thing to think about. [1]
[0] <https://openwrt.org/docs/guide-user/installation/attended.sy...> [2]
[1] <https://openwrt.org/docs/guide-user/installation/sysupgrade....> [2]
[2] Those documents mention that you need to install some things to get operator-initiated upgrades. As of March, the button to click is installed by default, and the CLI tool is installed on systems that have enough disk space for it. [3]
[3] <https://openwrt.org/releases/25.12/notes-25.12.0#integration...>
...which I tried doing, a week or so ago, for a minor point release update within the 25.12.x series. And then the router went out to lunch and didn't come back.
Getting it going again wasn't so bad as such things go. My router has a huge advantage here in that it's a Raspberry Pi 4, so it's easy to remove/replace/re-do the flash device and start over.
(Except: I get all out of sorts when I need to do Internet stuff to fix my Internet connection while that Internet connection is absent.)
I think I wasted $100,000 in salary for $100 more in device cost, in setting up an OpenWRT router.
Apart from installation and upgrades, the OS itself is nice, very flexible and capable.
I've got other options for routing hardware and software (of course I do), but I generally keeping using OpenWRT. Looking back, it seems like I've had it around in some form or other in active use for about 20 years so far.
Part of what keeps it around is the flexibility and the home-network-centric hack-value. I mean, this whole thing grew out of a shell injection exploit on a Linksys WRT54G. :)
Anyway, it can keep whatever counts as a slow WAN connection today feeling responsive and quick with cake SQM, even while loaded heavy with traffic and users. It's nice in that way, even though enterprise types don't seem to be interested in that kind of thing at all.
I could take a nice Juniper router home from work to use instead and it would absolutely trounce the packet-forwarding performance of my cheap OpenWRT box...while also doing nothing at all to make my home-gamer WAN limitations more tolerable.
So OpenWRT is still my answer, with the warts and upgrade woes and all.
Yes, it's a possibility, but if you want to tinker, I think a plain Linux distro like Debian is better. Turning it into a router is literally a couple of kernel parameters and a few iptables rules to set up NAT. Nowadays that's less than fives minutes of work with Claude.
This buys you much better performance and hardware compatibility relative to a BSD system, as well as lower resource usage and attack surface (no GUI or other unnecessary additions). WiFi support on BSD is bad, but on Linux you can use hostapd and almost immediately get an access point for free. And of course Linux is also better if you intend to run other stuff on the same hardware.
I suppose it comes down to what you said - "if you intend to run other stuff on the same hardware." Is it a good idea to run all sorts of extra stuff on your literal firewall/router? And if you did, I'd assume using a hypervisor is safer anyway? That way you can have the GUI and reliability of OPNsense but have a Linux distro beside it.
You also said that Linux has much better performance vs BSD, which seems rather far fetched. Got any data for that?
One other thing: OPNsense comes with a ton of helpful rules to eliminate bot traffic, allow IPv6, different NATs, VLANS, etc which you'd have to add manually. Not the end of the world, but worth considering.
I don't see any reason not to. I run dozens on services, both bare metal and containerized (Podman) on my router/firewall. It doubles as an all-purpose home server with plenty of headroom to spare. It's just a computer that sits at the edge of my network, and running services meant to be exposed to the Internet on it is natural.
> You also said that Linux has much better performance vs BSD, which seems rather far fetched. Got any data for that?
I should have worded this more carefully. What tends to happen is that BSD has worse (or no) drivers, that's when BSD's performance can noticeably degrade vs. Linux. From memory, people online were reporting issues with Realtek chips. With Intel NICs, the routing performance should be broadly equivalent .
I moved from pfSense to OpenWRT due to the really poor IPv6 support in pfSense. I don't use the AP capability either. How are things in OPNSense these days?
Particular pain points from pfSense was that it published global IP as DNS address to LAN clients and no way around it, so connectivity broke every time prefix changed, and no real support for specifying prefix-less firewall rules or similar, so couldn't really expose anything via IPv6 without pain.
I have been using them for years and I'm really happy. I recently bought the WiFi 6 upgrade kit for both of my turris. They "recently" released their latest version which is expensive but comes with WiFi 7 and 2.5 Gbps RJ45 and 10 Gbps SPF.
Last time I checked (a couple years ago), it seemed that I could use OpenWRT but I would lose some functionality (was it the FTT maybe?).
1GB is a ton of RAM for this kind of application. :) What do you anticipate needing more for?
dietpi@solo:~$ free -m
total used free shared buff/cache available
Mem: 223 54 18 11 170 169
Swap: 767 10 757
dietpi@cubano:~$ free -m
total used free shared buff/cache available
Mem: 956 233 473 24 289 722
Swap: 1088 0 1088
But pihole asks for a pi with 512gb ram. Add openwrt’s 100mb, now your ram budget for running something else (file server, pairdrop, irc, tailscale, etc) is <400mb. One nodejs app could use all of that.
Motorbike analogy, it's like comparing a RS125 with a Tmax/Burgman maxiscooter...
On one hand, 400MB is still a ton of RAM to do useful work with -- and unused RAM is wasted RAM.
On the other hand: How many non-routing tasks do you really expect or require a ~$100 home-router-device to perform? :)
And even then, I try to keep it vaguely "minimal." I don't offload as much as I can; I try to keep the router-box focused mostly on router-duties. This is because I don't want to have too many dependencies within the router: I'm really not looking to create trouble with the single-point-of-failure device that connects everything I have to the rest of the world.
This is in large part for very practical reasons. If I manage to completely stuff up the router somehow, which isn't particularly unlikely, then I really need to be able to put it back together quickly (so I'm back online quickly) without worrying about a pile of non-routing things.
If I were to put as much stuff as possible into openwrt (as I certainly can; it is just a Linux box after all), then I think I'd quickly find that it'd be better to spin up OpenWRT in a VM on a Real Computer than to keep trying to shoehorn new roles into deliberately-limited hardware.
But maybe that's just me. I got over the idea of running weird stuff on tiny hardware for the lulz nearly 20 years ago, when I was playing with a new WD MyBook World Edition 1TB networked hard drive (which was a Linux box with a shell and a package manager and a whole terabyte of local storage, even though the the sum of the parts was slow AF).
It was fun for a bit to push that limited hardware in interesting ways, and I probably did even run an IRC client on it at some point, but I'm over it. :)
The single best wifi reference I've found to date.
This answers so many questions that I had but never had the true desire to research every niche WiFi term.
I don't use it for my APs, but that is mostly because I already had 3 TP-Link routers setup as dumb APs using OpenWrt that have been working great. If I did it again, I'd buy OpenWrt Ones though. Although Deco mesh kits I've used have worked exceptionally well, and have become my recommendation for friends/family that don't want to do things like run arbitrary packages on their router/APs.
If you just want a good WiFi router or access point, unless you need something cannot do (e.g. WiFi 7 or 10 Gbit/s Ethernet), and if want to spend minimal time messing around with routers today and in the future, just get this one.
After getting this, I see no reason to ever buy any closed-source router again.
No need to learn/remember any other Router config either. It's just all OpenWRT, always looks the same, always works the same. Setting up a new one takes me 2 minutes max.
The recent OpenWRT update also brought the one feature the project was most sorely missing: A simple "Download and install latest firmware" button in the device UI.
Now they just need to add an unattended-upgrades option and I never have to log in again after initial setup.
It ran pretty well for me as a travel router I cobbled together from a Raspberry Pi and Netgear A7500 USB dongle for a stay in a short-term rental where the infrastructure network was shared with other units. More recently I have been trialing their CM5-based model with Wi-Fi 7 and 2.5GbE PoE for use as primary home Wi-Fi.
1: https://www.supernetworks.org 2: https://www.supernetworks.org/security-labs.html
I would love to be able to whitelist which devices are allowed to access the internet during night time hours.
There is a plugin marketplace that provides more features, like ad-blocking. I haven't played with those yet, so I cannot vouch for them.
When I was visiting my mom a few years back in my hometown, I converted her cheap plastic Xiaomi Mi router into an ordinary router using the OpenWRTInvasion exploit. That router then bridged a remote SIP phone to the main LAN, which was connected to the internet through another plastic router that had also been turned into an ordinary router, again thanks to OpenWrt.
That project is fantastic, and the people behind it are doing great work. Can't recommend them highly enough.
Outside of home-labs, it's rare for me to see any devices connected to the LAN side of a wireless router these days, and more than 1 (i.e. the non-portable device that is closest to the router) is exceedingly rare.
I would assume every gaming desktop computer would be? I actually assumed every desktop would be...
[edit]
If it matters, my mom no longer has a desktop (she uses a docked laptop now), but it is true of the docking station and was true of her previous desktop.
It'd be handy for me: The fastest WAN pipe I can get is less than a gigabit while my LAN is still gigabit. I can't be the only person with this situation, wherein: If anything, then the 2.5-gig port is overkill.
I don't have any direct interest in the wifi radio that the box includes (I already have Mikrotik APs that I like just fine), except to configure it as a failover station-mode interface to use with a phone hotspot when the DOCSIS connection is on the fritz.
...which doesn't happen often at all, but it's annoying when it does happen. It's nice to be able to work around problems like that with OpenWRT.
Or 1 gig is underkill. My original reply was just pointing out that simply adding a 2.5g switch doesn't make it a 5 port 2.5g router, it makes it a 1 gig router with 2.5 internal, at best
https://github.com/torvalds/linux/blob/master/drivers/net/et...
Quite a few of the modules went out without their eeprom programmed correctly, and all of them appear to be plagued by quite mediocre performance from (alleged) inadequate RF shielding on the card.
It looks like they've revised the design, but it's peeved off quite a few of the Banana Pi/Sinovoip customers who have bought them with the intention of using it as a router/ap with their R4. (It's dual-PCIe fingers with unique spacing and requires out of spec PCIe voltages, so it's only practically usable with a BPi R4.)
At the very least, the customers using them as wired-only routers are likely to be having a slightly better experience.
Looking at one of these when TP-link stops patching my Wifi. https://www.toptonpc.com/product/2x10g-sfp-solid-firewall-mi....
Just update my bpi-r3 purchased years ago from 24.x to 25.12, it need a bit of extra work because the sfp interface is renamed(though I never used that), and i finally just do plain sysupgrade only and add some required packages because i run a customized fd.io vpp build on the bpi-r3, connected via vhost-net backed tuntap, it works well, I never regret bought this machine, with current agent stuffs, i think bpi r3 model may be more fun to play with
I imagine that using an ASIC is way more cost efficient vs using a CPU.
I wish it had more ethernet ports but I've managed to live with that. I'd be up for buying an OpenWrt Two as a backup or to replace this if it has even one more LAN jack.
Got cheaper version without case - designed simple box with cutouts and 3d printed it out.
I can say it works flawlessly. I'm very happy about it. Previously I was using openwrt on different consumer-grade routers and I always had some issues, even when selecting supported devices.
Suddenly I want to put every IPS device into dumb bridge mode, and run my own damn router.
Just excellent, some pretty smart people in the Openwrt forum as well if you have problems.
After some time though, I eventually moved over to using OpenBSD directly. My small brain has a much better understanding of all the moving parts compared to that of OpenWrt :P
There are too many settings. Feels like Gimp (vs paintbrush). But once figured out, it works well.
Turris also specifies 'based on' OpenWRT, rather than straight OpenWRT. In reality there may not be much of a difference, until if/when Turris no longer exists.
The board linked to in the post doesn't have 10 G LAN, only 10 G WAN unlink. So what do people who have a 10 G internet connection do?
I'm not in the US. I can't Amazon. I don't want to spend the equivalent of 1k USD just to get 3 devices in a brainless mesh that covers my ~125sqm place made of insane amounts of radio blocking concrete.
I no longer want to maintain my network, to have network. I want things that just work. The Orbi did that for me - but the costing makes me think abut the future, and not finding a painless solution. I guess that's the tradeoff.
To wit, I also want the mesh comms on another channel (i.e 6Ghz, rather then the 2.4/5.0) and the computers/IOTs/etc isolated from that. Perhaps cheap tri-band is insanely wishful thinking. It sure seems that way.
I would also highly encourage people to buy a wired only router, and something like a ubiquiti u7 lite or u7 pro AP, and separate the functions of router and AP.
The ubiquiti unifi controller package is really straightforward to install for basic SOHO use on a base Debian stable system.
I've recently been setting up a GL.iNet Marble for my folks, with Adguard and some other filtering / security add-ons. This is a bit more expensive, but also more future proof.
The implications of this are going over my head (and TFA should explain it better). I gather that 2230 is a form factor 22x30mm and there's also a 2280 M.2 SSD form factor.
Is this just saying that there's a missing mounting post? So it wobbles? You can't use a certain form factor?
I bought it, turned it on and flashed it out of the box lmao
I like the idea of having their own hardware but it is not easy to get, so buying normal ones and flashing them still the best option.
I heard OpenWrt when I searched how to fix the stock firmware. Flashed it and never turned back. Now, OpenWrt is a critical infra in my house for adblocking, DoH, Firewall, Network Segmentation etc. None of these are possible with the stock firmware.
So I thoroughly destroyed the router and e-wasted it. I honestly never want an open-source router OS ever again.
This is wrong. OpenWRT is fostering several manufacturers that are using OpenWRT as the factory platform for their products. This is a reference design (one of several, this particular one from 2024 is now dated and newer designs are available,) provided by OpenWRT, and they've thoughtfully made it available to anyone that might want one: you can just go buy some with no NDA bullshit and get your developers moving in your lab or doing UI development or whatever. The not-cost-optimized PCB is what you want for this, in addition to the ample RAM+Flash. The "useless" POE is another aspect of this: access points use POE ubiquitously, which is a key OpenWRT use case.
> get your developers moving in your lab or doing UI development or whatever
This is what the industry has been clamoring for among a sea of existing hardware: More garbage UIs glued atop of copy-pasted forgotten hardware.
I am an engineering manager. My job is to poke holes in money-burning projects.
Strange. A good engineering manager would see that "way too big" PoE daughter board design as exactly what one would want in a reference design that will be used to test and integrate your preferred PoE solution. Power product life cycles are so short and availability problems so frequent that a good engineering manager knows that their engineers will be reworking power solutions with some regularity.
A good engineering manager would also know that UI development for commercial products is not optional. The engineering manager will expect that marketing will want branding at the very least, that differentiating features will need to be surfaced, etc., and that all of this will need to be integrated into build, test and the package system, and QA'd on real hardware. Basic stuff for an engineering manager.
OpenWrt is vastly superior to the proprietary software in commodity routers. Proprietary software gates software features behind more expensive models, even though the cheap hardware can handle them.
You also get software updates. Your hardware doesn't become a paperweight when the manufacturer refuses to fix a known, actively exploited vulnerability.
You'll get new features, for free.
> You're not attaching this monstrosity to the ceiling. I would hide it, but whatever.
The enclosure is open source as well. You can build/print your own enclosure if you'd prefer, or get any enclosure for the Banana Pi BPI-R4.
They can't just ship a board without an enclosure, because it won't pass certifications.
Configured it so the 2.5gbe port connects towards the lan where a cheap wifi 7 AP can broadcast the additional signal if anything feel like it needs it. But practically speaking nothing does.
While the openwrt one was a decent experiment, it was far from the only hardware in the price range that had stellar openwrt support before/after it came out. And one thing people seem to forget about with a lot of options (like banana pi options) is that the range & falloff can be terrible. The openwrt two is apparently delayed & going with a different manufacturer.
Openwrt is great if you are willing to customize the software especially. The fact that it can be used as an actual wifi client in a pinch is also a lifesaver.
Long-long term availability is a different problem, but different manufacturers move on.
Not available outside the US :(
> Long-long term availability is a different problem, but different manufacturers move on.
Open hardware solves this. You've been able to buy the OpenWrt One from China and ship it anywhere in the world for a reasonable price, every single day since it was released, even when there were better options available. If no one's selling, there are factories willing to make very tiny batches.
A reference platform makes no sense for OpenWRT as by its nature it runs on dozens upon dozens of different hardware, all which are different and must be tested independently.
Where my use cases don't permit it I won't use this, but if it fits I would rather buy an open-hardware device at ~10x the price of an equivalent proprietary device not out of charity but because that is how much more value it provides to me at equivalent hardware performance.
We'll have to make our own hardware. The value of open-source hardware is not limited to repairability. We want the entire digital communication hardware + software stack to be transparent and fully reproducible. These open-source efforts will eventually include the ASIC designs, and designs for the fab production line that makes the ASICs.
No, this is supposed to replace the ISP-provided junk entirely. It will save you money and close a nasty backdoor (https://en.wikipedia.org/wiki/TR-069).
Uh huh. POE.
This reeks of LLM-generated content.
Well, mine does. Look for PCIe, PoE+/PSE cards.
No need for a Tundra when an electric scooter does the job.
7gig WAN is widely available residentially at a reasonable cost.