OpenWRT Firmware

182 readers

1 users here now

WIP

Community for OpenWRT & generally related networking.

Feel free to post questions or offer support.

Website: https://openwrt.org/

founded 1 year ago

MODERATORS

JTheDoc

Is there such a thing as an unsafe router which is still unsafe after installing OpenWRT? (self.openwrt)

submitted 2 months ago* (last edited 2 months ago) by finitebanjo to c/openwrt

8 comments fedilink hide all child comments

For example, privacy violating linksys or netgear, or devices with components running improper firmware with a 14 year old vulnerability?

The reason that I ask, although I don't want this to impact the quality of answers, is that I'm shopping for a new router that is secure and private but rather than paying commercial and industrial prices I would rather get a consumer router and overwrite it's software.

you are viewing a single comment's thread
view the rest of the comments

[–] mvirts 3 points 2 months ago (1 children)

... You can always get a SBC like a raspberry pi and set up your own router using bsd or Linux 😅 definitely a challenge but it's doable. I have a pi set up to bridge my wifi to an Ethernet LAN and it's only a few packages and some firewall rules.

[–] finitebanjo 1 points 2 months ago* (last edited 2 months ago) (1 children)

Got any cost estimates for building a router? Unless it's like $40 cheaper then I don't feel justified in spending a few hours learning a craft.

[–] mvirts 2 points 2 months ago* (last edited 2 months ago) (1 children)

It really depends on your requirements, looks like you can maybe get a wifi banana pi board like https://wiki.banana-pi.org/Banana_Pi_BPI-R3 for $130 USD, and you can pay a lot more for more capable hardware.

Maybe it'll be worth the hassle of maintenance to know there's no sketchy firmware on your router?

Oh maybe 150 USD is more realistic, this comes with antennas and a case https://www.amazon.com/OpenSource-Wireless-Dual-Band-MediaTek-Bundle2-BPI/dp/B0BDG9VNJP/ref=asc_df_B0BDG9VNJP/

Lol these even run openwrt... Maybe I have one of these in my future 😹

[–] finitebanjo 2 points 2 months ago* (last edited 2 months ago) (2 children)

This solution might work great for very small homeservers or subnetworks where unusual configurations are required, but if a person just wants regular home wifi without added paranoia then clearly a $60 TP-Link with OpenWRT is the better budget option. You appear to have accidentally downvoted yourself earlier, please rectify.

[–] [email protected] 2 points 2 months ago

@finitebanjo @mvirts

I am running a tp link talon on openwrt 23. It runs great.I highly recommend it.It also has some additional ad blocker plugins and some other fantastic features. The only reason to not run openwrt. It's because you need the absolute latest hardware. I would also not run in an enterprise environment where security is absolutely Paramount, and you need observability. As well as centralized management.

[–] mvirts 2 points 2 months ago* (last edited 2 months ago) (1 children)

You're right, and that's definitely a difficult price to beat. Plus as far as I can tell if a tplink device is still evil after flashing openwrt there's really no reason the same couldn't be true of devices like the banana pi or raspberry pi.

mvirts downvoted itself in its confusion

[–] finitebanjo 2 points 2 months ago

You're right, though, that Raspberry Pis are much more trustworthy as far as brand optics are concerned.