ZH version is available. Content is displayed in original English for accuracy.
Advertisement
Advertisement
⚡ Community Insights
Discussion Sentiment
76% Positive
Analyzed from 4043 words in the discussion.
Trending Topics
#openwrt#hardware#router#wifi#more#using#better#device#devices#open
Discussion (110 Comments)Read Original on HackerNews
I just received my OpenWrt One because I’m tired of dealing with the questionable quality of most routers.
And I don’t feel like resurrecting my old PC that I used as a router for a while. I stopped doing that because it’s loud. Pretty sure the power supply fan is about to fly off.
But Qualcomm WiFi pci card with giant antenna in a dirt cheap PC running ancient Ubuntu and a simple hostapd setup is so far the most reliable WiFi router I’ve ever had. I hope openwrt one is even better :-)
The learning curve is a little steeper than more consumer stuff but it is by no means beyond a person who is capable of using OpenWRT and the docs and forum support are better than 99.9% of open source projects I have seen over the past 25 years.
OpenWRT runs on a lot of hardware and its a great way to extend the life of a router past the manufacturers patches as well as gain a lot of capabilities. I wouldn't buy a commercial router that wasn't supported by OpenWRT now.
https://openwrt.org/voting/2025-02-12-openwrt-two
Otherwise this router from GL.iNet has OpenWRT preinstalled, Wifi 7, 5x2.5G:
http://www.gl-inet.com/en-gb/products/gl-be9300
https://en.wikipedia.org/wiki/Linksys_WRT54G_series
I have two old Amplifi HD units in wireless backhaul mesh that I’d like to upgrade
T-T. Any update on the timeframe (and presumably also I would expect the expected price to be solidly in the mid to high 300s at this point)?
You can get a Wifi 7 device and 2x2.5GBps with Wifi 7 support already with the Asus BT8 and a few other devices. Asus's bootloader firmware flasher will take the initial OpenWRT image so its really quite simple to get going.
https://www.turris.com/en/products/omnia-NG-wired/
LinkSys got sued to release the firmware as it was GPL linked. This dump got modified to make the WRT54G way more powerful than LinkSys ever planned but they got to sell the hardware for years more than would have been expected at the time.
Despite this, I could expect 3-5 people to hunt me down at PyCon when I was running the wireless to tell me that I had misconfigured the wifi because it was set to low power. More reports of that than reports of wifi not working, IIRC. ;-)
(I was running the wireless because the people we paid do to the wifi would just set up one or two APs and crank the power)
Been using OpnSense for about 8 years now though... it's just been the best option for me, I use separate commercial AP.
I used a pair to provide Internet access at a Customer's construction site back in 2010. Cell phone hotspot wasn't a thing for me yet. We took a pair of WRT54Gs, configured one as a WiFi client, the other as a bog-standard router/AP, connected the LAN from the client to the WAN on the router/AP, pur a directional antenna onto the "client", and pointed it down the road toward a big business who offered free WiFi for Customers. We leeched off that until the real Internet service got installed. (It was a restaurant and we ate there at least once so we were Customers, right? >smile<)
OpenWRT is very good, but the installation and upgrades are not easy. There is a zoo of images for different hardware, installation options and tools. It has to run on small devices, so there are limitations. The documentation on Wiki is scattered and could be improved.
I had to search forums for weeks for a custom package installation for my router. Right now I have been trying to upgrade to the latest version via LUCI for a while, and it stucks. Probably have to wait for few weeks, go through CLI and maybe search forums again.
I just thought I am paying a hefty time price for a bit more expensive x86 mini pc and AP.
It's been included in all suitable default image configurations starting with OpenWrt release 25.12.
I do run OpenWrt on my x86-based router, on my AP, and even on my managed switches, and have no regrets.
Previous OpenWrt releases at least as far back as 21.02 could be equipped with the same degree of ASU support by installing a single package (luci-app-attendedsysupgrade) and its dependencies.
The solution is to use image-builder and bake your config into the image.
Yes, it's a possibility, but if you want to tinker, I think a plain Linux distro like Debian is better. Turning it into a router is literally a couple of kernel parameters and a few iptables rules to set up NAT. Nowadays that's less than fives minutes of work with Claude.
This buys you much better performance and hardware compatibility relative to a BSD system, as well as lower resource usage and attack surface (no GUI or other unnecessary additions). WiFi support on BSD is bad, but on Linux you can use hostapd and almost immediately get an access point for free. And of course Linux is also better if you intend to run other stuff on the same hardware.
I suppose it comes down to what you said - "if you intend to run other stuff on the same hardware." Is it a good idea to run all sorts of extra stuff on your literal firewall/router? And if you did, I'd assume using a hypervisor is safer anyway? That way you can have the GUI and reliability of OPNsense but have a Linux distro beside it.
You also said that Linux has much better performance vs BSD, which seems rather far fetched. Got any data for that?
One other thing: OPNsense comes with a ton of helpful rules to eliminate bot traffic, allow IPv6, different NATs, VLANS, etc which you'd have to add manually. Not the end of the world, but worth considering.
...which I tried doing, a week or so ago, for a minor point release update within the 25.12.x series. And then the router went out to lunch and didn't come back.
Getting it going again wasn't so bad as such things go. My router has a huge advantage here in that it's a Raspberry Pi 4, so it's easy to remove/replace/re-do the flash device and start over.
(Except: I get all out of sorts when I need to do Internet stuff to fix my Internet connection while that Internet connection is absent.)
I think I wasted $100,000 in salary for $100 more in device cost, in setting up an OpenWRT router.
Apart from installation and upgrades, the OS itself is nice, very flexible and capable.
I moved from pfSense to OpenWRT due to the really poor IPv6 support in pfSense. I don't use the AP capability either. How are things in OPNSense these days?
Particular pain points from pfSense was that it published global IP as DNS address to LAN clients and no way around it, so connectivity broke every time prefix changed, and no real support for specifying prefix-less firewall rules or similar, so couldn't really expose anything via IPv6 without pain.
https://www.wiisfi.com/
The single best wifi reference I've found to date.
1GB is a ton of RAM for this kind of application. :) What do you anticipate needing more for?
I don't use it for my APs, but that is mostly because I already had 3 TP-Link routers setup as dumb APs using OpenWrt that have been working great. If I did it again, I'd buy OpenWrt Ones though. Although Deco mesh kits I've used have worked exceptionally well, and have become my recommendation for friends/family that don't want to do things like run arbitrary packages on their router/APs.
After some time though, I eventually moved over to using OpenBSD directly. My small brain has a much better understanding of all the moving parts compared to that of OpenWrt :P
I would love to be able to whitelist which devices are allowed to access the internet during night time hours.
There is a plugin marketplace that provides more features, like ad-blocking. I haven't played with those yet, so I cannot vouch for them.
https://github.com/torvalds/linux/blob/master/drivers/net/et...
Suddenly I want to put every IPS device into dumb bridge mode, and run my own damn router.
Outside of home-labs, it's rare for me to see any devices connected to the LAN side of a wireless router these days, and more than 1 (i.e. the non-portable device that is closest to the router) is exceedingly rare.
I would assume every gaming desktop computer would be? I actually assumed every desktop would be...
[edit]
If it matters, my mom no longer has a desktop (she uses a docked laptop now), but it is true of the docking station and was true of her previous desktop.
I wish it had more ethernet ports but I've managed to live with that. I'd be up for buying an OpenWrt Two as a backup or to replace this if it has even one more LAN jack.
I imagine that using an ASIC is way more cost efficient vs using a CPU.
https://news.ycombinator.com/item?id=42285689
It has two Ethernet ports, no switch. WHY?
Inexplicably can be powered via PoE, makes no sense if its purpose is to hang off your ISP's gateway (which almost certainly lacks PoE supply). PoE feature will never be used. You're not attaching this monstrosity to the ceiling.
It's utterly gigantic due to inefficient PCB layout.
Why is right to repair important for a throwaway router? Given what will usually fail are the hard to source ASICs.
By the time it breaks it will be obsolete anyway. As pointed out elsewhere in this thread they are already working on a successor.
There is so much better hardware out there manufactured in volume for cheaper.
It was likely a fun engineering project for someone but the business case isn't there.
This is wrong. OpenWRT is fostering several manufacturers that are using OpenWRT as the factory platform for their products. This is a reference design (one of several, this particular one from 2024 is now dated and newer designs are available,) provided by OpenWRT, and they've thoughtfully made it available to anyone that might want one: you can just go buy some with no NDA bullshit and get your developers moving in your lab or doing UI development or whatever. The not-cost-optimized PCB is what you want for this, in addition to the ample RAM+Flash. The "useless" POE is another aspect of this: access points use POE ubiquitously, which is a key OpenWRT use case.
> get your developers moving in your lab or doing UI development or whatever
This is what the industry has been clamoring for among a sea of existing hardware: More garbage UIs glued atop of copy-pasted forgotten hardware.
I am an engineering manager. My job is to poke holes in money-burning projects.
Strange. A good engineering manager would see that "way too big" PoE daughter board design as exactly what one would want in a reference design that will be used to test and integrate your preferred PoE solution. Power product life cycles are so short and availability problems so frequent that a good engineering manager knows that their engineers will be reworking power solutions with some regularity.
A good engineering manager would also know that UI development for commercial products is not optional. The engineering manager will expect that marketing will want branding at the very least, that differentiating features will need to be surfaced, etc., and that all of this will need to be integrated into build, test and the package system, and QA'd on real hardware. Basic stuff for an engineering manager.
We'll have to make our own hardware. The value of open-source hardware is not limited to repairability. We want the entire digital communication hardware + software stack to be transparent and fully reproducible. These open-source efforts will eventually include the ASIC designs, and designs for the fab production line that makes the ASICs.
A reference platform makes no sense for OpenWRT as by its nature it runs on dozens upon dozens of different hardware, all which are different and must be tested independently.
Where my use cases don't permit it I won't use this, but if it fits I would rather buy an open-hardware device at ~10x the price of an equivalent proprietary device not out of charity but because that is how much more value it provides to me at equivalent hardware performance.
No, this is supposed to replace the ISP-provided junk entirely. It will save you money and close a nasty backdoor (https://en.wikipedia.org/wiki/TR-069).
OpenWrt is vastly superior to the proprietary software in commodity routers. Proprietary software gates software features behind more expensive models, even though the cheap hardware can handle them.
You also get software updates. Your hardware doesn't become a paperweight when the manufacturer refuses to fix a known, actively exploited vulnerability.
You'll get new features, for free.
> You're not attaching this monstrosity to the ceiling. I would hide it, but whatever.
The enclosure is open source as well. You can build/print your own enclosure if you'd prefer, or get any enclosure for the Banana Pi BPI-R4.
They can't just ship a board without an enclosure, because it won't pass certifications.
Configured it so the 2.5gbe port connects towards the lan where a cheap wifi 7 AP can broadcast the additional signal if anything feel like it needs it. But practically speaking nothing does.
While the openwrt one was a decent experiment, it was far from the only hardware in the price range that had stellar openwrt support before/after it came out. And one thing people seem to forget about with a lot of options (like banana pi options) is that the range & falloff can be terrible. The openwrt two is apparently delayed & going with a different manufacturer.
Openwrt is great if you are willing to customize the software especially. The fact that it can be used as an actual wifi client in a pinch is also a lifesaver.
Long-long term availability is a different problem, but different manufacturers move on.
Not available outside the US :(
> Long-long term availability is a different problem, but different manufacturers move on.
Open hardware solves this. You've been able to buy the OpenWrt One from China and ship it anywhere in the world for a reasonable price, every single day since it was released, even when there were better options available. If no one's selling, there are factories willing to make very tiny batches.
7gig WAN is widely available residentially at a reasonable cost.