8 ms·

OpenWrt 21.02.0 Released

220 points by stock_toaster 5y ago

postpawl 5y ago
I’ve been thinking about doing a Raspberry Pi CM4 with OpenWrt. Jeff Geerling recently did a post about two of the IO boards for it: https://www.jeffgeerling.com/blog/2021/two-tiny-dual-gigabit-raspberry-pi-cm4-routers https://www.jeffgeerling.com/blog/2021/two-tiny-dual-gigabit... Would anybody recommend that sort of setup over a Mikrotik Hex or Ubiquiti Edgerouter X?
- stock_toaster 5y ago
  I moved from an edgerouter4[1] to openwrt on a protectli fw4b. On my home gigabit fiber (centurylink) link, it has been great so far (performance, throughput, etc)! [1]: Ubiquiti has had packet processing issues in the 2.x firmware series for what seems like forever, and lack of updates lately has prompted me to move to something that is arguably better anyway.
- stragies 5y ago
  Both built-in interfaces of the RPI4 don't support MTU over 1500. That rules out many advanced usage scenarios, I think.
  - geerlingguy 5y ago
    They can be modified, though not necessarily in a typical way. Also, CM4 implementations vary, and most interfaces on 3rd party boards can have MTU set as normal.
    - stragies 5y ago
      Hi, thanks for that correction. Do you have a keyword or 2 to google for "They can be modified, though not necessarily in a typical way." Or is that only or the CM, and not the normal RPI4? I only found some quick&dirty patch, that seems to make MTU up to 2000 functional. But since the patch aims for 9018, and only gets 2000, that does not seem like the "right" solution.
      - geerlingguy 5y ago
        You can do it if you compile in a kernel patch on the regular Pi 4, I believe: https://www.jeffgeerling.com/blog/2020/setting-9000-mtu-jumbo-frames-on-raspberry-pi-os https://www.jeffgeerling.com/blog/2020/setting-9000-mtu-jumb...
- ComputerGuru 5y ago
  I can’t recommend the CM4 over anything with an actual switch built into it with network fabric providing CPU-free packet switching and forwarding. You also honestly don’t want something as important as your actual internet gateway to be some hacky thing that might or might not be supported in a few months or years, unless it's just for experimentation in which case knock yourself out.
  - cyounkins 5y ago
    Unfortunately I don't think there are any implementations of CPU-free QoS, which you really want at the network boundary.
    - LargoLasskhyfv 5y ago
      That really depends on the used SOC, or how well its hardware features are supported under Linux, by non-BLOBs, preferrably. Anything MARVELL should mostly do, usually. But that's not the cheapest segment anymore, so the people are hurting themselves by buying the common plastic trash. Or use DD-WRT instead of OpenWRT, because they give a shit about binary-blobs and integrate that however they see fit, because they prefer to be able to use everything the hardware supports, instead of having an almost brick running open-source.
      - cyounkins 5y ago
        I don't think any devices supported by OpenWRT, DD-WRT, VyOS, pfSense, etc support hardware-accelerated routing with QoS. If you know of one, let me know! It is not always clear, but enabling QoS usually disables hardware offloading, for example with Ubiquiti devices[1] "Traffic to which QoS policies have been applied cannot also take advantage of the EdgeRouter's Offloading feature". The same is true for open source even with binary blobs. The chips simply can't do it. Using QoS and implicitly disabling hardware offloading significantly drops the throughput as it becomes CPU bound. "Without offloading enabled, IPv4 traffic will be routed via the CPU and will be limited to around 300Mbps on the EdgeRouter Lite (ERLite-3). With offloading enabled, the throughput will be about 950Mbps." [1] [1] https://help.ui.com/hc/en-us/articles/115006567467 https://help.ui.com/hc/en-us/articles/115006567467
- jvolkman 5y ago
  I found a passively cooled x86 box that I run openwrt on. It's got 6 Intel gigabit NICs and I use Proxmox to virtualize guests. OpenWrt is one of those guests, as is Home Assistant which controls various home automation things. I posted about it on Reddit a while ago: https://www.reddit.com/r/homelab/comments/hzvfih/new_router_i58365u_quad_core_6_intel_nics https://www.reddit.com/r/homelab/comments/hzvfih/new_router_... At the time it had much better hardware at a similar price to more popular brands like Protectli and Qotom. Not sure what the scene is currently, but there a bunch of similar offerings on AliExpress.
  - zbrozek 5y ago
    Why did you choose x86 openwrt over opnsense? I chose opnsense because it never occurred to me to run openwrt on not-a-consumer-router and now I'm wondering if I screwed up. Like you, I run a single x86 box with a handful of guests for random stuff - including Home Assistant!
    - jvolkman 5y ago
      I did try opnsense, but found that I wanted wireguard more than any of the features it offered. At the time wireguard wasn't a built-in option, so went back to OpenWrt which I was already familiar with anyway from running it on Linksys routers.
      - zbrozek 5y ago
        Makes sense! I'm using wireguard on opnsense (but it's a newish feature) and so far it's been a great experience.
      - circularfoyers 5y ago
        I had a similar experience and ended up doing the same. OPNsense does include a userspace implementation of Wireguard, but is obviously inferior to what Linux already has. It ended up being that, how poorly the initial kernel space implementation was handled for FreeBSD and that I wanted Cake for QoS, which made me move back to OpenWRT. I do want to ask though, has there been any downsides to using OpenWRT on x86?
- zamadatix 5y ago
  If you're looking for a router that does NAT you're not going to beat a purpose built hardware board in terms of perf per dollar, especially only latency and jitter of the NAT. If you're looking for a network connected server that happens to do a lot of packet processing you can go the rpi route but I'd still front the internet and rest of the home internet off a small cheap hardware box like the Hex.
- antattack 5y ago
  If you want something fast and inexpensive than wait for OpenWRT build for Redmi AX6 / AX3600 WIFI routers. For now only manual build is available and some have to reboot from time to time due to memory leak. https://forum.openwrt.org/t/adding-openwrt-support-for-xiaomi-ax3600/55049/4058 https://forum.openwrt.org/t/adding-openwrt-support-for-xiaom...
- scottlamb 5y ago
  One downside to the Raspberry Pi (CM)4 is that it doesn't have hardware crypto. So it'd make a poor VPN machine. But otherwise I think it'd be fine. Some people are happy just using a regular Pi 4 connected to a VLAN-capable switch or with a USB adapter for the second NIC. I recently bought a GL.iNet Brume. It's a nice tiny ARM machine I use as a wired-only router. /proc/cpuinfo confirms it supports hardware crypto... Features : fp asimd evtstrm aes pmull sha1 sha2 crc32 cpuid ...although I haven't set up a VPN on it yet. Downsides: the WAN and LAN0/LAN1 ports are all the same switch with only one network interface, so it'd be impossible to achieve >500Mbps full-duplex. (It's never come up for me; my Internet connection's too slow.) It's also a little pricy for what it is. I might have tried the FriendlyELEC NanoPI R4S instead, which actually has two separate NICs. But if I'd ordered that I'd still be waiting for it... One thing I don't care about: hardware NAT/routing offload. I think that's often unsupported by OpenWRT, and it's incompatible with SQM.
  - squarefoot 5y ago
    Not sure if it supports all the features you need, anyway you might find interesting the PCEngines APU2 boards. https://pcengines.ch/apu2.htm https://pcengines.ch/apu2.htm
    - scottlamb 5y ago
      Those are neat looking machines. I saw them and iirc quickly ruled them out because they're not available now.
    - cycomanic 5y ago
      Anyone has experiences with the complete build from https://teklager.se/en/products/routers/ https://teklager.se/en/products/routers/ They look very nice (although unavailable till January)
  - stragies 5y ago
    Concerning HW NAT/Offload support: the DSA support is (iiuc) supposed to be the framework, through which the offload functionalities will be implemented. There is a pull-request for DSA even for architectures as far back as ath79. I haven't read into the specifics yet, but it sounds like nft-tables configuration will be translated to a eBPF program, that will then hook into network flows, and tell the switching HW/NPE over some side channel which accelerations to use and shortcuts to take. But do I really want to trust a "Black Box Network Processing Engine" bolted onto my CPU, that can route packets entirely outside the realm of control of the main CPU? I always wonder about intentional or unintentional "in-band debug features", when people mention, that they run their home-lan on the same switch as the WAN-Uplink. I mean, is there really a HW vendor, that we trust to get the switching logic 100% correct/secure/performant?
- Wubdidu 5y ago
  Probably depends on how complex your setup will be. We are running a normal 1GB Pi4 with OpenWRT (trunk until now) for quite a while on a 1gbit down/500mbit up fibre uplink with SQM against bufferbloat. Unifi switches handle all VLAN related work, fibre uplink is on VLAN 7 mandated by the carrier, so PPPoE works with only one LAN port on the Pi4. Wifi is also unifi hardware. Thanks to full duplex, clients are able to use the fibre uplink without slowdown. VPN is managed by a separate system, though we had some successful experiments with WireGuard. Both a colleague and I are running the exact same setup at home (with fibre uplink and VDSL). It's a very capable and power efficient setup. I'd definitely go with a CM4+dual NIC board today.
nanis 5y ago
Amazing ... I had just checked a few minutes before this post. I tried RC.1-4 and they were definitely improvements on 19.07 in terms of general feel, reduced need for weekly reboots etc.
- Havoc 5y ago
  >reduced need for weekly reboots etc. That shouldn't be the case. I've definitely had multi-month uptimes
encryptluks2 5y ago
TP-Link has to be one of the worst when it comes to privacy and features, but they've been offering 3 triband AC2200 mesh routers at Costco for a while for anywhere between $159 and $199. If I could get OpenWRT working on something like those I'd be so happy.
daneel_w 5y ago
I've happily been running OpenWRT on a $30 Wi-Fi access point (Netgear EX3700) for 3 years now, after I ultimately got tired of the unideal situation with OpenBSD's Wi-Fi support/performance. I run the access point in bridged mode as a wireless VLAN extension for the unmanaged Ethernet switch it's plugged into. Never gone quirky on me despite months of uptime, and has no problems saturating 100 Mbit/s.
- Arch-TK 5y ago
  I personally run an OpenWRT Wi-Fi access point and OpenBSD router. The max download speed I get from my ISP is 350Mbps and the router is able to handle that. But yes, WiFi on OpenBSD is something which is not really a good option right now.
- sdze 5y ago
  Just checked on your model mentioned. Seems to be a "Range Extender". Does it still function as Router with OpenWRT?
  - wtallis 5y ago
    Consumer network devices do routing in software (with a few exceptions), so the OEM's intentions for whether a device should be a router, access point, or range extender are meaningless when the software has been replaced with OpenWRT. At worst, you end up with a router that has an inconvenient number of interfaces. A range extender may not have an Ethernet port labeled "WAN", but that doesn't prevent you from using one of its "LAN" ports for that purpose. Likewise, if you want to take a device sold as a router and use it only as an extra access point within your network, you can repurpose its WAN port as an extra LAN port, or go for more complex network configurations where you use the router's built-in switch as a VLAN-capable managed switch.
  - daneel_w 5y ago
    It's only a range extender by Netgear's firmware design. The actual device is a bog standard SoC with Wi-Fi + Ethernet, so OpenWRT can turn it into anything, incl. a wireless router directly connected to WAN if need be. In my case I don't run it as a router, but as a wireless-to-Ethernet bridge into the rest of my LAN.
stragies 5y ago
I wonder, if DSA works correctly on all platforms in scenarios where MTU > 1500 is needed and/or encapsulations like Batman. Because both are problematic at least on ramips/mt7621 and RTL8380 for me. Better but still not not right with the current 5.10 testing kernel in master. Maybe related to the bug mentioned here: https://github.com/openwrt/openwrt/pull/4493 https://github.com/openwrt/openwrt/pull/4493 I was hoping, that 21.02.0 would still include that one. In any case, many thanks for all the hard work to everybody involved!
jordemort 5y ago
This an exciting release for me. A few years ago, I bought a vastly overpowered (at least, for router purposes) x86 box with a bunch of ethernet interfaces, with the idea that I'd run OpenWRT on it and then deploy a few containers to it for extra services. Until this release, though, many of the kernel options needed to support containers weren't enabled on OpenWRT's default kernel. It was possible to pull off my original plan by doing a custom build, and the OpenWRT build system makes this very easy, but it's even easier to be able to just grab a pre-built release.
- bubblethink 5y ago
  Why do everything in openwrt ? Virtualize openwrt itself on an x86 host and do whatever else you want with other vms.
  - Weryj 5y ago
    This, I run proxmox and use a few instances of PFSense to setup multiple networks for my VMs.
  - jordemort 5y ago
    I've run OpenWRT in a VM before as a gateway to a set of other VMs on the host, but I'm skeptical about the performance implications of running it in a VM for my primary internet connection. In general, I find VMs a huge pain to manage compared to containers. I don't run any VMs at home anymore, aside from firing a temporary one up from time to time to try out some random ISO.
    - bubblethink 5y ago
      vm performance is excellent, especially if you passthrough the nic. Use libvirt + kvm. It's pretty simple to use vms on standard distros. virt-manager is a good gui.
      - jordemort 5y ago
        It’s still a whole other kernel and disk image to worry about, passthrough to get set up, etc. For the stuff I run at home, I want things to be as simple and and automated and reproducible and hands-off as possible. VMs feel too much like work. If I never have to edit libvirt XML again, I might die happy.
EGreg 5y ago
I really wanted to have software that can be installed on some Linux computer that our customers would put on their network, and it would redirect DNS to our captive portal (web-hosted by us on the same machine or another machine on the local network) unless the MAC or IP address was whitelisted. Why is this so hard? I don't think we need OpenWRT on a router, do we? I mean, can we just set the DNS on the router to use a local machine, and can I use Bind9 or DNSMasq? https://tech.surveypoint.com/posts/installing-a-local-dns-server-behind-a-hardware-router/ https://tech.surveypoint.com/posts/installing-a-local-dns-se... Macs, for example, can add "compname.local" to DHCP using Bonjour. Can I somehow use Wide-Area Bonjour or Zeroconf or something, to accomplish this? I am not a network expert, all I want is to have a computer join the local network and run a DNS server, tell the router to forward all DNS requests there, and our DNS server will respond with our captive portal for any domain, so we can "take attendance" and checkins via wifi, and after people connect once, every time they walk into the room, their cookie will announce them to the captive portal, we register their attendance and then let the DNS pass through to whatever other DNS server they had. PS: I guess this wouldn't work if they manually set DNS servers to be the IP address OpenDNS or something like that, right? What is the correct approach to captive portals in that case? PPS: Why are captive portals so SLOW on every iPhone I ever owned? It takes like a minute or three to come up. What is causing the delays?
rektide 5y ago
Ultimately, I'd way rather run a regular PC with good wifi hardware and Debian. But our wifi options are extremely extremely extremely slim. I tried to purchase some 802.11ax m.2 cards from a variety of alibaba et cetra sites & I got the run around & offered 4 year old shitty alternative products again and again and again. So OpenWRT is pretty amazing. Incredibly hard work, incredibly good system, targeting so many different devices. The "uci" configuration system and "ubus" rpc layer are nearly unparalleled in software, have brought so many different systems under a consistent yoke & collar. OpenWRT is incredible. But again it comes back to hardware. And wow what a tragedy we have been undergoing. It's a barren bereft world. There's really only one router, with a pretty mediocre MediaTek cpu/wireless chipset, that has 802.11ax support at all. Hopefully things swing around some & we figure out how to get operating systems installing atop more contemporary routers, but there have been so so so few advances, hardware has gotten so much more inaccessible. It makes me all the sadder that decent wifi addon cards are blanketly unavailable. Read it and weep, the forum thread on 802.11ax routers: https://forum.openwrt.org/t/802-11ax-routers/10484/354 https://forum.openwrt.org/t/802-11ax-routers/10484/354 I got a second openwrt router recently. It's been very interesting & surprising seeing how little cross-access point and cross-band steering clients do. I'm literally compiling openwrt fresh today, as I work on this problem, with some fresh new software systems that have only just cropped up in OpenWRT land. For a while OpenWRT had nothing, but we're finally developing some acumen for using multiple access points and that's so necessary & so great. I've grown more respect for the mesh based products that have taken over: not only do the routers have to mesh (and route across the mesh), but it's really up to them to steer clients ("stations") to the best access point: the problem is bedevilling crazy hard.
- mattbillenstein 5y ago
  I use a wifi router in bridge mode to provide the wifi capabilities using the stock firmware, and a NUC like device running Ubuntu with two ethernet interfaces to do everything else - NAT, DHCP, LAN DNS, firewall, etc... I've thought about trying to do everything in the NUC, but at some point, just configuring it all is sorta a pain.
- Sebb767 5y ago
  > There's really only one router, with a pretty mediocre MediaTek cpu/wireless chipset, that has 802.11ax support at all. Why not go for a separate router and access point? I know its not for everyone, but it makes debugging stuff and tinkering so much easier. As a bonus, you can run a different router OS (like OPNSense). I personally run a Mini-ITX PC ( ~200€ from used parts, but with 2.5G link) and an Ubiquiti AP WiFi 6 lite flashed with OpenWRT - it's around 100€ new, has great hardware and is supported.
xook 5y ago
Been running OpenWRT on routers for the better part of 5+ years now. I'm not crazy about some of the software being very minimal[0], and it sometimes takes a few tries[1], but it runs quite well on a Linksys 1900ac. Time for a weekend upgrade! [0] Dropbear doesn't {didn't?} support ed25519 at the time I was using it for SSH, but it took me an afternoon of dead ends and "it's not DNS" feelings before I found that out. [1] I know about the serial console, but I'd prefer a simple, direct access keyboard/mouse setup if I screw it up.
- happy-dude 5y ago
  I'd like to express general caution with upgrading to 21.02 on Linksys WRT-series routers; the Marvell "open-source" firmware isn't truly open source (it has proprietary binary blobs) and development seems to have halted sometime in 2020. Many users report Wi-Fi connectivity issues[0]. When I did an upgrade, I was unable to connect my laptop and Roomba to wifi, and had to rollback to 19.07.8. [0] https://github.com/kaloz/mwlwifi/issues https://github.com/kaloz/mwlwifi/issues
  - m3adow 5y ago
    Thanks for the heads-up. I was considering upgrading soon. Now I'll wait for the bug reports to be resolved first.
nine_k 5y ago
(1) It's wonderful how many things can OpenWRT do now, beyond basic routing; it can even run containers in the default build. (2) It's interesting how much resources this requires now, though; 128MB RAM is recommended, and 64MB is barely sufficient. To fit into 32MB and run basic routing functionality, one needs to remove IPv6 from the custom configuration, for instance. Mere 15 years ago 16MB was almost plenty to run OpenWRT :) I also wonder how much more compact a RAM footprint of a router can be if it only does routing, though competently: with IPv6, QoS, etc. Maybe it won't be much more compact even with a super-compact purpose-built kernel and network stack (not Linux).
- Sebb767 5y ago
  > Mere 15 years ago 16MB was almost plenty to run OpenWRT :) Given that we have gone from two/three digit gigabyte disk to two/three digit terabyte disks, I'd say it held up pretty well ;)
  - cyberbanjo 5y ago
    Isn't OpenWRT a distro for routers? Your router came with gigabit disks?
    - wtallis 5y ago
      A lot of consumer routers these days store the OS on NAND flash instead of NOR flash, and 1Gbit to 4Gbit capacities are common. One of Google Fiber's Network Box models has 2GByte (16Gbit) of NAND.
    - magicalhippo 5y ago
      I run OpenWRT on a NanoPi R2S[1], it has a 16GB SD card and 1 GB of RAM. Cheap and plenty of power for my home network. [1]: https://www.friendlyarm.com/index.php?route=product/product&product_id=282 https://www.friendlyarm.com/index.php?route=product/product&...
  - brirec 5y ago
    Where can I get a three digit terabyte disk?!
RandomWorker 5y ago
WPA3 native support is nice. Now, I don’t have carry around a drive with that on there. Or connect to an unsafe network to download.
Sebb767 5y ago
I'm running OpenWRT for a few years now and it's absolutely great for simple setups (and even quite complex ones for homes). It is also possible to flash recent Ubiquiti hardware with OpenWRT; an AP WiFi 6 Lite flashed with it makes for a cheap (~100€) WiFi 6 access point with great range.
- Jailbird 5y ago
  Out of curiosity, what benefit do you get by flashing the AP vs the stock firmware?
  - kelnos 5y ago
    I have a similar setup (older Ubiquiti AP-AC Pros), and for me it was just a dislike for Ubiquiti's cloud-connected/distributed management architecture. I don't want my network hardware phoning home or depending on the cloud or even other components on the local network for any functionality. (It's sorta similar to how I feel about Apple; I really like their hardware, but am not a big fan of their software.) I also just in general trust an open source project (sure, I know, I haven't personally audited the source or the build process) over close-source manufacturer firmware.
  - Sebb767 5y ago
    The sister comment is pretty much right; I don't have much trust in Ubiquitis software at the moment. Additionally, I know and like the interface of OpenWRT and I don't want to run a separate management server.
  - Arch-TK 5y ago
    Basically I sat down one day and wanted to add another WiFi network to my access point. Since the previous time that I had to manage the AP, I had switched my laptop from Archlinux to Voidlinux. I tried starting ubiquiti's stupidly over the top java based management daemon on my laptop in order to manage the access point (which I used because I don't own a smartphone and even if I did, I wouldn't want to run any proprietary applications on it). To my surprise the software relied on mongodb which basically no distro packages anymore because of their crazy license change. I tried to spend some time getting mongodb locally packaged for my laptop (I refuse to install software without the package manager backing it up) but compiling mongodb is apparently nontrivial and I couldn't get it to work. So I gave up on getting that working and just put OpenWRT on it because it provided me with a nice simple command line interface as well as an optional web interface. I was also able to quickly cut down the firmware to the bare minimum as I just wanted to bridge WiFi interfaces to VLANs. I had a minimal, reliable and easy to manage access point which has been running 24/7 since that day for the last 218 days without a single hiccup. I no longer stress about having to run some insane daemon when I want to modify the configuration of my access point.
deleted 5y ago
[deleted]
nerdponx 5y ago
I've been wanting to try OpenWrt for a while, but apparently my Netgear R6700v3 isn't supported because of its Broadcom chip. What's a good consumer router for OpenWrt? I don't do any fancy home lab stuff, just normal people watching videos and me posting on Hacker News.
- bubblethink 5y ago
  Wifi will always be hit or miss with Openwrt. The general advice is to use openwrt for routing and a separate access point that runs vendor firmware for wifi. Should you want everything in one device, R7800 is a well supported openwrt all-in-one device.
  - kelnos 5y ago
    I have two Ubiquiti AP-AC Pro APs, and I've been running OpenWRT just fine on them for the past year and a half. Completely rock solid. I didn't do performance testing with the stock firmware, so I don't know if I get the same WiFi speeds, but what I do get is more than sufficient for my purposes. Maybe other hardware doesn't work as well, but I think if you choose carefully, it's fine.
  - wtallis 5y ago
    Wifi is only hit or miss because it's often difficult or impossible to tell when a vendor has silently swapped out the guts of a model and replaced them with Broadcom parts.
    - ur-whale 5y ago
      How does dd-wrt pull it off, then?
      - stragies 5y ago
        (As far as I know:) By sticking to the Vendor-supplied SDK kernel version, with ancient blobbed up 3.X Linux kernels, for architectures, where modern kernel/module/userspace (source) is not available. Openwrt aims for "near-mainline" blob-free kernel, currently on 5.4, with 5.10 in current master for many architectures.
nprateem 5y ago
Has anyone got a guide for getting openwrt to tether to a 5G mobile hotspot for the upstream WAN? I've found one showing how to connect via USB, but I don't want to have to plug my phone in to my router to be able to use my phone's mobile data.
- Nextgrid 5y ago
  You can have OpenWRT act as a Wi-Fi client (you might need to install the wpa-supplicant package). At that point your wifi interface is connected and you can adjust the firewall/routing/IP configuration to mark it as "WAN".
  - nprateem 5y ago
    Thanks I'll give it a try.
ksec 5y ago
>The OpenWrt 21.02 series focuses on bringing all supported targets to Linux kernel version 5.4 and introducing WPA 3 support into default images. [1] It somehow wasn't a specific headline / item in the release note. But I thought updating to 5.4 was a big deal. [1] https://openwrt.org/releases/21.02/start https://openwrt.org/releases/21.02/start
- hypothesis 5y ago
  It was an item on goals page and is listed under “Core components update” on release page. Unless there is some particular feature that someone wants or a device enablement that only possible starting with a kernel version, do most users care? [1] https://openwrt.org/docs/guide-developer/releases/goals/21.02 https://openwrt.org/docs/guide-developer/releases/goals/21.0...
ur-whale 5y ago
openwrt, however nice, does not support as many systems as dd-wrt and is still not an option for me because of that.
- champtar 5y ago
  OpenWrt doesn't use proprietary drivers and instead try to ships really recent kernel (21.02 ships 5.4, master has 5.10), so that might be why your particular model will never be supported. dd-wrt seems to be maintaining some eol kernel, I'm wondering for how long https://svn.dd-wrt.com/browser/src/linux/universal https://svn.dd-wrt.com/browser/src/linux/universal
  - garbagecoder 5y ago
    A license is not a feature.
fomine3 5y ago
> TLS and HTTPS support included by default I'm curious how they solved TLS non self signed certificate on local device problem described here: https://lwn.net/Articles/837491/ https://lwn.net/Articles/837491/ I tried to find info but I can't find any.

220 points by stock_toaster 5y ago

I’ve been thinking about doing a Raspberry Pi CM4 with OpenWrt. Jeff Geerling recently did a post about two of the IO boards for it: https://www.jeffgeerling.com/blog/2021/two-tiny-dual-gigabit-raspberry-pi-cm4-routers https://www.jeffgeerling.com/blog/2021/two-tiny-dual-gigabit... Would anybody recommend that sort of setup over a Mikrotik Hex or Ubiquiti Edgerouter X?

stock_toaster 5y ago
I moved from an edgerouter4[1] to openwrt on a protectli fw4b. On my home gigabit fiber (centurylink) link, it has been great so far (performance, throughput, etc)! [1]: Ubiquiti has had packet processing issues in the 2.x firmware series for what seems like forever, and lack of updates lately has prompted me to move to something that is arguably better anyway.
stragies 5y ago
Both built-in interfaces of the RPI4 don't support MTU over 1500. That rules out many advanced usage scenarios, I think.
- geerlingguy 5y ago
  They can be modified, though not necessarily in a typical way. Also, CM4 implementations vary, and most interfaces on 3rd party boards can have MTU set as normal.
  - stragies 5y ago
    Hi, thanks for that correction. Do you have a keyword or 2 to google for "They can be modified, though not necessarily in a typical way." Or is that only or the CM, and not the normal RPI4? I only found some quick&dirty patch, that seems to make MTU up to 2000 functional. But since the patch aims for 9018, and only gets 2000, that does not seem like the "right" solution.
    - geerlingguy 5y ago
      You can do it if you compile in a kernel patch on the regular Pi 4, I believe: https://www.jeffgeerling.com/blog/2020/setting-9000-mtu-jumbo-frames-on-raspberry-pi-os https://www.jeffgeerling.com/blog/2020/setting-9000-mtu-jumb...
ComputerGuru 5y ago
I can’t recommend the CM4 over anything with an actual switch built into it with network fabric providing CPU-free packet switching and forwarding. You also honestly don’t want something as important as your actual internet gateway to be some hacky thing that might or might not be supported in a few months or years, unless it's just for experimentation in which case knock yourself out.
- cyounkins 5y ago
  Unfortunately I don't think there are any implementations of CPU-free QoS, which you really want at the network boundary.
  - LargoLasskhyfv 5y ago
    That really depends on the used SOC, or how well its hardware features are supported under Linux, by non-BLOBs, preferrably. Anything MARVELL should mostly do, usually. But that's not the cheapest segment anymore, so the people are hurting themselves by buying the common plastic trash. Or use DD-WRT instead of OpenWRT, because they give a shit about binary-blobs and integrate that however they see fit, because they prefer to be able to use everything the hardware supports, instead of having an almost brick running open-source.
    - cyounkins 5y ago
      I don't think any devices supported by OpenWRT, DD-WRT, VyOS, pfSense, etc support hardware-accelerated routing with QoS. If you know of one, let me know! It is not always clear, but enabling QoS usually disables hardware offloading, for example with Ubiquiti devices[1] "Traffic to which QoS policies have been applied cannot also take advantage of the EdgeRouter's Offloading feature". The same is true for open source even with binary blobs. The chips simply can't do it. Using QoS and implicitly disabling hardware offloading significantly drops the throughput as it becomes CPU bound. "Without offloading enabled, IPv4 traffic will be routed via the CPU and will be limited to around 300Mbps on the EdgeRouter Lite (ERLite-3). With offloading enabled, the throughput will be about 950Mbps." [1] [1] https://help.ui.com/hc/en-us/articles/115006567467 https://help.ui.com/hc/en-us/articles/115006567467
jvolkman 5y ago
I found a passively cooled x86 box that I run openwrt on. It's got 6 Intel gigabit NICs and I use Proxmox to virtualize guests. OpenWrt is one of those guests, as is Home Assistant which controls various home automation things. I posted about it on Reddit a while ago: https://www.reddit.com/r/homelab/comments/hzvfih/new_router_i58365u_quad_core_6_intel_nics https://www.reddit.com/r/homelab/comments/hzvfih/new_router_... At the time it had much better hardware at a similar price to more popular brands like Protectli and Qotom. Not sure what the scene is currently, but there a bunch of similar offerings on AliExpress.
- zbrozek 5y ago
  Why did you choose x86 openwrt over opnsense? I chose opnsense because it never occurred to me to run openwrt on not-a-consumer-router and now I'm wondering if I screwed up. Like you, I run a single x86 box with a handful of guests for random stuff - including Home Assistant!
  - jvolkman 5y ago
    I did try opnsense, but found that I wanted wireguard more than any of the features it offered. At the time wireguard wasn't a built-in option, so went back to OpenWrt which I was already familiar with anyway from running it on Linksys routers.
    - zbrozek 5y ago
      Makes sense! I'm using wireguard on opnsense (but it's a newish feature) and so far it's been a great experience.
    - circularfoyers 5y ago
      I had a similar experience and ended up doing the same. OPNsense does include a userspace implementation of Wireguard, but is obviously inferior to what Linux already has. It ended up being that, how poorly the initial kernel space implementation was handled for FreeBSD and that I wanted Cake for QoS, which made me move back to OpenWRT. I do want to ask though, has there been any downsides to using OpenWRT on x86?
zamadatix 5y ago
If you're looking for a router that does NAT you're not going to beat a purpose built hardware board in terms of perf per dollar, especially only latency and jitter of the NAT. If you're looking for a network connected server that happens to do a lot of packet processing you can go the rpi route but I'd still front the internet and rest of the home internet off a small cheap hardware box like the Hex.
antattack 5y ago
If you want something fast and inexpensive than wait for OpenWRT build for Redmi AX6 / AX3600 WIFI routers. For now only manual build is available and some have to reboot from time to time due to memory leak. https://forum.openwrt.org/t/adding-openwrt-support-for-xiaomi-ax3600/55049/4058 https://forum.openwrt.org/t/adding-openwrt-support-for-xiaom...
scottlamb 5y ago
One downside to the Raspberry Pi (CM)4 is that it doesn't have hardware crypto. So it'd make a poor VPN machine. But otherwise I think it'd be fine. Some people are happy just using a regular Pi 4 connected to a VLAN-capable switch or with a USB adapter for the second NIC. I recently bought a GL.iNet Brume. It's a nice tiny ARM machine I use as a wired-only router. /proc/cpuinfo confirms it supports hardware crypto... Features : fp asimd evtstrm aes pmull sha1 sha2 crc32 cpuid ...although I haven't set up a VPN on it yet. Downsides: the WAN and LAN0/LAN1 ports are all the same switch with only one network interface, so it'd be impossible to achieve >500Mbps full-duplex. (It's never come up for me; my Internet connection's too slow.) It's also a little pricy for what it is. I might have tried the FriendlyELEC NanoPI R4S instead, which actually has two separate NICs. But if I'd ordered that I'd still be waiting for it... One thing I don't care about: hardware NAT/routing offload. I think that's often unsupported by OpenWRT, and it's incompatible with SQM.
- squarefoot 5y ago
  Not sure if it supports all the features you need, anyway you might find interesting the PCEngines APU2 boards. https://pcengines.ch/apu2.htm https://pcengines.ch/apu2.htm
  - scottlamb 5y ago
    Those are neat looking machines. I saw them and iirc quickly ruled them out because they're not available now.
  - cycomanic 5y ago
    Anyone has experiences with the complete build from https://teklager.se/en/products/routers/ https://teklager.se/en/products/routers/ They look very nice (although unavailable till January)
- stragies 5y ago
  Concerning HW NAT/Offload support: the DSA support is (iiuc) supposed to be the framework, through which the offload functionalities will be implemented. There is a pull-request for DSA even for architectures as far back as ath79. I haven't read into the specifics yet, but it sounds like nft-tables configuration will be translated to a eBPF program, that will then hook into network flows, and tell the switching HW/NPE over some side channel which accelerations to use and shortcuts to take. But do I really want to trust a "Black Box Network Processing Engine" bolted onto my CPU, that can route packets entirely outside the realm of control of the main CPU? I always wonder about intentional or unintentional "in-band debug features", when people mention, that they run their home-lan on the same switch as the WAN-Uplink. I mean, is there really a HW vendor, that we trust to get the switching logic 100% correct/secure/performant?
Wubdidu 5y ago
Probably depends on how complex your setup will be. We are running a normal 1GB Pi4 with OpenWRT (trunk until now) for quite a while on a 1gbit down/500mbit up fibre uplink with SQM against bufferbloat. Unifi switches handle all VLAN related work, fibre uplink is on VLAN 7 mandated by the carrier, so PPPoE works with only one LAN port on the Pi4. Wifi is also unifi hardware. Thanks to full duplex, clients are able to use the fibre uplink without slowdown. VPN is managed by a separate system, though we had some successful experiments with WireGuard. Both a colleague and I are running the exact same setup at home (with fibre uplink and VDSL). It's a very capable and power efficient setup. I'd definitely go with a CM4+dual NIC board today.

nanis 5y ago

Amazing ... I had just checked a few minutes before this post. I tried RC.1-4 and they were definitely improvements on 19.07 in terms of general feel, reduced need for weekly reboots etc.

Havoc 5y ago
>reduced need for weekly reboots etc. That shouldn't be the case. I've definitely had multi-month uptimes

encryptluks2 5y ago

TP-Link has to be one of the worst when it comes to privacy and features, but they've been offering 3 triband AC2200 mesh routers at Costco for a while for anywhere between $159 and $199. If I could get OpenWRT working on something like those I'd be so happy.

daneel_w 5y ago

I've happily been running OpenWRT on a $30 Wi-Fi access point (Netgear EX3700) for 3 years now, after I ultimately got tired of the unideal situation with OpenBSD's Wi-Fi support/performance. I run the access point in bridged mode as a wireless VLAN extension for the unmanaged Ethernet switch it's plugged into. Never gone quirky on me despite months of uptime, and has no problems saturating 100 Mbit/s.

Arch-TK 5y ago
I personally run an OpenWRT Wi-Fi access point and OpenBSD router. The max download speed I get from my ISP is 350Mbps and the router is able to handle that. But yes, WiFi on OpenBSD is something which is not really a good option right now.
sdze 5y ago
Just checked on your model mentioned. Seems to be a "Range Extender". Does it still function as Router with OpenWRT?
- wtallis 5y ago
  Consumer network devices do routing in software (with a few exceptions), so the OEM's intentions for whether a device should be a router, access point, or range extender are meaningless when the software has been replaced with OpenWRT. At worst, you end up with a router that has an inconvenient number of interfaces. A range extender may not have an Ethernet port labeled "WAN", but that doesn't prevent you from using one of its "LAN" ports for that purpose. Likewise, if you want to take a device sold as a router and use it only as an extra access point within your network, you can repurpose its WAN port as an extra LAN port, or go for more complex network configurations where you use the router's built-in switch as a VLAN-capable managed switch.
- daneel_w 5y ago
  It's only a range extender by Netgear's firmware design. The actual device is a bog standard SoC with Wi-Fi + Ethernet, so OpenWRT can turn it into anything, incl. a wireless router directly connected to WAN if need be. In my case I don't run it as a router, but as a wireless-to-Ethernet bridge into the rest of my LAN.

stragies 5y ago

I wonder, if DSA works correctly on all platforms in scenarios where MTU > 1500 is needed and/or encapsulations like Batman. Because both are problematic at least on ramips/mt7621 and RTL8380 for me. Better but still not not right with the current 5.10 testing kernel in master. Maybe related to the bug mentioned here: https://github.com/openwrt/openwrt/pull/4493 https://github.com/openwrt/openwrt/pull/4493 I was hoping, that 21.02.0 would still include that one. In any case, many thanks for all the hard work to everybody involved!

jordemort 5y ago

This an exciting release for me. A few years ago, I bought a vastly overpowered (at least, for router purposes) x86 box with a bunch of ethernet interfaces, with the idea that I'd run OpenWRT on it and then deploy a few containers to it for extra services. Until this release, though, many of the kernel options needed to support containers weren't enabled on OpenWRT's default kernel. It was possible to pull off my original plan by doing a custom build, and the OpenWRT build system makes this very easy, but it's even easier to be able to just grab a pre-built release.

bubblethink 5y ago
Why do everything in openwrt ? Virtualize openwrt itself on an x86 host and do whatever else you want with other vms.
- Weryj 5y ago
  This, I run proxmox and use a few instances of PFSense to setup multiple networks for my VMs.
- jordemort 5y ago
  I've run OpenWRT in a VM before as a gateway to a set of other VMs on the host, but I'm skeptical about the performance implications of running it in a VM for my primary internet connection. In general, I find VMs a huge pain to manage compared to containers. I don't run any VMs at home anymore, aside from firing a temporary one up from time to time to try out some random ISO.
  - bubblethink 5y ago
    vm performance is excellent, especially if you passthrough the nic. Use libvirt + kvm. It's pretty simple to use vms on standard distros. virt-manager is a good gui.
    - jordemort 5y ago
      It’s still a whole other kernel and disk image to worry about, passthrough to get set up, etc. For the stuff I run at home, I want things to be as simple and and automated and reproducible and hands-off as possible. VMs feel too much like work. If I never have to edit libvirt XML again, I might die happy.

EGreg 5y ago

I really wanted to have software that can be installed on some Linux computer that our customers would put on their network, and it would redirect DNS to our captive portal (web-hosted by us on the same machine or another machine on the local network) unless the MAC or IP address was whitelisted. Why is this so hard? I don't think we need OpenWRT on a router, do we? I mean, can we just set the DNS on the router to use a local machine, and can I use Bind9 or DNSMasq? https://tech.surveypoint.com/posts/installing-a-local-dns-server-behind-a-hardware-router/ https://tech.surveypoint.com/posts/installing-a-local-dns-se... Macs, for example, can add "compname.local" to DHCP using Bonjour. Can I somehow use Wide-Area Bonjour or Zeroconf or something, to accomplish this? I am not a network expert, all I want is to have a computer join the local network and run a DNS server, tell the router to forward all DNS requests there, and our DNS server will respond with our captive portal for any domain, so we can "take attendance" and checkins via wifi, and after people connect once, every time they walk into the room, their cookie will announce them to the captive portal, we register their attendance and then let the DNS pass through to whatever other DNS server they had. PS: I guess this wouldn't work if they manually set DNS servers to be the IP address OpenDNS or something like that, right? What is the correct approach to captive portals in that case? PPS: Why are captive portals so SLOW on every iPhone I ever owned? It takes like a minute or three to come up. What is causing the delays?

rektide 5y ago

Ultimately, I'd way rather run a regular PC with good wifi hardware and Debian. But our wifi options are extremely extremely extremely slim. I tried to purchase some 802.11ax m.2 cards from a variety of alibaba et cetra sites & I got the run around & offered 4 year old shitty alternative products again and again and again. So OpenWRT is pretty amazing. Incredibly hard work, incredibly good system, targeting so many different devices. The "uci" configuration system and "ubus" rpc layer are nearly unparalleled in software, have brought so many different systems under a consistent yoke & collar. OpenWRT is incredible. But again it comes back to hardware. And wow what a tragedy we have been undergoing. It's a barren bereft world. There's really only one router, with a pretty mediocre MediaTek cpu/wireless chipset, that has 802.11ax support at all. Hopefully things swing around some & we figure out how to get operating systems installing atop more contemporary routers, but there have been so so so few advances, hardware has gotten so much more inaccessible. It makes me all the sadder that decent wifi addon cards are blanketly unavailable. Read it and weep, the forum thread on 802.11ax routers: https://forum.openwrt.org/t/802-11ax-routers/10484/354 https://forum.openwrt.org/t/802-11ax-routers/10484/354 I got a second openwrt router recently. It's been very interesting & surprising seeing how little cross-access point and cross-band steering clients do. I'm literally compiling openwrt fresh today, as I work on this problem, with some fresh new software systems that have only just cropped up in OpenWRT land. For a while OpenWRT had nothing, but we're finally developing some acumen for using multiple access points and that's so necessary & so great. I've grown more respect for the mesh based products that have taken over: not only do the routers have to mesh (and route across the mesh), but it's really up to them to steer clients ("stations") to the best access point: the problem is bedevilling crazy hard.

mattbillenstein 5y ago
I use a wifi router in bridge mode to provide the wifi capabilities using the stock firmware, and a NUC like device running Ubuntu with two ethernet interfaces to do everything else - NAT, DHCP, LAN DNS, firewall, etc... I've thought about trying to do everything in the NUC, but at some point, just configuring it all is sorta a pain.
Sebb767 5y ago
> There's really only one router, with a pretty mediocre MediaTek cpu/wireless chipset, that has 802.11ax support at all. Why not go for a separate router and access point? I know its not for everyone, but it makes debugging stuff and tinkering so much easier. As a bonus, you can run a different router OS (like OPNSense). I personally run a Mini-ITX PC ( ~200€ from used parts, but with 2.5G link) and an Ubiquiti AP WiFi 6 lite flashed with OpenWRT - it's around 100€ new, has great hardware and is supported.

xook 5y ago

Been running OpenWRT on routers for the better part of 5+ years now. I'm not crazy about some of the software being very minimal[0], and it sometimes takes a few tries[1], but it runs quite well on a Linksys 1900ac. Time for a weekend upgrade! [0] Dropbear doesn't {didn't?} support ed25519 at the time I was using it for SSH, but it took me an afternoon of dead ends and "it's not DNS" feelings before I found that out. [1] I know about the serial console, but I'd prefer a simple, direct access keyboard/mouse setup if I screw it up.

happy-dude 5y ago
I'd like to express general caution with upgrading to 21.02 on Linksys WRT-series routers; the Marvell "open-source" firmware isn't truly open source (it has proprietary binary blobs) and development seems to have halted sometime in 2020. Many users report Wi-Fi connectivity issues[0]. When I did an upgrade, I was unable to connect my laptop and Roomba to wifi, and had to rollback to 19.07.8. [0] https://github.com/kaloz/mwlwifi/issues https://github.com/kaloz/mwlwifi/issues
- m3adow 5y ago
  Thanks for the heads-up. I was considering upgrading soon. Now I'll wait for the bug reports to be resolved first.

nine_k 5y ago

(1) It's wonderful how many things can OpenWRT do now, beyond basic routing; it can even run containers in the default build. (2) It's interesting how much resources this requires now, though; 128MB RAM is recommended, and 64MB is barely sufficient. To fit into 32MB and run basic routing functionality, one needs to remove IPv6 from the custom configuration, for instance. Mere 15 years ago 16MB was almost plenty to run OpenWRT :) I also wonder how much more compact a RAM footprint of a router can be if it only does routing, though competently: with IPv6, QoS, etc. Maybe it won't be much more compact even with a super-compact purpose-built kernel and network stack (not Linux).

Sebb767 5y ago
> Mere 15 years ago 16MB was almost plenty to run OpenWRT :) Given that we have gone from two/three digit gigabyte disk to two/three digit terabyte disks, I'd say it held up pretty well ;)
- cyberbanjo 5y ago
  Isn't OpenWRT a distro for routers? Your router came with gigabit disks?
  - wtallis 5y ago
    A lot of consumer routers these days store the OS on NAND flash instead of NOR flash, and 1Gbit to 4Gbit capacities are common. One of Google Fiber's Network Box models has 2GByte (16Gbit) of NAND.
  - magicalhippo 5y ago
    I run OpenWRT on a NanoPi R2S[1], it has a 16GB SD card and 1 GB of RAM. Cheap and plenty of power for my home network. [1]: https://www.friendlyarm.com/index.php?route=product/product&product_id=282 https://www.friendlyarm.com/index.php?route=product/product&...
- brirec 5y ago
  Where can I get a three digit terabyte disk?!

RandomWorker 5y ago

WPA3 native support is nice. Now, I don’t have carry around a drive with that on there. Or connect to an unsafe network to download.

Sebb767 5y ago

I'm running OpenWRT for a few years now and it's absolutely great for simple setups (and even quite complex ones for homes). It is also possible to flash recent Ubiquiti hardware with OpenWRT; an AP WiFi 6 Lite flashed with it makes for a cheap (~100€) WiFi 6 access point with great range.

Jailbird 5y ago
Out of curiosity, what benefit do you get by flashing the AP vs the stock firmware?
- kelnos 5y ago
  I have a similar setup (older Ubiquiti AP-AC Pros), and for me it was just a dislike for Ubiquiti's cloud-connected/distributed management architecture. I don't want my network hardware phoning home or depending on the cloud or even other components on the local network for any functionality. (It's sorta similar to how I feel about Apple; I really like their hardware, but am not a big fan of their software.) I also just in general trust an open source project (sure, I know, I haven't personally audited the source or the build process) over close-source manufacturer firmware.
- Sebb767 5y ago
  The sister comment is pretty much right; I don't have much trust in Ubiquitis software at the moment. Additionally, I know and like the interface of OpenWRT and I don't want to run a separate management server.
- Arch-TK 5y ago
  Basically I sat down one day and wanted to add another WiFi network to my access point. Since the previous time that I had to manage the AP, I had switched my laptop from Archlinux to Voidlinux. I tried starting ubiquiti's stupidly over the top java based management daemon on my laptop in order to manage the access point (which I used because I don't own a smartphone and even if I did, I wouldn't want to run any proprietary applications on it). To my surprise the software relied on mongodb which basically no distro packages anymore because of their crazy license change. I tried to spend some time getting mongodb locally packaged for my laptop (I refuse to install software without the package manager backing it up) but compiling mongodb is apparently nontrivial and I couldn't get it to work. So I gave up on getting that working and just put OpenWRT on it because it provided me with a nice simple command line interface as well as an optional web interface. I was also able to quickly cut down the firmware to the bare minimum as I just wanted to bridge WiFi interfaces to VLANs. I had a minimal, reliable and easy to manage access point which has been running 24/7 since that day for the last 218 days without a single hiccup. I no longer stress about having to run some insane daemon when I want to modify the configuration of my access point.

deleted 5y ago

[deleted]

nerdponx 5y ago

I've been wanting to try OpenWrt for a while, but apparently my Netgear R6700v3 isn't supported because of its Broadcom chip. What's a good consumer router for OpenWrt? I don't do any fancy home lab stuff, just normal people watching videos and me posting on Hacker News.

bubblethink 5y ago
Wifi will always be hit or miss with Openwrt. The general advice is to use openwrt for routing and a separate access point that runs vendor firmware for wifi. Should you want everything in one device, R7800 is a well supported openwrt all-in-one device.
- kelnos 5y ago
  I have two Ubiquiti AP-AC Pro APs, and I've been running OpenWRT just fine on them for the past year and a half. Completely rock solid. I didn't do performance testing with the stock firmware, so I don't know if I get the same WiFi speeds, but what I do get is more than sufficient for my purposes. Maybe other hardware doesn't work as well, but I think if you choose carefully, it's fine.
- wtallis 5y ago
  Wifi is only hit or miss because it's often difficult or impossible to tell when a vendor has silently swapped out the guts of a model and replaced them with Broadcom parts.
  - ur-whale 5y ago
    How does dd-wrt pull it off, then?
    - stragies 5y ago
      (As far as I know:) By sticking to the Vendor-supplied SDK kernel version, with ancient blobbed up 3.X Linux kernels, for architectures, where modern kernel/module/userspace (source) is not available. Openwrt aims for "near-mainline" blob-free kernel, currently on 5.4, with 5.10 in current master for many architectures.

nprateem 5y ago

Has anyone got a guide for getting openwrt to tether to a 5G mobile hotspot for the upstream WAN? I've found one showing how to connect via USB, but I don't want to have to plug my phone in to my router to be able to use my phone's mobile data.

Nextgrid 5y ago
You can have OpenWRT act as a Wi-Fi client (you might need to install the wpa-supplicant package). At that point your wifi interface is connected and you can adjust the firewall/routing/IP configuration to mark it as "WAN".
- nprateem 5y ago
  Thanks I'll give it a try.

ksec 5y ago

>The OpenWrt 21.02 series focuses on bringing all supported targets to Linux kernel version 5.4 and introducing WPA 3 support into default images. [1] It somehow wasn't a specific headline / item in the release note. But I thought updating to 5.4 was a big deal. [1] https://openwrt.org/releases/21.02/start https://openwrt.org/releases/21.02/start

hypothesis 5y ago
It was an item on goals page and is listed under “Core components update” on release page. Unless there is some particular feature that someone wants or a device enablement that only possible starting with a kernel version, do most users care? [1] https://openwrt.org/docs/guide-developer/releases/goals/21.02 https://openwrt.org/docs/guide-developer/releases/goals/21.0...

ur-whale 5y ago

openwrt, however nice, does not support as many systems as dd-wrt and is still not an option for me because of that.

champtar 5y ago
OpenWrt doesn't use proprietary drivers and instead try to ships really recent kernel (21.02 ships 5.4, master has 5.10), so that might be why your particular model will never be supported. dd-wrt seems to be maintaining some eol kernel, I'm wondering for how long https://svn.dd-wrt.com/browser/src/linux/universal https://svn.dd-wrt.com/browser/src/linux/universal
- garbagecoder 5y ago
  A license is not a feature.

fomine3 5y ago

> TLS and HTTPS support included by default I'm curious how they solved TLS non self signed certificate on local device problem described here: https://lwn.net/Articles/837491/ https://lwn.net/Articles/837491/ I tried to find info but I can't find any.