7 ms·
FreshTomato
- emmelaich 5y agoAn update to the classic https://en.wikipedia.org/wiki/Tomato_(firmware) https://en.wikipedia.org/wiki/Tomato_(firmware)
- rkagerer 5y agoHave used this on a few different router models, works well.
- eloeffler 5y agoIf anyone else is looking for this: If I get it right, there seems to be wireguard available but there is no GUI yet (for ARM devices). https://wiki.freshtomato.org/doku.php/feature_matrix?s[]=%2Awireguard%2A https://wiki.freshtomato.org/doku.php/feature_matrix?s[]=%2A...
- forgttnpass 5y agoThat’s correct. Setup must be through cli. But it’s faster than the OpenVPN implementation and the GUI will happen eventually.
- jokowueu 5y agoNo idea tomato was forked again ! Tomato was the only firmware that I liked to use and only stopped using it when shibby abandoned is 4 years ago.
- netol 5y agoYou mean 11 years ago
- jamesholden 5y agoOof... right in the feels. Are... are we old now?
- ThePadawan 5y agoI honestly expected a RottenTomatoes fork, not a Tomato fork.
- TonyTrapp 5y agoI expected a libre implementation of WholeTomato's Visual Assist plugin :)
- KabirKwatra 5y agoSurprised to see this on HN, but can vouch for this one: actually good router software.
- arbitrage 5y agowhy surprised? seems like it fits right in here.
- durnygbur 5y agoHad to flush it off from the router because it didn't support the FTTH configuration required by ISP.
- avh02 5y agoused to run tomato on linksys e4200, had a symmetric gigabit connection (university network, 2017)- it had issues getting passed 125 mbps due to not having access to certain hardware features. Flashing back to stock firmware gave me my gigabit back but lost me my control. I hope that this is a solved issue, i never looked far in to it either so it may have already been solved. Just check before you jump in.
- bserge 5y agoYeah you could load the bcm_nat module at boot to use Broadcom's hardware NAT. Worked on some chipsets. Openwrt is better, so just look for something with a supported chip, Atheros or Qualcomm these days.
- ksec 5y agoOh Thank You. I always thought Tomato was dead, and the only living thing that carry its legacy was ASUSWRT. Time to play with it on my old ( no longer updated ) ASUS Router.
- gizdan 5y agoFor those of us who know less about these things, how does this compare to something like OPNsense/pfSense in a homelab setting? When would one use OPNsense/pfSense over OpenWrt/Tomato?
- bipson 5y agoFor starters, I don't think you will get OPNsense, pfSense or the likes running on OTS router hardware. So, if this is what you intend, there is not much choice. Then it depends on your requirements. If your homelab lands in the area of 95% of the typical use cases, you will be very fine with OpenWrt or Tomato, or actually even most original firmware. Unless you bought something that is ridden with bugs and will not get updates, there are most certainly no noticeable benefits of running an alternative firmware. (Things like bufferbloat come to mind, I prefer control over my buffers, but good routers firmwares also do this quite reasonably). Another difference: getting OPNsense/pfSense running (and well maintained) will require considerably more time and effort, than OpenWrt or Tomato. Actually, for most soho/home users I would recommend a FritzBox. They are really packed with features, are well updated, zero hassle. Unless you really, really need something more exotic, they will save you lots of time and money. Also: automatic updates (configurable). There is also MikroTik. Slightly more expensive than FritzBox, also packed, but slightly different audience (larger networks, less "user-friendly"...). Disclaimer: I have a FritzBox running PPPoE passthrough to an OpenWRT router running on a NanoPi 2RS dialing in over PPPoE, with a MikroTik CRS112 behind that running only as a switch. I have my reasons for that setup, but the time and money I wasted on that setup is really difficult to justify to an outsider (and sometimes to myself). The FritzBox worked really, really well.
- azalemeth 5y agoI mostly agree with this comment except for: > there are most certainly no noticeable benefits of running an alternative firmware For me, those are wireguard, pihole, and the unquantifiable benefit of freedom and choice. Oh, and vim at the cli, and usually a more complete environment than an outdated busybox shell.
- 5y ago
- alias_neo 5y agoIt's great to see so many different alternative Router OSs. I have a pile of routers, more than a dozen, which have stopped being updated and just basically abandoned by their manufacturers, well within their functional life, and many of them expensive, £100+ "pro home (wifi) routers". For some time I used a variety of OpenWRT(LEDE)[0], DDWrt[1], Tomato, PFSense[2], OPNSense[3] and others, because CVEs in my edge-router / firewall isn't something I'm keen on. I use an Ubiquiti EdgeRouter now, but I'm looking to move to a perhaps PCEngines + OPNSense for my next replacement. [0]https://openwrt.org/ https://openwrt.org/ [1]https://dd-wrt.com/ https://dd-wrt.com/ [2]https://www.pfsense.org/ https://www.pfsense.org/ [3]https://opnsense.org/ https://opnsense.org/
- MisterTea 5y agoPCEngines are all out of stock for quite some time: https://www.pcengines.ch/newshop.php?c=4 https://www.pcengines.ch/newshop.php?c=4 I found out after my APU2 bit the dust last month. Though that's what I get for running it in a room that routinely gets to 35C/95F in the summer months. Lasted years so I still recommend, just don't put it somewhere stupid like me. Running a spare Celeron J1900 ITX board paired with a dual GbE NIC in the meantime.
- alias_neo 5y agoInteresting, that's a pretty big window. How was performance, could it handle Gigabit WAN? Would/have you run OPNSense on it? I was considering an apu2e4 because I'd like something more open (coreboot) than the other hardware I have to hand.
- MisterTea 5y agoI only have 100Mb FiOS and it handles that just fine. I'm not sure if it can handle gigabit. It ran OPNsense and acted as a basic router and dyndns, nothing fancy. My only real advice is to use an mSATA disk and not SD. My first install ran from a 32GB Sandisk SD card which died after a year. If and when I buy a new APU I plan on running OpenBSD and learn to setup PF proper and roll my own router (A friend runs such a setup and loves it). At this point I just want a standard OS.
- rcarmo 5y agoThis is pretty neat, I used to run Tomato on a lot of hardware. Shame there are no screenshots, as the original Tomato GUI was pretty nice for the time and I'm curious as to what it looks like now.
- planb 5y agoI run this on my Asus R7000 and it's the best firmware I've ever used on this (or any router) device. NAS, OpenVPN, Guest Wifi and even Transmission (Bittorrent Client) and nginx have been running stable for many years now, and the network speed can keep up with my 500Mbit line (I heard Gigabit might be a bit too much for that device). So glad FreshTomato still keeps on getting regular updates and lets me use the now 7 years old R7000.
- nullwarp 5y agoSame, FreshTomato is great
- smallerfish 5y agoIt's maybe an unfair bar for open source projects, but I'd love to see a third party audit of the source code (and binaries). Downloading a binary that all of my network traffic goes through is...trusting. (And I have done so the past - dd-wrt & tomato; and, sure, it's not a ton different from using out of the box firmware from e.g. Tp-Link or Ubiquiti)
- quesera 5y agoMy logic is this: Open source router firmware: a) is derived from well-established Linux/BSD networking stacks, b) has a smaller installed user base, so is a less-attractive target, and correspondingly c) has a lower value of exploit, which is more likely to be CVE'ed for reputation than sold for cash. An audit would be interesting and welcome, but I have more ambient confidence in open source router firmware than vendor firmware. There's nothing unusual about the hardware in these things that the vendor has special knowledge of. Also, most alternative firmwares have better performance, a better UI, are more frequently updated if bugs are found, and have more features than most stock firmware. I've used OpenWRT, DD-WRT, and Tomato on inexpensive consumer routers in the past. Never regretted any of them. I purchase home router hardware specifically by the compatibility lists.
- smallerfish 5y agoYeah, it's a fair point that e.g. broadcom firmware is a good target (https://www.cvedetails.com/vendor/5420/Broadcom.html https://www.cvedetails.com/vendor/5420/Broadcom.html) because it's widely deployed.
- pinebox 5y agoIt's considerably heavier than older Tomato versions, so if you have a 10-year-old router that's already running fine on an older Tomato variant I don't recommend it.
- LeifCarrotson 5y agoIf you expect people to be running a WRT54G from 2002 or a WRT54GL from 2005, that's a fair warning. Those only had like 4 MB Flash and 16 MB RAM, and a single-core MIPS processor at 125 or 200 MHz. When those came out, you were probably running a Pentium 3 with 512 MB of DDR2-800 and had an 80 GB hard drive. If you're still running that as your PC, be careful, because modern desktop operating systems and programs are also considerably heavier. Stick with Netscape for browsing the web, though there's a new browser called Firefox in version 0.9. Napster recently shut down, but yes, your old Tomato firmware should be nice and snappy while using Limewire over your DSL modem, FreshTomato, with all the options built in, might not fit. This will, indeed, run best and be enable the most features when using a router that has a comparatively generous 128 MB of Flash, 64 kB of NVRAM, and 128/256 MB of DRAM. Those are no longer opulent or excessive stats. Wifi AC is out, treat yourself to something with MIMO antennas, a dual-core 1+ GHz ARM processor to run all the neat plugins you might want to use, and USB3 storage. Even with that higher power, switching power supplies have improved dramatically in the past few decades, both the router and the power brick will probably not be as hot as on that old router at the same time as they're doing more and doing it faster.
- julianlam 5y agoI think the maintainers build different variants based on RAM size and feature set. For example, the image I used on my router was 27Mb, but the smaller "min" image for the relatively old RT-N12 was only 3.6Mb.
- cdubzzz 5y agoI find the router firmware space very confusing. I’ve got a Netgear R6400 with TomatoNG. It worked well for a while but lately I seem to be having a lot of trouble with dropped connections and general sluggishness. I haven’t taken the time to try to rule out the router or anything but I did try to look up if there was any newer firmware and TomatoNG seems to be abandoned. From there I couldnt really figure out other things to try.
- qntty 5y agoTomato has always been my favorite router firmware. It's a shame it hasn't been continuously maintained. I never donated to it but in retrospect I would pay for it. Last time I updated my router I used another fork called AdvancedTomato. It looks like that's dead now too.
- jcpham2 5y agoOnce the original Tomato fell off, DDwrt is such a shitshow, OpenWRT/LEDE has been the go-to for years this is neat to see because I didn't know about it
- IshKebab 5y agoAfter I lost pretty much a whole day to a bug in another Tomato variant I think I will stick with the stock firmware. Asus's is decent enough.
- evolve2k 5y agoWhich (decent) current era modem/routers could I use this with now? Working out which routers support flashed firmware has always confused me. Thx
- julianlam 5y agoI was also a little confused and bought the cheapest router on the list, the Asus RT-N12. The underpowered 2.4GHz radio meant it was completely overwhelmed by competing signals. I now run this on an RT-AC68U, which has a dual radio. Is it the most recent router? Probably not, but it gets the job done and has a USB port for printer sharing (no clue if that works, we shall see.)