3 ms·

The Consumer Router Trap

11 points by nabilhat 5y ago

btach 5y ago
The setup I have for my shop is a tiny computer with OpnSense with the LAN port connected to a 5-port switch. I have an old wifi router with OpenWRT installed put in switch mode for wifi access to that network (plus extra ethernet ports). I was thinking of looking into putting my cable modem/router into modem-only mode and using a different router like I have in my shop for the local network. My question is this: If there were vulnerabilities in my modem/router firmware, does putting it in modem-only mode and using a separate router/switch mitigate them? Does it depend on the specific vulnerability?
- estaseuropano 5y ago
  Just wondering: is yours a security or cost concern? For instance it strikes me that running three devices all day for 3-4 years (assuming that the devices themselves were free or cheap) might well cost the same as a single modern router costs in purchase+energy cost over the same period.
johnklos 5y ago
This is why I'm disappointed that Apple stopped selling Airports. They're good quality, they do what they do well, they don't have tons of "features" to try to sell them, and they're supported for incredibly long periods of time. The last updates, issued in July, 2019, covered Airports going back to 2008. I'm waiting for a company - any company - to start selling devices that don't have tons of gratuitous features which expand the security surface, that aren't deprecated within a year or two, and that don't tie us in to some "cloud" service or paid subscription.
- Username21 5y ago
  Doesn’t really hit the not many features part, but MikroTik makes a pretty solid router that has long term support. And doesn’t cost very much. Is a steep learning curve though.
1MachineElf 5y ago
I'm curious to know what the author's intent was trying to use OpenWRT with a web server. I've happily used OpenWRT in several instances and have had good results for the most part. I wonder if the author took the problem they encountered to the OpenWRT forums - lots of helpful people on there. Unfortunately, when I clicked on their link about using it on a Raspberry Pi 3, it just links back to the same article. I can confirm however that FreeBSD works well as on a Raspberry Pi in a router-on-a-stick configuration. Had similar success with OpenBSD on a BeagleBone too.

11 points by nabilhat 5y ago

The setup I have for my shop is a tiny computer with OpnSense with the LAN port connected to a 5-port switch. I have an old wifi router with OpenWRT installed put in switch mode for wifi access to that network (plus extra ethernet ports). I was thinking of looking into putting my cable modem/router into modem-only mode and using a different router like I have in my shop for the local network. My question is this: If there were vulnerabilities in my modem/router firmware, does putting it in modem-only mode and using a separate router/switch mitigate them? Does it depend on the specific vulnerability?

estaseuropano 5y ago
Just wondering: is yours a security or cost concern? For instance it strikes me that running three devices all day for 3-4 years (assuming that the devices themselves were free or cheap) might well cost the same as a single modern router costs in purchase+energy cost over the same period.

johnklos 5y ago

This is why I'm disappointed that Apple stopped selling Airports. They're good quality, they do what they do well, they don't have tons of "features" to try to sell them, and they're supported for incredibly long periods of time. The last updates, issued in July, 2019, covered Airports going back to 2008. I'm waiting for a company - any company - to start selling devices that don't have tons of gratuitous features which expand the security surface, that aren't deprecated within a year or two, and that don't tie us in to some "cloud" service or paid subscription.

Username21 5y ago
Doesn’t really hit the not many features part, but MikroTik makes a pretty solid router that has long term support. And doesn’t cost very much. Is a steep learning curve though.

1MachineElf 5y ago

I'm curious to know what the author's intent was trying to use OpenWRT with a web server. I've happily used OpenWRT in several instances and have had good results for the most part. I wonder if the author took the problem they encountered to the OpenWRT forums - lots of helpful people on there. Unfortunately, when I clicked on their link about using it on a Raspberry Pi 3, it just links back to the same article. I can confirm however that FreeBSD works well as on a Raspberry Pi in a router-on-a-stick configuration. Had similar success with OpenBSD on a BeagleBone too.