3 ms·
I'm happy owner of two Turris Omnias for 2 years (I use them to interconnect my appartments in two distinct cities into the single LAN, via OpenVPN). I highly
by mkup 5y ago
I'm happy owner of two Turris Omnias for 2 years (I use them to interconnect my appartments in two distinct cities into the single LAN, via OpenVPN).
I highly recommend this router. A bit pricey, but it is worth every penny.
Ability to install run arbitrary software is incredible (not only from packages, configure/make/make install works too!). I run openvpn (see above), dnscrypt-proxy, aws cli tools (for dynamic DNS updates), influxdb, grafana, microsocks SOCKS5 proxy (for filtering out Windows 10 updates and telemetry traffic, but letting Firefox/FoxyProxy to access the internet), vlmcsd, transmission, ffmpeg (for storing video surveillance data), nextcloud and many other software on my router.
BTRFS-backed snapshots (both for base system and for LXC containers) provide an ability for instant rollback if router is misconfigured or something else (e.g. software update) goes wrong.
Both my Omnias were upgraded with LTE cards for backup connectivity (Quectel EC25-E and Quectel EP06-E). One Omnia has 1Tb mSATA SSD installed instead of stock 5 GHz WiFi card. Another Omnia has two 8Tb USB HDDs attached via external USB 3.0 hub.
Initially there were some WiFi signal quality issues which I solved by wrapping both WiFi cards in an aluminium foil:
https://forum.turris.cz/t/wlan-5g-not-starting-most-of-the-time/1828/145 https://forum.turris.cz/t/wlan-5g-not-starting-most-of-the-t...
Omnia is a kind of hardware which puts user in control (which is an extremely rare quality in the modern world).
- jaster 5y agoAren't you worried about increasing the attack surface a lot for a machine directly accessible on the Internet? I'm neither a network nor a security expert, but I would have thought that the router would be better running the minimum essential software only, and that the rest of that stuff would be better on other machine(s) on my local network. Especially since you have a VPN set up.
- mkup 5y agoI run most of this software in LXC containers, which are exposed on the LAN side of the router only (and have separate IP address). If it's necessary to expose some service on the WAN side, then I must configure a WAN-to-LAN port forwarding. It's like running stuff on the Raspberry Pi, but CPU is faster, and there's no actual physical Raspberry Pi involved.
- csunbird 5y agoCan you share the SSD model and it's dimensions that you are using with Omnia? I am trying to find one that actually can fit and have enough capacity for mine.
- mkup 5y agohttps://www.aliexpress.com/item/1005001682074987.html https://www.aliexpress.com/item/1005001682074987.html