3 ms·

I used to be a openwrt contributor. It was never anything fancy. Automatic firmware updates would be my vote if i could vote. I wish they had add "next gen fi

I used to be a openwrt contributor. It was never anything fancy. Automatic firmware updates would be my vote if i could vote. I wish they had add "next gen firewall" to the list. Go compete with palo, fortinet, or sonicwall. Be able to have threatfeeds blocking. Having those extra features would be huge.

egberts1 2y ago
What? No nftables?
- cbzbc 2y ago
  They moved to nftables a release ago, fw4 uses nft under the hood, and there are hooks provided if you want to run your own rules. https://openwrt.org/docs/guide-user/firewall/misc/nftables https://openwrt.org/docs/guide-user/firewall/misc/nftables
pavon 2y ago
Yes, a built-in updater would absolutely be my vote. The OpenWRT device knows exactly which firmware build it needs, so having it download the update directly would be much faster and less error prone than having me do it. I'd still prefer to manually click to initiate the update on my schedule, but the process could be more streamlined.
- toast0 2y ago
  Attended Sysupgrade seems like the solution for this. It looks at your packages, does a cloud build for your board with your packages and you can push a button to update. Be aware if you're on snapshot, that the packaging situation is iffy right now. opkg is being replaced with apk, and there's some rough edges. I had a sysupgrade build that ended up with neither package manager, and the automatic tool doesn't currently work for doing new builds from an apk system. My wishlist item would be less churn or at least replacements should integrate as well as the old version.
  - pavon 2y ago
    Thanks, I wasn't aware of that package. I'll try it out. It should definitely be added to the default install once the devs are satisfied that it is stable.
- dehrmann 2y ago
  The main issues with the current upgrader is it doesn't install old packages and it can't migrate breaking config changes.

egberts1 2y ago

What? No nftables?

cbzbc 2y ago
They moved to nftables a release ago, fw4 uses nft under the hood, and there are hooks provided if you want to run your own rules. https://openwrt.org/docs/guide-user/firewall/misc/nftables https://openwrt.org/docs/guide-user/firewall/misc/nftables

pavon 2y ago

Yes, a built-in updater would absolutely be my vote. The OpenWRT device knows exactly which firmware build it needs, so having it download the update directly would be much faster and less error prone than having me do it. I'd still prefer to manually click to initiate the update on my schedule, but the process could be more streamlined.

toast0 2y ago
Attended Sysupgrade seems like the solution for this. It looks at your packages, does a cloud build for your board with your packages and you can push a button to update. Be aware if you're on snapshot, that the packaging situation is iffy right now. opkg is being replaced with apk, and there's some rough edges. I had a sysupgrade build that ended up with neither package manager, and the automatic tool doesn't currently work for doing new builds from an apk system. My wishlist item would be less churn or at least replacements should integrate as well as the old version.
- pavon 2y ago
  Thanks, I wasn't aware of that package. I'll try it out. It should definitely be added to the default install once the devs are satisfied that it is stable.
dehrmann 2y ago
The main issues with the current upgrader is it doesn't install old packages and it can't migrate breaking config changes.