The low-down on home routers – how to buy, what to avoid

Re:The low-down on home routers – how to buy, what to avoid by chewyland on Saturday May 25, 2019 @04:26AM (#20007751)

Just bought a Mikrotik router. Can't wait to get it home and start tinkering.

[ Parent | on HN ]

Re:The low-down on home routers – how to buy, what to avoid by aequitas on Saturday May 25, 2019 @07:36AM (#20008420)

I got a few mikrotiks at home and friends/family. They are quite nice as they offer about every networking option the Linux kernel has to offer. However they don't expose the Linux userland so they are not as hackable as openwrt. For example getting wireguard to run on one is not practically possible at the moment. That said they offer a really stable solution with a good (though steep learning curve) UI and terminal interface. And even the smallest cheapest models come with everything included (bgp, MPLS, IPsec, openvpn, advances firewalling and queueing, centralised AP management).

If you like to have a Linux router with every knob on a panel this is for you, if you want (and will have to) open the panel to tweak with the wires, not so much.

[ Parent | on HN ]

Re:The low-down on home routers – how to buy, what to avoid by sliken on Saturday May 25, 2019 @04:58AM (#20007843)

I've heard of Mikrotik, seemed popular with SysAdmin types, at least until they were widely targeted by some malicious folks looking to compromise SysAdmins to exploit the networks they manage.

Found one of many mentions (sorry for the long URL): https://www.trendmicro.com/vinfo/us/security/news/cybercrime...

I heard something about software limiting the routers, so you had to pay for license upgrades to get full functionality out of their routers. Any truth to that?

[ Parent | on HN ]

Re:The low-down on home routers – how to buy, what to avoid by garganzol on Saturday May 25, 2019 @05:29AM (#20007976)

The amount of security weaknesses in Mikrotik is low and they get immediately patched. Those guys do excellent software updates and there are tons of resources to get help at.

Regarding the pay for a license to get the full functionality. There is no chance a home or ordinary office user will ever hit any limitations within a stock license. The upgrade might be needed only for the ultimate stuff in realm of BGP tunnels and stuff alike.

[ Parent | on HN ]

Re:The low-down on home routers – how to buy, what to avoid by mopsi on Saturday May 25, 2019 @02:10PM (#20010368)

My memory isn't perfect, but from the past few years I've had Mikrotiks, I don't remember any effective attacks against properly configured devices. By "proper configuration" I mean disabled telnet, no management access from the internet, and other really basic precautions.

The 200 000 devices mentioned in the article you linked all had management port exposed to the whole world, which is something that should never be done.

[ Parent | on HN ]