Re:Router Security
by stonepresto on Saturday July 30, 2022 @08:45AM
(#32286349)
Don't rely on vendors to ship you secure fimware. Use something open source such as OpenWRT. It will make implementing the protections this blog mentions much easier.
[ Parent
| on HN ]
Re:Router Security
by throw0101a on Saturday July 30, 2022 @09:10AM
(#32286502)
I've found out-of-box Asus to be pretty good, and they sometimes even incorporate features from third-party firmware (see "first debuted"):
Merlin firmware is special in a good way. Merlin has a good relationship with the Asus firmware dev team, he gets early access to official firmware, they sometimes ship him unreleased routers. He often finds and fixes bugs and creates/adds new features that Asus pickup. Also very careful to maintain full compatibility with the stock firmware, making it easy to switch between stock and merlin. He has also created an interface to allow 3rd party features to get their UI page. There is probably more, but it really is an excellent project.
Re:Router Security
by whateveracct on Saturday July 30, 2022 @09:45AM
(#32286774)
Merlin is why I got an Asus router when the time came to upgrade.
Agreed. It’s also the easiest way to improve latency and fix bufferbloat.
Unfortunately not all Merlin-supported routers support the CAKE algorithm.
My choices are the RT-AC86U, and the RT-AX68U if you need Wifi 6 support.
Don’t get the RT-AC88U though, it has no CAKE.
(If you’re lucky enough to have a gigabit connection, you’ll need more expensive stuff.)
I've had similar experiences. As time goes on I want to spend less and less time configuring things and more on things that actually matter. Asus' defaults are good and whenever I do need to reconfigure something it's always a breeze.
I recently bought a TP-Link router. It comes with a note that says that it is based on GPL software. However, when I try to install OpenWRT firmware on it, it rejects the update (probably based on a missing crypto signature) ...
They do provide access to the sources, but isn't this still a violation of GPL?
Re:Router Security
by phonepostingsux on Sunday July 31, 2022 @05:34PM
(#32299069)
My understanding is that it would violate GPL-3 but not GPL-2 (search term "tivoization clause"). Notably, Linux itself is explicitly GPL-2. IANAL, nor am I an expert.