Looking for some help trying to diagnose a network issue. I think the problem is stemming from openWRT but not sure.
I have multiple IPs showing the same 22:2f:d0:ae:02:57 MAC when looking at the ARP table on my pfSense box. The MAC address indicate a locally administered or randomized MAC address.
I noticed this MAC on the openWRT status screen so it seems anything going through the openWRT is being assigned this MAC but I am still able to stream and everything seems to be working somehow, but how???

Currently running: openWRT 25.12.5 - r33051-f5dae5ece4 and pfSense 2.9.0
I have cleared DHCP leases, ARP, rebooted both MT-6000 and pfSense box.

Anyone know what in the world is happening? Is there a setting I missed on the MT6000?

Hello all, I have been using DD-WRT on a Linksys WRT3200ACM router for awhile now with wireguard VPN loaded. I thought everything was fine until I just recently discovered that the router was causing issue when streaming with timeshift enabled.

So I disconnected the router from my setup and the streaming issue is gone. So, either there is a hardware defect with the router or as someone else told me, the problem could be with the DD-WRT firmware?

So I now am giving OpenWRT a shot and I already flashed the above Linksys router and am getting ready to load my wireguard VPN on it.

So my question here is for the users using OpenWRT…. Do you think this may resolve my issue as long as there is no issue with the router itself?

Thanks

So I wanted to collect historical traffic information of my clients, one thing is to identify top talkers, but more importantly to detect anomalies compared to a baseline for each device.

https://openwrt.org/docs/guide-user/services/network_monitoring/bwmon#view_historical_bandwidth_usage looks great, however there's a disclaimer:

if you are using flow offloading this data might not be recorded accurately.

Yes, I do have offloading enabled (having a gigabit WAN connection), therefore I'm confused whether there's a good answer by the end of 2026, how should I approach this problem?

Thank you for your insights.

**Edit, since several comments assumed otherwise: the language model does not run on the router.**

The router runs only the agent: the loop that takes your message, sends it to a model at a provider you choose (OpenRouter, OpenAI, a ChatGPT subscription, free models included) and then runs the checks the model asks for on the router itself. All the thinking happens at the provider. A router CPU would need minutes just to read the agent's system prompt, so a local model is not offered at all.

What that costs the router: about 200 MB of RAM, at nice 10. On a Flint 2 carrying a house's internet, nothing was dropped and the cores stayed 70 to 75% idle while the model was thinking; both test routers stayed at 45 to 52 °C fanless with six conversations at once. On a Brume 2 pushing WireGuard at 574 Mbit/s, a running conversation did take about a quarter of the tunnel, which is why the service runs at nice 10. It ships disabled and opens no port: Telegram is polled outbound.

TL;DR: you ask your router in Telegram “why is the internet slow?”, it runs ping, DNS and interface checks on the router itself and answers with what it saw. By default it can only read. Changes (guest Wi-Fi, WireGuard, firewall) need a PIN unlock, and a change that cuts the connection rolls back on its own in about 90 s. Needs clean OpenWrt 25.12 on aarch64 (no x86_64 build yet) and 1 GB of RAM (512 MB works with the packages on a USB stick, one chat at a time). Prefer not to run an agent on the router? The router side alone is openwrt-mcp (about 4 MB, https://github.com/TAIPANBOX/openwrt-mcp), and Hermes runs on another box.

I maintain hermes-openwrt, which packages the Hermes Agent (open source, from Nous Research) as a native OpenWrt 25.12 service. Version 0.21.5, package 0.21.5-r14, released 2026-10-09. Install steps are in the repo. This post is about what it does and what we measured.

What it is

A Hermes Agent package for OpenWrt 25.12: installs with apk from a signed feed, runs as a service, has a LuCI page. No Docker, no chroot. The agent lives on the router; the model runs with a provider you choose.

What it does

- Diagnoses the network on request in Telegram: ping to the gateway and the internet over IPv4 and IPv6, DNS checks, state of ports and interfaces, errors and losses on them, load and free memory. It answers with what it actually saw and says what it could not check.

- Knows what is on the network: connected clients (DHCP), interface state, Wi-Fi and network setup (passwords and keys hidden), and the router's system log.

- Searches the web and reads pages without a browser and without a separate web API key. It can find a piece of documentation or a new firmware or package version and summarise the key points.

- Runs on a schedule: an hourly network check that stays silent when all is normal and writes once when something is wrong; a morning digest (weather, exchange rate, one news item).

- Runs commands in its own terminal as an unprivileged user: anything that does not need root (ping, traceroute, nslookup, system status).

- Checks that a service it started is really running: it compares against the router's service list instead of trusting its own start command. It reads the settings of installed packages, with secrets hidden.

- Changes router settings (network, Wi-Fi, firewall, port forwarding, DHCP) and manages services only after /unlock. For example, it brings up a guest Wi-Fi isolated from the home network. After a new protocol is installed (AmneziaWG, for example), it can restart the network itself in an unlocked window.

- Installs packages if you enable it in LuCI: it first shows what would be installed, then installs after /unlock. Only by package name and only from the official OpenWrt feed: links, local files, third-party feeds and disabling signature checks are not possible. Tested with AdGuard Home, Tor, Transmission and vnstat: the agent installed and started each of them.

- VPN: sets up WireGuard on the router (interface, peers, addresses, firewall rules) after /unlock, and can install the WireGuard packages itself when package install is enabled. AmneziaWG can also be configured through the chat (interface, peer, obfuscation parameters), but its packages must be installed by hand: they are not in the official feed. Private keys are generated on the router with one command, so they never reach the model provider. The agent checks whether the tunnel is up.

- Helps with the rest: OpenVPN, SQM, setting up AdGuard Home, Transmission, Tor and so on. It finds the current instructions for your OpenWrt version, checks them against what is really on the router, and writes the steps.

- Remembers context between conversations, uses Hermes's built-in skills, and writes new skills itself after successful tasks.

- Models: any provider with an OpenAI-compatible API, such as OpenAI, Anthropic (Claude, directly with your key), Google Gemini, OpenRouter, a ChatGPT subscription, or your own model server on the LAN. Several providers can be set up at once, and /model switches the model in a chat.

- LuCI page: agent state, log, keys (write only), security settings.

- USB stick: the agent's data moves to a stick with one command, so it works on routers with little flash. If the stick does not appear right after the packages are installed, wait a few seconds and run block info again.

Which model

You need a current model. On the same routers in our tests: gpt-6.1-sol ran a full diagnosis and configured WireGuard and a guest network correctly; claude-haiku-5.5 runs a full diagnosis with ping too, at about half a cent per conversation; the older gpt-4o-mini looped and advised a reboot. A ChatGPT subscription can be connected with no per-token cost.

Resources

The service uses about 190 MB of RAM. It runs on a 512 MB router (Beryl AX) with the data on a USB stick.

Flash writes (measured on Flint 2 with 1 GB RAM and eMMC 8 GB, 7.3 GB usable, OpenWrt 25.12.5, data in internal flash, 2026-10-09; write counters, temperature, load and memory sampled every 20 seconds over 30-minute windows, projected to a day)

- Agent idle: the whole router writes about 0.5 GB per day. Without the agent: 0.05 to 0.15 GB per day.

- One conversation (diagnosis, device list, firewall check) adds 2.5 to 4 MB. Most of the agent's writes are its journal, service markers and the model catalogue cache.

- Installing a package writes it once.

- eMMC life counter: 0x01, that is 0 to 10 percent of its life used.

Next to other services

We asked the agent through Telegram to install what usually runs on a router, and measured on Flint 2:

- AdGuard Home, vnstat and Tor keep their databases, logs and caches in RAM by default, so eMMC writes stay at background level. AdGuard under 1,160 DNS queries in 10 minutes wrote as much as without it.

- Transmission: Debian (735 MB) downloaded to a USB stick in 6.5 minutes. On eMMC: background writes, CPU at 44 to 45 °C with 0 to 6 percent load, at least 395 MB of memory free, Transmission itself using 15 to 27 MB.

- Tor client: 61 to 66 MB of memory, eMMC at background level.

- AmneziaWG: the Flint 2 to Brume 2 tunnel gave 542 to 599 Mbit/s. The Brume 2 CPU was the bottleneck (94 to 96 percent), the Flint 2 at about a third. During a 4-minute iperf3 run, a Hermes diagnosis ran in parallel: 556 to 563 Mbit/s against 556 to 572 without it, no drop. eMMC unaffected.

- The agent opens no port to the outside; it uses outbound connections to Telegram. No port conflicts with these services.

- The shared resource is RAM: with the agent, AdGuard Home, Transmission and Tor running at once, Flint 2 kept 340 to 420 MB free. A 512 MB router would be tight with all of them.

- Note: after install, the AdGuard Home setup wizard on port 3000 is open to the LAN without a password, and Transmission's RPC accepts control from the LAN without one by default. These are the packages' own defaults, not the agent's. Set passwords right after install.

Release check, 0.21.5-r14 (2026-10-09)

The full scenario: clean install, start, a ping run by the agent, Telegram, allowlist, diagnosis, PIN unlock and rollback of a change. 15 checks per router.

- Brume 2: 15 of 15.

- Beryl AX with an external USB stick: 15 of 15.

- Flint 2: 15 of 15, including a reboot (after the router was recovered). Install onto a USB stick on Flint 2: 6 of 6.

- Beryl AX with 200 MB of free flash: the install stopped at its space check, as designed. We do not force it.

Security

- After install the agent can only read the router. Changes stay blocked until you enable a second factor (PIN, app code or both) on the Security page in LuCI.

- To change something, send /unlock and your PIN in one message in the private chat. The bot deletes that message at once, so the PIN never reaches the model. A window stays open for 15 minutes; /lock closes it earlier.

- In a window the agent may change network, Wi-Fi, firewall, DHCP and system settings, and manage services. It never gets commands as root, firmware flashing, installs from links, settings that run scripts, or its own settings.

- Package install is off by default. When enabled, it works only with official OpenWrt feed packages and only inside an unlock window.

- A change that cuts the connection rolls back by itself after about 90 seconds.

- Wi-Fi keys, WireGuard keys and other secrets are shown to the agent as <redacted>.

- The agent's keys are root-only files. The agent cannot read its own key from files or from its process memory.

- Only Telegram IDs on the allowlist get answers.

- Everything the agent reads (logs, client lists, addresses) goes to the model provider. Choose a provider you trust, or a model on your own server on the LAN.

What it cannot do

- No browser: JavaScript sites, logins and purchases are not for it.

- It does not run the model on the router.

- It does not remove packages and does not install from third-party feeds.

- It does not change the settings of the services themselves (AdGuard Home, Transmission, Tor, Tailscale): it installs and starts them, you configure them.

- It needs clean OpenWrt 25.12 on aarch64. Stock GL.iNet firmware does not qualify.

What you need: at least 512 MB of RAM, about 400 MB of free flash (less is possible with a USB stick), and a provider key or a ChatGPT subscription. Make a backup before installing.

Tested on Flint 2 (GL-MT6000), Brume 2 (GL-MT2500) and Beryl AX (GL-MT3000, with a USB stick). Reports from other aarch64 routers are welcome.

Repository, install guide, measured numbers and the full security model: https://github.com/TAIPANBOX/hermes-openwrt (MIT).

Hello - sorry if it’s trivial for most of you but I’m stuck with my travel router Cudy TR3000 casting my network, either wifi or ethernet.
I already installed OpenWRT and Tailscale and tried to enable the wireless connection. One as Access Point casting the cudy’s network so I can configure it in case I’m outside. But once I connect to the other network as Client, I lose access to cudy’s network.

I tried to skip the option that removes old networks already but it still doesn’t work.

What I have in mind is
- cudy cast its wifi,
- I connect it to connect to the other wifi or even through wan,
- cudy reroutes the internet with tailscale through the lan and wifi

What am I missing here?

Router: GL.iNet GL-MT6000

Firmware: OpenWrt SNAPSHOT r26637-05aec66d53 / LuCI Master 24.158.03388~a6f8361

It's been awhile since I upgraded the firmware, and I understand there's a new update process. What's the best and safest way to get me current?

TIA!

I've been experimenting with this router, and had a frustrating time tonight. Wasted over an hour troubleshooting to determine I somehow got the ath10k -ct variant of firmware on this router. That limited client connections to 32 clients! What the hell... who ever though that was a good idea to implement?

Any tips on the best way to start fresh on this beast? It's supposed to be one of the best wifi 5 routers for OpenWRT, not sure why this is such a struggle. I just want to be able to connect 50 clients, this is a beefy router and should be able to handle it. Can I use OpenWRT's firmware selector and get the non-ct version? I saw it only offered one version and I have no idea which one that is. I think that's how I got into this mess before. I know I do NOT want the -ct crap.

Thanks for suggestions. I tried searching through old posts but didn't find anything for this specific issue.

I have been using OpenWrt for about two years because I have a Xiaomi router that constantly was sending requests to some Chinese server. I used to block them using Pi-hole, but then I heard of OpenWrt, tried it and loved it. Since then, I have never done much more than the basic router settings.

Recently I noticed that there were a lot of devices connected to my Wi-Fi, so I added a Wi-Fi MAC allowlist and disabled DHCP, but it was a pain in the ass to add new devices when someone came over. So, I made a little service for my home server to do it much faster and easier, and it was so easy, just a couple of hours (I don't do frontend and I wanted to do it in Go, which is a language I have never used). I really am happy with the end result and want to try more stuff.

If you have any software you recommend, please feel free to comment on them; I want to try more things for my router.

This is the project I built. Disclaimer, I had never used Golang before and I hate frontend, so I used a lot of AI to help me. Please don't hate

I wish to gather opinions about this idea.

Tried flashing an old RT-N66U to tomato and OpenWrt, tomato failed but OpenWrt somewhat worked

Background: It was running ASUS stock 3.0.0.4.382_52747 just fine. I factory reset it and tried to move it to FreshTomato 2026.4 (K26RT-AC AIO-64K) from the stock web UI. The flash went through and it booted. Ping replied and the WiFi LEDs came on, but there was no DHCP and the web UI refused connections.

So I did the 30-second WPS-button NVRAM wipe, and that’s where it went downhill. It started boot looping. The ASUS Firmware Restoration tool kept saying the router wasn’t in rescue mode, even though it clearly was (ping TTL=100).

I ended up using the CFE miniWeb page (hold Reset while powering on, go to 192.168.1.1). Each time I hit “Restore default NVRAM values” first, then uploaded. Results:

FreshTomato K26RT-AC: falls back into rescue mode

FreshTomato K26RT-N: same

ASUS stock 52747: power LED solid, no WiFi LEDs, no ping on any port, LAN or WAN

OpenWrt 25.12.5 (openwrt-25.12.5-bcm47xx-mips74k-asus_rt-n66u-squashfs.trx): not reachable at first, but after one power cycle it came up. LuCI works, DHCP works, gigabit link is fine.

All images were SHA256-checked, so I don’t think it’s a bad download.

Where I’m stuck: WiFi. LuCI says the 2.4 GHz AP is up (channel 1, WPA2-PSK, 20 dBm), but signal shows --- dBm and bitrate shows ?. Nothing can see the SSID, not my phone or laptop, even standing right next to it. The 5 GHz radio doesn’t come up at all.

Kernel log:

b43-phy0: Broadcom 4331 WLAN found (core revision 29)

b43-phy0: Found PHY: Analog 9, Type 7 (HT), Revision 1

b43-phy0: Found Radio: Manuf 0x17F, ID 0x2059, Revision 0, Version 1

b43-phy1: Broadcom 4331 WLAN found (core revision 29)

b43-phy1 warning: 5 GHz band is unsupported on this PHY

b43-phy1 ERROR: b43 can't support any band on this device

b43 bcma2:1: probe with driver b43 failed with error -122

b43-phy0: Loading firmware version 666.2 (2011-02-23 01:15:07)

br-lan: port 2(phy0-ap0) entered forwarding state

Things I’ve already checked:

All 3 antennas are on

Hide ESSID is unchecked

Changed country code from 00 to US

Rebooted

Other oddities: LuCI shows the model as “Unknown Board”, and it only sees 118 MiB of the 256 MB RAM.

Questions:

Is a non-transmitting AP just what you get with b43 on the BCM4331 HT PHY, or has anyone actually gotten 2.4 GHz working on this router?

Could “Unknown Board” mean the CFE NVRAM restore wiped board-specific variables (boardtype, calibration data, etc.)? Would that explain stock and FreshTomato no longer booting, and maybe the WiFi too? Is there a way to put those back?

Is the 118 MiB RAM limit normal for this target?

Worst case I’ll use it as a wired-only router and add a cheap AP, which honestly is fine. But if there’s a fix I’m missing, I’d love to hear it. Recovery through CFE works every time, so I’m happy to test things.

A week or two I had a very early alpha build for the router and now I have the code and repo working

Hardware acceleration works but only for ipv4 Ethernet packets no WiFi PPPOE or ipv6 for now

WiFi works 2.4/5

Ethernet works reliably now

It takes ~2-3minutes to boot and when the LEDs go off that means the Ethernet is working

Basic stuff was fixed by me and other things were AI assisted

Mostly it was just copy pasting banana pi drivers and making them work

Hi,

I need to establish a stable WiFi connection over 2 floors (there is the flat of my neighbours between my living room and my basement room).

Bandwidth is not that important, most important is stability (no disconnections) and low latency (at least < 5ms).

I was thinking about buying two cheap openwrt compatible routers and configure a bridge using 2.4GHz. I assume 5GHz is useless since there are very massive ceilings between those rooms.

I would prefer router with detachable antennas so I can connect directional antennas.

Do you have any recommendations for cheap routers I can use? Anything I didn't thought about?

Hey everyone!

I wrote OpenWrt Integrity, a lightweight set of Bash scripts to create known good baselines for OpenWrt routers and check for unexpected changes over time.

The idea is simple: capture the state of a trusted router, then periodically compare its current state against that baseline to identify potential signs of tampering or unauthorized changes.

What does it check?

• SHA 256 hashes of files under /etc and files in the writable overlay on SquashFS installations
• Installed packages and OpenWrt release and kernel information
• Unexpected root level accounts
• SSH authorized keys
• Cron jobs that could be used for persistence
• Added, removed, or modified files compared with the baseline

How to use it

The scripts run from a Linux system using Bash and OpenSSH. They connect to routers over SSH and support checking multiple routers.

1. Configure your router addresses and SSH key in routers.conf.
2. Run ./routers-generate-baseline.sh while your routers are in a known good state.
3. Run ./routers-integrity-checker.sh whenever you want to check for changes.

The verifier reports PASS, FAIL, or WARN for individual checks, along with an overall result.

Limitations: This is a lightweight integrity checker, not a complete security audit or intrusion detection system. It cannot guarantee that a router is uncompromised, and sophisticated attacks may evade its checks. Keep your baseline protected and generate it only from a trusted system state. The scripts currently require OpenWrt using the apk package manager.

GitHub: https://github.com/himanshu-mahendra-jain/openwrt-integrity

I am a greenhorn to the scene here and wanted to share that I have OpenWrt 24.10 running on the router.

It's similar to the EX5601, but you couldn't just directly flash it. Don't ask me how I know, please.

https://github.com/just-rotten/zyxel-ex5512-openwrt

I tested both stock dual-boot and u-boot layouts, I hope this saves someone else some headaches.

I have so little memory available and I cant update some packages.

A long time ago I did the attended sysupgrade and built a package that was sucessful in clearing up space.

But now I am on the current version, I cant seem to build a custom firmware from my existing setup and cant find documentation anywhere to do it.

Can anyone point me in the right direction to build a custom firmware based on existing setup when I get:

"No upgrade available

The device runs the latest firmware version"

Thanks

Hey everyone.

After a couple of months of work, I'm happy to show my side project - Verso, which is a replacement for LuCI. I've been daily driving OpenWrt ever since we released our router, but I was super unhappy with LuCI and decided to do something about it, and Verso was conceived.

With how short everyone's attention span is these days, I'll just link to the release documentation, and then ask for help.

You see, the problem I have is a lack of various arm64 devices I could test it on, so here's where I turn to this community: if you have an arm64-based device that has at least half a gig or RAM and at least 128MB of flash storage, then I'd appreciate if you gave it a try and report any issues you might encounter (installation in the release notes above).

It works automatically with LuCI, it just takes a different port (8443), so it can easily run along side it.

And full disclosure - Verso was, in large part, written by Claude Code, but under my guidance and supervision, architecture and design are all mine, Claude just did the code-writing.

PS: screenshots are from my home router, live data.

Rebooted my OpenWrt One router after 20 days of flawless performance. Running OpenWrt 25.12.5 on an Apple Mac Mini. After the reboot my WIFI network would disconnect for a minute then reconnect. This would happen 3 or 4 times then settle down and run properly. I have both radio’s running at 802.11 ax/b/g/n and 802.11 ac/ax/n with devices on all radios. Thoughts on why my WIFI disconnects then reconnects multiple times?

This is actually how it is done without having to do UART. These steps needs to be mentioned on the openwrt page but they aren't.

So let's get started:

1. Download this initramfs FW. https://github.com/Demiurge67/Rooter2021/releases/download/AX80(RU)_support/OEM-upgrade.bin_support/OEM-upgrade.bin)
2. Log in to the router and go to Advanced->System->Firmware Upgrade.
3. Select !OEM-upgrade.bin from the extracted archive and click on update.
4. After a while, the router will boot into the Openwrt initramfs with the default address of 192.168.1.1.
5. Connect to the router with your favorite terminal via ssh.(port 22, login root, password empty) and type: fw_printenv | grep tp_boot_idx if tp_boot_idx=0 go to the step 6. otherwise, type: fw_setenv tp_boot_idx 0
6. Now we're sewing Archer-ax80-v1-squashfs-sysupgrade.bin (or sysugrade FW with different name) either from the terminal using sysupgrade -n, or through the Luci web interface without saving the settings.
7. After rebooting, you'll get Openwrt.

Try to read this post: https://4pda.to/forum/index.php?showtopic=1070746&view=findpost&p=134864251

Hello everyone.

I have been running openwrt for over a year now It has Awesome so far I am not a network engineer or IT guy or even a linux user ( never used linux before ) i just got up and started with OpenWRT cause i needed some features normal routers won't do

When i started learning about home networking most routers seemed basic and had no features to make their price reasonable, don't get me started on ISP bricks

After a year of driving openwrt daily with help of DeepSeek i run up OpenVPN TAP and OpenVPN TUN servers, Wireguard Server, i run adguard home, multiple DDNS addresses, SQM QoS, my latest project was VXLAN over wireguard to create layer 2 bridge between sites/location which allowed me play Call of Duty on my PS4 with my brothers and friend using the LAN party option ( i gave them both an OpenWRT supported router pre configured to run vxlan over wireguard in a hub-spoke setup using only LAN port 4 unbridged from br-lan and bridged to VXLAN device )

Which brings me to my Subject Now my Brother and Friend both want their OWN OpenWRT routers instead of me lending them one But they don't have fiber connection to their homes and only have 5G Sim Cards coverage, both want only one router at home so no Modem then Lan to wan cable between the modem and openwrt router

So any recommendations ? Router that are supported by OpenWRT Hopefully routers with serious computing power My corrent setup runs Both Linksy WRT3200ACM and Linksys MX5300 with the later being the main Router and the WRT3200 being a backup wireguard server and the main vxlan hub.

So -CPu 1.5GHz Quad core or higher -512 mb ram or higher -265 mb storage or higher -wifi 6 or 7 -Single or Dual 5G Sim cards

I looked up Telstra Arcadyan AW1000 but some fakes are circulating on p2p platforms some are called ULTRA revision which aren't OpenWRT supported also they are highly Priced.

Edit: thanks to everyone who gave their recommendations Honestly i didn't even know those brands existed i thought i was getting recommendations along the lines of simple home routers like linksys, tp-links and asus maybe But this is super surprising Again thanks everyone

What hardware (router) would I need to set up a starlink mini on bypass mode, and then offer messeging service to about 500 people? If everything works could I cap up/down to 1mb so they can post to social media?

​

Hey everyone,

I have a TP-Link Archer AX21 (US), and the label says Ver: 4.6.

I’ve been looking into OpenWrt because I’d like to have more control over my network and I see that the latest OpenWrt version supports the Archer AX21 V4, but I’m not sure if that also applies to the US V4.6 version.

Has anyone here actually installed OpenWrt on an AX21 US V4.6?

If so, which version/image did you use, and did you have any issues installing it or going back to the original TP-Link firmware?

I just want to make sure before I flash anything. Thanks!

I have a problem with my Samsung A41 connecting at 5GHz to a Cudy WR3000S running OpenWrt 25.12.5, the link seems to be continually degraded to 6Mb/s and I get really erratic wifi speeds. The A41 works fine with a BT Smarthub 2, and also a USB wifi dongle seems to be fine too. Does anyone know of any problems with the A41 with the Cudy running the latest OpenWrt?

I've done a lot of testing of NSS/mesh for our beloved MX4300 units that we all got cheaply.

Some people set up mesh units, and various NSS firmwares have popped up, including (in no particular order):

• official stock Linksys firmware
• https://github.com/arix00/openwrt-mx4300
• https://github.com/AgustinLorenzo/openwrt (https://github.com/qosmio/openwrt-ipq source)
• https://github.com/JuliusBairaktaris/Qualcommax_NSS_Builder (https://github.com/JuliusBairaktaris/openwrt-nss-edma/ source)
• dd-wrt
• and vanilla/official openwrt

I'm happy to tell y'all that I have tested all the below firmware's behavior for mesh + roaming. Here are the results:

Basically, if you want working mesh, vanilla openwrt is the only one that has proper roaming/handoff working (i.e. VoIP calls don't drop during the roam). I was hoping this would not be the case because vanilla openwrt doesn't support NSS, so wifi, NAT, routing, SQM, etc. are not accelerated.

During my testing, AgustinLorenzo/openwrt and JuliusBairaktaris/openwrt (should) handle wired NSS/acceleration just fine. AgustinLorenzo's build has wireless stuttering sometimes, and I did not test wireless on JuliusBairaktaris' build in depth because mesh is mandatory for me so I did not continue further testing.

In order to test roaming handoff, I called myself via telegram voice call on 2 phones, 1 connected through cellular, 1 connected through wifi and walked to the different APs with usteer set up and the wifiman app installed to notify me of roams.

My recommendations are as follows:

If you have a single unit/no mesh and want NSS/hwaccel, use either JuliusBairaktaris' or AgustinLorenzo's NSS build. For a single node/AP setup, lean towards JuliusBairaktaris' build because qosmio's repo is stale now.

If you have a mesh setup (wireless backhaul) and want roaming to work, use vanilla openwrt for the APs, and JuliusBairaktaris' or AgustinLorenzo's builds for the wired router only to retain NSS/hwaccel on routing/sqm/NAT. This means the mesh will use lots of cpu for the mesh backhaul and to handle client wifi traffic, but unfortunately there is no other solution that keeps both mesh and roaming working.

It's wasteful to dedicate a node specifically for wired routing purposes, but because mesh + roaming don't work on NSS builds, you can't have 1 box that does it all unfortunately (which is originally what I was hoping for and there is no hardware issue that prevents this from happening).

Maybe some day when NSS builds fix roaming/handoff/802.11s, but that day is not today.

All this testing is done on a 1000/200 cable connection (hence the need for NSS for routing, SQM, NAT, etc.)

Feel free to ask Qs if you have any but I can't promise any further testing as I'm quite sick of flashing firmwares and running around like a madman trying to get roams to take place atm.

Edit: forgot to add - on mx4200v1 I'm using zram-swap // 128MB to not OOM on vanilla openwrt so I can still use it for mesh :)

Hi there,

since a few years, I'm unhappy with my Fritz-based home network. I'm thinking to replace the devices with a pure OpenWRT setup and need some buying advice.

What I need is:

• a main router device that connects to the fibre modem and serves the internet connection to the home network
• 4 x access point devices that connect to the main router via ethernet and serve WIFI

I know of the table of hardware, but am unsure how to choose these devices.

I don't need the latest WIFI standard, my priority is choosing hardware that one can reasonably expect to have a long-term firmware upgrade path within OpenWRT. I don't want fancy, I prefer boring and years-long reliability. Installing OpenWRT should require no physical hacks.

I do not understand yet what to choose as the main router if I want to use Wireguard to my home at a reasonable speed while traveling.

The APs don't need PoE, all planned locations are having both a power outlet and an ethernet outlet.

Finally, I didn't find a guide yet on how to properly configure multiple access points on the same network so that their channels don't disturb each other while allowing proper device handover when moving within between APs within the same network.

I'd be grateful for all advice in this situation.

Here's the current setup:

I live in a fairly big house and the ceilings are blocking radio signals quite nicely.

• Telekom Fibre modem in the cellar
• Fritzbox 7530 router in the cellar, serving as the main router of fibre internet to the home network, also serving as the first DECT base
• 4 x Fritz Repeater 3000AX scattered around the building, (not used as WiFi repeaters despite their name, but) used as WiFi access points connected to the main router via ethernet
• a second Fritzbox 7530 in the first floor, serving as a second DECT base

The network as a whole is not stable. My main problem seems to be with Sonos multiroom speakers. If I try to actually play multiroom audio in several rooms over multiple floors, one or more of the 3000AX access points may crash and then has to be rebooted. This appears to be caused by a broadcast storm, but both Fritz blames Sonos and vice versa, both aren't willing or able to fix it.

What I like about Fritz is that the setup is very easy to maintain, one can configure all devices from the main router's menu. The Fritz settings menu is in fact very nice. Wireguard and other features were easy to get going.

I know the OpenWRT Luci interface and like it, as well, and I do hope that there's also a way to configure multiple APs within the network so that they work well with each other without having to configure each device separately.

Thanks for reading and hope to hear from folks who can help here.

Title. I intend to run technitium using docker (on an attached ssd to avoid wearing down the internal memory with the logging).

Besides that, id run little else, and definitely nothing memory hogging.

Is this feasible or am I just dreaming?

Thanks for reading and helping out 😄