HN Explorer

Ask HN: Best current model routers for OpenWRT, DD-WRT, Tomato, etc.?

195 points by malandrew ↗ HN
There are many models of routers that support open source router software/firmware like OpenWRT, DD-WRT and Tomato. However, when you look around, it's very difficult to determine the recency of router models out there and post date isn't always useful since many use which ever router just happens to be available to them for free. If one were to decide to buy a brand new model router to install open source router software on, where would you go to find out the best current models and be able to compare their features?

While it would be nice to know the best models as of today (December 1st 2013), I think it's more interesting to be taught how to fish instead of being given a fish. This also makes it easier for me (and anyone else) to pass this advice onto the next person.

120 comments

[ 4.1 ms ] story [ 201 ms ] thread
ChuckMcM
Jeff Atwood's write up : http://www.codinghorror.com/blog/2012/06/because-everyone-st... is worth reading along these lines because he does a good job of explaining a process for surveying the market.

That said, if you are not too cost conscious you can build a wireless router out of the Intel NUC really easily, and for modest loads I've used a Beaglebone as an access point. So you may find you can cobble together the pieces in a fairly straight forward way. I do not recommend a Raspberry Pi as a wireless router as its network is all going through the USB hub and as such it has a lot of latency spikes.

patrickk
I'll second that article. I bought the Asus RT-N16 on the back of that recommendation.

Funnily enough, I never bothered installing any firmware, I found the default to be excellent (despite the reviews on amazon trashing the Asus firmware). I found it fine for me.

doomrobo
I don't see why QoS is such an important feature for a personal router. If he is (and I assume he is) the primary user of his network, then why is QoS control necessary?
eli
If you use VoIP you probably want QOS.
ChuckMcM
The common response is voip, but it can also be video on demand. While Netflix will notch down from HD to SD to Artifact-D as the net congests it isn't pretty. If you have multiple users and some says "Hey look the Linux Mint iso is out, lets get both the 32 bit and 64 bit version." while you are watching a movie, its very annoying for both the movie watcher and the other person who says "WTF? 18 hours to complete, no way!" This way only one of you is disappointed.
sjwright
What is Artifact-D?

(Yes, I tried googling it.)

jxf
It's probably a joke, implying that the Netflix video quality served during congested periods is so low that all you get is video artifacts.
ChuckMcM
Sorry, what jxf wrote. Highly compressed video suffers from extremely obvious and distracting artifacts, about the only thing you can say nice about it is that the frame rate is high and it doesn't pause in the middle. So the neologism conveys the point where the video is unwatchable due to visual artifacts but still considered "video" by the provider.
toni
ASUS RT-N16

Its cheap, stable and un-brickable. So much so that there is a special tomato version dedicated to this model.[1]

[1] http://www.easytomato.org/download

justin66
Still not supported properly in OpenWRT, all these years later. (yes, I've got one sitting on the shelf waiting for this purpose)
benhedrington
ASUS RT-N66U is nice, didn't have a need for AC. I have that and an older Netgear WNR3500l (v1) running upstairs and down same SSID different channels. Tomato is my firmware of choice although ASUS with Merlin is pretty solid.

There were some pretty good router deal on Black Friday, be on the lookout for the ASUS on Cyber Monday I'd say.

oceanplexian
None of the above.

Run pfSense on an old x86 box and you'll end up with something an order of magnitude better. As far as an access point goes I'd suggest going with ubiquiti gear if it's in your budget.

justincormack
There are huge disadvantages in using old x86 boxes, like size, noise, power consumption, lack of ethernet ports and so on.

If you wanted to sensibly advise using pfsense you could point at the zrouter project http://zrouter.org/projects/zrouter/wiki/Supported_devices

sudomal
A laptop is a good option for x86 network stuff. Relatively low power with a battery back-up. I would never use a desktop PC, too expensive.
VLM
I do not think those disadvantages apply in most cases. Back when DSL was new I used an old 486 for many years, this is not new territory for me.

Size is irrelevant unless you're putting it in your entertainment center (why?) or live on a sailboat. Just stick it in the basement, stack on top of the fileserver, whatever. If you're doing the dorm room thing or living aboard a sailboat you have to realize that involves some highly unusual lifestyle compromises. For most people its not an issue.

Noise: I did splurge on some large slow fans (like $10) to replace old small fast (LOUD) fans. Again this is a lifestyle thing, where if your castle has no location further than 5 feet from your sleeping head, you're going to have serious lifestyle issues that most people simply will not have. I don't find my desktop at home or work to be particularly loud. I did at one time run a more modern desktop as a firewall and specifically ripped out the fancy graphic card and used the on board video, to reduce noise a little. After installation I never used the video or keyboard again, all SSH access, so its not like it needed fancy graphics. My main firewall/wifi/dhcp/asterisk/stuff/etc box is about 50 walking feet from my sleeping head, past the (sometimes) loud fridge, the dishwasher, the clothes dryer, the hot water heater... For most people its not going to be an issue.

Power consumption. Not an issue. I was drawing about 50 watts which will cost about $50 or about 3 weeks of cablemodem service per year. Using the EE tradition of it costs about $1 to provide 1 watt for one year. I admit I was an idiot and upgraded to a soekris box many years ago which is basically a 5 watt PC. So I save about $45 per year of damage to my finances and the environment. Great, that'll only take like ten years to pay off the capital expense / manufacturing environmental degradation. That was a dumb move on my part and I'd suggest you're always better off both financially and environmentally by reusing an old desktop.

Lack of ethernet ports (LOL, serious? Plug in another board?)

M2Ys4U
>Size is irrelevant unless you're putting it in your entertainment center (why?) or live on a sailboat.

No, it's not. If you're using *DSL (including FTTC) then how much space you have available depends on where your phone line enters your house, for instance.

My lines comes in, from a pole in the alley behind my house, to my kitchen and the master socket is by my kitchen door in the hall. I certainly don't have room for a large box there, but a typical router fits nicely.

whalesalad
I set this up recently and really like it a lot. I had an ASUS AC66U as my home gateway/firewall/router/wap which was beginning to struggle with the crazy home lab setup I was concocting.

pfSense is radical. It's like OpenWRT in that it's a self-contained router/firewall/etc... operating system, with great gui and cli management tools. It's based on FreeBSD and has a very active community of developers and users. There's even a pretty cool subreddit for it: http://reddit.com/r/pfsense

One of the unexpected side-effects of the pfSense box was seeing my internet speeds increase significantly. The only variable that I changed was from the ASUS router to an older system running pfSense. In both scenarios I was hardwired using cat6. Prior to pfSense I would get ~20mbps down and now I am hitting ~30 with no problems.

I've got it setup with a dual gigabit nic. The motherboard ethernet port goes to my cable modem for WAN, and each port on the gig nic corresponds with my LAN and LAB subnets. LAN goes to my house, wifi devices, etc... and the LAB subnet is for my servers.

It's nice having an ipsec VPN running that I can connect to when on the road. For example, I'm in California right now for the holidays and can still hit my Freenas box for file storage/backups that is 3,000 miles away in Northern Virginia.

I built a rack for the setup, you can see the black pfSense box down below: http://instagram.com/p/g4JuvrBf7N/

It's an older Compaq/AMD Sempron system that I refurbished a bit. After installing the HP dual-gig nic, I also threw in a cheap SSD and upgraded the processor to a dual-core AMD Athlon. It was like $6 on Amazon.

Here's a video that I made explaining some of it, for those who are curious: https://www.youtube.com/watch?v=O8Lk07vi98o

---

Alternatively, there's some cool hardware out there that is more custom/indie such as Mikrotik (http://www.mikrotik.com) or Netgate (http://store.netgate.com)

gwu78
Good answer.

Although you do not even need pfSense. You just need a BSD with pf. You can run your own customized BSD image with a Soekris or Alix board.

Can you run BSD with Ubiquiti's boards? What if I do not want a Linux-based system? There is no GNU pf.

rsync
"Run pfSense on an old x86 box"

I will one up that with: run pfsense on an old s86 laptop with two pcmcia card slots. Because xircom realport.

Because it is a laptop you'll never need KVM because KVM is built-in - no more fiddling with the com port or lugging over a monitor, etc. (also, built-in UPS is a nice bonus).

But my favorite part is that by using two xircom realport LAN cards[1], you end up with a device with three full size rj45 ports on it (assuming the laptop itself has one).

It's cute and sexy to have some tiny little embedded board, but the laptop wins for usability by a wide margin.

[1] http://reviews.cnet.com/adapters-nics/xircom-realport-2-card...

protomyth
Or just run OpenBSD so you get the current pf version with new stuff in 5.3.
sz4kerto
The old Netgear WNDR3700 is one of the best because of very good 2.4 GHz range and lots of RAM.
davepage
I have three of these -- they've all experienced range or stability failures.
kbaker
Just make sure you don't get the v3 version... I had a WNDR3700 v1 that was working great, needed to buy another one, and didn't check that the whole radio chipset changed with v3 and is not supported. Still works well with the stock firmware, but kinda disappointing...

http://wiki.openwrt.org/toh/netgear/wndr3700

67726e
I've had a bad impression with the v3 release. In the past year I've had two hardware failures and recently had an issue with the Netgear firmware causing upwards of 80% packet loss. Switching to DD-WRT fixed the packet loss issue. The v3+ routers also only have DD-WRT builds so far as I can tell, and switching to another firmware is damn near impossible once you switch to DD-WRT. That said, with DD-WRT it works and works well so long as the hardware doesn't fail.
beagle3
... and while we're at it: best alternative firmware? e.g. I liked DD-WRT, but they hadn't released version in ages - and e.g. use an exploitable version of the dropbear ssh server. I'm now using OpenWRT and am happy -- but I don't have enough time to really research.
moreentropy
I would say OpenWRT wins in this category. It's not based on open sourced Linksys firmware anymore, it's a embedded distribution designed from scratch for modularity and portability. It really is a awesome piece of engineering which is fun to use and well documented in detail. If you want to extend the features of the router and add things like openvpn, ntp server, traffic shaping, asterisk pbx, tftp server or whatever comes to mind, openwrt most probably has it packaged and ready to use.
lordlarm
I recently bought a Linksys 1200. Works beautifully with DD-WRT. Or the Linksys 2500, if you want more power.

I can also recommend Netgear WNDR3700 if you want 5Ghz.

seliopou
The OpenWRT wiki[1] is a great resource for this. There you can find a Buyers' Guide[2], as well a Table of Hardware[3] with compatibility tables for vendors, models and OpenWRT versions.

I recently flashed a TP-Link TL-WR1043ND with OpenWRT and it worked like a charm. I'm planning to flash it with the Pantou[4] OpenWRT distribution so I can start running OpenFlow with real hardware.

[1]: http://wiki.openwrt.org/

[2]: http://wiki.openwrt.org/toh/buyerguide

[3]: http://wiki.openwrt.org/toh/start

[4]: http://archive.openflow.org/wk/index.php/Pantou_:_OpenFlow_1...

Scaevolus
The TP-LINK TL-WDR3600 is the same price, but supports 5GHz as well.
samcrawford
Not only that, but the WDR3600 has a significantly faster CPU, more memory and more flash than the WR1043ND. It's about 2 years newer too. Definitely worth a few extra dollars.
jackweirdy
I have a WR-1043, as well as an MR3240 - It seems all TP-Link kit is built like tanks. Can't recommend it enough.
josephlord
I'm a bit nervous about TP-Link, I have a couple of of small GigE switches and when they were at the end of a not that long cable (although maybe not the best quality connection) they couldn't sustain more than 100Mbit unlike a similar but slightly more expensive ZyXEL switch managed to support the 1Gbit mode.
drdaeman
I'm using WR943ND and have problems with WiFi - it usually works, but may suddenly lose connection and start not accepting some or all clients (usually looks as a failure to obtain address via DHCP). Requires me to power-cycle the router every now and then. Not sure whenever the problem is within the hostapd or kernel, and I'm too lazy and incompetent to debug it. It seems to work fine for others, so maybe it's just my particular hardware issue.

Also, about an year ago, switch support was nearly non-existent - they just had the configuration struct hardcoded right inside kernel and nobody (including me) hadn't enough patience to properly expose config to userspace. But that matters only if you want 802.1Q, which is rarely a requirement for typical home networks. And maybe someone bothered to hack that, already.

Otherwise TL-WR{7,8,9,10}4[13]ND is a good platform. Unless they changed something recently, I'm not aware of.

yashau
The ASUS RT-AC66U supports Tomato

You can find the firmware here: http://tomato.groov.pl/download/K26RT-AC/

fsckin
This Asus router scores a 95/100 from me. I ran a pfSense machine and separate AP for several years and bought this when the machine died. The RT-AC66U has been almost as solid and capable as the dedicated pfSense setup, without the extra power usage that comes with running an x86.
HarryHirsch
People tend to overlook Thin Clients. There is plenty of these available on Ebay, and they are mostly low-power x86 boards with one PCI slot. I am using a Maxspeed Maxterm (that's an 800 MHz VIA C3) and am very pleased with it.
seanp2k2
Some of the HP T-series thin clients are x86 and can accept a PCI-E riser. I ran one with a sempron 2100+ (fanless) and an Intel Pro/1000MT 2-port PCI-E card. It had 1GB of RAM and 1GB of solid-state disk-on-module, but the module used a weird reverse-gender 2.5" IDE connector, so I had to use pin headers to adapt it to an external USB HDD reader to install pfSense on it.

After that though, it ran great for a few years until the motherboard died. In all, $100 well-spent for a quiet and small pfSense box with enough power to handle 100mbit internet at wire speed.

Here's an example of what you can get these days:

http://www.ebay.com/itm/NG816AA-HP-Compaq-GT7725-Thin-Client... ($60 and it has either a PCI or PCI-E slot).

Now I'm happily on a Ubiquiti EdgeRouter Lite, which is a great little Debian ARM box that runs Vyatta for $100: http://www.ubnt.com/edgemax (protip: learn the CLI; it's very similar to Cisco's IOS)

tux1968
Does it have more than one ethernet port on it? Otherwise, how can you use it as a router?
icebraining
It has a built-in port, so you can always use a PCI Ethernet card to get two ports. You'll probably still need a switch, though.
rll
If you are looking for the best, regardless of price, it is probably the ASUS RT-AC68U that was released recently. See the 9-page dd-wrt thread on it here: http://www.dd-wrt.com/phpBB2/viewtopic.php?t=177612&sid=8bfd... which shows a few issues here and there, but that is typical of newly released models. You did say you were looking for recent ones.

If you don't have 802.11ac-capable devices and just want a cheap solid dd-wrt box, I would suggest the Asus RT-N16 or RT-N66U. The thing to look for is the amount of ram in these things. An 8M router is going to suck at running dd-wrt. See the big huge table here:

http://www.dd-wrt.com/wiki/index.php/Supported_Devices

And pay attention to the ram column.

philjr
I got an ASUS RT-N66U earlier this year and it really is an awesome piece of kit. +1 for Asus routers
emmelaich
... except for the N56U. The only one NOT supported by the popular firmware alternatives. Guess who bought one :-)

There is code.google.com/p/rt-n56u/‎ but it's nowhere as good as my old Tomato.

broknbottle
I would check out the edge router lite from ubiquity. It runs edgeos, a fork of vyatta. Based off debian and has lots of options. Dual core mips64 cpu, cavium network processors for ipv4,ipv6 and ipsec offloading. All this for $99 or less http://amzn.to/1bBpdJ8
moreentropy
I have one of those sitting on my desk. It still feels a bit like early adaptor stuff, the edge router line is quite new, but looks very promising.

I really like vyatta, but now that vyatta is basically dead, I'm happy that it lives on in edgeos.

Don't be fooled by the GUI though, it's very incomplete, but the full feature set of vyatta/edgeos is there accessible in the CLI.

singingfish
I've been generally impressed with TP-Link's kit, although it is cheap, so don't expect it to hold up in a hostile environment (e.g. lots of dust).
moreentropy
I usually use tp-link gear for openwrt, it's readily available from our distributor and dirt cheap. Don't just look for recent models, pick your hardware from the openwrt hardware compatibility list based on the specs you need.

If you can disregard the fact that the firmware isn't open source, have a look at www.ubnt.com and www.routerboard.com . Those don't run openwrt, but price/performance and features beat everything else that's on the market. The mikrotik routers are performing so well and have so many features it's ridiculous. If you really need Cisco, you'll know. If you're not sure, get a mikrotik, it will cover everything you'll ever need.

kiallmacinnes
The Ubiquity EdgeRouter stuff is (mostly) open source, as its a fork of Vyatta. Under the hood, its Debian with Vyatta's open source CLI and Ubnt's web UI.

Anyway their hardware is excellent...

samcrawford
Agreed... You really cannot beat TP-Link for the money, and the vast majority (but not all!) of their routers are OpenWrt supported.

I buy literally thousands of them for work (we re-purpose them as network measurement devices, running OpenWrt), and the models we use are as follows:

* TL-WR741ND - 100M ports (can saturate the WAN link).

* TL-WDR3600 - 1G ports (LAN-WAN can hit around 500Mbps with careful tuning, but I don't know how that changes when NAT is enabled)

* TL-WDR4900 - 1G ports (LAN-WAN can hit around 900Mbps, and that's even without using the NAT co-processor, which OpenWrt doesn't support)

Ones I would avoid - WR1043ND (very popular, but old now - it was the precursor to the WDR3600), WDR3500 (100Mbps ports - yuck), WDR4300 (very little difference to the WDR3600, but more expensive)

The TL-WDR4900 really is blindingly quick, largely because it has a PPC CPU inside rather than the MIPS CPU, but it's also double the price of the 3600.

Unless you need the horsepower, the TL-WDR3600 really is the way forward.

I would avoid the 802.11ac models at the moment; they're more expensive, and there's no 802.11ac driver for OpenWrt yet, so you'd be wasting your money.

moreentropy
That's valuable advice here, thanks for sharing.
martinald
I did not know that. I suppose Sam Knows ;)?
skystorm
Seconded. I use the 3600 with Gargoyle OpenWrt (www.gargoyle-router.com, basically a web interface to OpenWrt) and it's been nothing but great.
dmm
It looks like the TL-WDR4900 is not MIPS and has half the flash as before. I'm not sure if that changes anything.
asmadi
Man what about the TL-WR841N it's only 19$ on amazon right now??
berberous
Other than price, can anyone give me a rundown of any benefits to this approach over an Airport Extreme? Other than ideological benefits. Do they perform better, or are there things I can't do with the Apple device? I'm not sure I want to deal with headaches here. Thanks.
runjake
I've done pretty extensive comparisons between one of the old Airport Extreme Dual Band units that look like a white Mac Mini and run some flavor of NetBSD and it performs slightly (~10%) better than both my old WRT54G and superior-specced WNDR3700 running DD-WRT builds. I still use the WNDR3700, not for performance, but for features and configurability. The APE basically just sits and serves a network disk.
mikeash
I use AirPort hardware all over the place and the one thing that annoys me to no end is the fact that I have to reboot the thing any time I change any configuration. This means that adjustments have to be more carefully planned and take much longer than with any other hardware.
suprjami
My advice is to just avoid DD-WRT altogether. The community is so hostile and unhelpful, the site and wiki full of conflicting information, and almost all builds for anything besides the old Linksys gear is in a real unstable state. It seems almost inevitable that DD-WRT will just result in bricking your router and having some forum asshole mock you for it.

I'm running Merlin's AsusWrt on an RT-AC66U and I've been very happy with it. I bought it earlier this year to replace my aging WRT54GL which had run with Tomato for years.

I'm also a fan of OpenWrt, but I use the x86 build on a VM host, it acts as a router/firewall to other VMs in a private bridge.

lelandbatey
I can vouch for this. I've run ddwrt on all my routers for some time, but it seems like they're no longer the favorite, for many reasons.

If I could do it all again, I'd go for OpenWRT, though in my case that's just because OpenWRT has some features that ddwrt is lacking (e.g. native IPv6).

GigabyteCoin
Considering DD-WRT is simply a closed version of OpenWRT and this is HN... we should all be going for OpenWRT!

It's a pretty amazing little project.

samcrawford
Fully agreed. OpenWrt's community is truly great, and the web interface (LuCI) used in the firmware has come on leaps and bounds in the past couple of years.

Also, if you ever need to roll your own firmware, prepare for a big uphill struggle with DD-WRT, but it's a (relative) breeze with OpenWrt.

guiambros
My experience is exactly the opposite. I've been running DD-WRT since the very first version (right when BrainSlayer forked Sveasoft Alchemy), and it's an incredible piece of software. Absolutely flawless.

Yes, it is true that the wiki has conflicting information, but it's not that hard to find a version that works well with your set up. And most routers are really hard to brick (and worst case scenario most models have JTAG in the PCB, so you can un-brick your router even from the worst mistakes).

Once you have a stable config, you'll enjoy several years of rock-solid performance - at least until you need to upgrade your router again. Rinse and repeat.

FWIW, I'm using Asus RT-N16 with DD-WRT v24-sp2 (03/17/12) kingkong, and also used WRT-350N, WRT-54G/GL. All services I use are rock-solid: VPN, QoS, DynDNS, MAC filtering, USB storage, printer support, etc. Of course, YMMV.

dannyrosen
I'm also running Merlin's build on the RT-AC66U. 802.11ac speeds with custom firmware, excellent ui and a rich feature set.
sk5t
Another happy user of Merlin's version of asuswrt here. My RT-AC66U had mysteriously started getting itself into a funk overnight, which Merlin's version cured entirely.

On the negative side, making even trivial firewall changes such as adding or removing port forwarding rules still requires a router reboot. Apple routers do (or did) this too. I'd like to know who decided that this was an acceptable behavior.

I also loaded DD-WRT on the AC66U and it was unable to get the WAN interface moving. And Shibby's TomatoUSB suffered from show-stopping configuration bugs.

gaza3g
Just to share my experience as this is one of the rare edge cases that I have encountered:

Switching from dd-wrt to Merlin's ASUSWRT, I find that it kinda screws with airplay.

When I play a movie, I'd usually select the sound to output to my Airplay speaker on my apple tv. After switching to Merlin's FW, I tried playing a movie and there was interference and distortion in the sound.

I suspect its due to the ethernet connection/port that brought about that problem since the issue went away when connecting the apple tv via wifi. I only use shielded cat5e cables btw. All in all, the problem went away when I switched back to dd-wrt.

I remembered spending a whole Sunday just to figure that out. Also, I'm not sure if its just isolated to Merlin's ASUSWRT since stock ASUSWRT might also be affected(I didn't test).

nano_o
I am running OpenWRT on a Buffalo WBMR-HP-G300H without any issues. This model has an integrated ADSL modem and has a few USB ports. I have a USB hard disk attached and I use it as a media and bittorrent server. Over LAN it can stream an HD movie from the disk, but over wifi it seems too slow for that.
vsviridov
I have the AirStation N600 Buffalo router.

It's kind of annyoing that it comes with DD-WRT preinstalled, but it's half-assed and is not configured for easy modification.

I have not taken the plunge yet, because I do not want to deal with jtag cables if it bricks, and the whole "install our binary, and then do not even breathe in the direction of the router for 10 minutes" part does not inspire much confidence...

jagermo
I have a DLINK DIR-615. Cheap, easy to install (just flash via webinterface) and nearly unbrickable. Although not very powerful, i find it is a nice device to try out new stuff.
jotm
I love DD WRT.

As for router models, development seems to be slow these days - I can only recommend the older Linksys routers, the Belkin F7D4301 and the many TPLinks (WR7-10xx series in particular)...

But any model that has a stable DD WRT release should be good - most important thing is the processor and Flash/RAM size in my opinion...

http://www.dd-wrt.com/wiki/index.php/Supported_Devices

mclemme
I'm a big fan of the WNDR3700, bought it on a whim a few years ago, the firmware it comes with sucks, but with *WRT it just works (I've got a V2, have a look at http://wiki.openwrt.org/toh/netgear/wndr3700 for details about versions).

With a powered USB hub and an external disk drive and a webcam, it functions as remote backup via. rsync and monitoring my home when I'm on vacation, when enabled it takes pictures every 2 seconds when there's movement in the frame. The pictures are uploaded offsite immediately.

I'm using OpenWRT and have had very little problems, only issue I've noticed is that the wifi transfer speeds are a bit slower (10-30%) than when using the factory firmware, but I can live with that.

    21:47:12 up 221 days,  5:22,  load average: 0.00, 0.01, 0.04
kogir
I've got pfSense[1] running on a passively cooled embedded board[2]. I then use whatever wireless APs I want in bridge mode.

I like this because x86 will always be compatible with anything I might run in the future, and changing out wireless hardware from 2.4 N to dual-band N to ac has been trivial and required no thought to compatibility.

  [1] http://www.pfsense.org/
  [2] http://www.jetwaycomputer.com/ITX-JBC362F36.html
VLM
One problem with a "customized distribution" is it probably gets far fewer security updates, much slower, of FreeBSD, than just using straight up main line "real" freebsd.

This kind of logic is why I use plain old Debian as the OS with roughly the same hardware architecture as your design.

kogir
While you're absolutely right, this is my home network, and not that big a deal. I'd guess that even outdated FreeBSD is way more secure than most consumer router firmware, which hopefully makes me a less appealing target.