ASUS rolled out an update to its firmware (3.0.0.6.102_34791) that now requires users to be over the age of 16 and to send a slew of metrics and data back to ASUS. If you do not agree or do not check the box to verify you are 16y or older, you cannot use the router. At this time, I’m not sure if ASUS has meant to disable the router for anyone under 16 or if it’s a bug.
You can opt out at any time but lose access to a slew of features:
Please note that users are required to agree to share their information before using DDNS, Remote Connection (ASUS Router APP, Lyra APP. AiCloud, AiDisk), AiProtection, Traffic analyzer, Apps analyzer, Adaptive QoS, Game Boost and Web history. At any time, users can search the contents of the terms at this page or stop sharing their information with other parties by choosing Withdraw.
Moreover, ASUS disables automatic firmware updates and worse, all security upgrades unless you opt into the data sharing. Security upgrades perform the following:
Security upgrade incorporates security measures that continuously update its security file and scans to protect against malware, malicious scripts, and emerging threats in order to secure the router and ensure system stability. Some upgrades addressing important security issues or meeting legal/regulatory requirements will still be downloaded and installed automatically, even if “Security Upgrade” is turned off.
Okay ASUS is out. Recommendations?
Something with OpenWRT. Turris Omnia is pretty good.
PC with opnsense.
Man, idk. I installed WRT Merlin in hopes this doesn’t make it there. OpenWRT is really hard to get onto routers. Even the ones that support it (which tend to be pretty dated) have a ton of hurdles or restrictions as manufacturers really don’t want to lose the telemetry.
Asus makes great hardware unfortunately. Some of the fastest and most performant routers out there. Moreover, they don’t rely on subscriptions to gate some of the features like pretty much every one else.
I tried TP Link and Netgear (if their “legendary” Nighthawk) and the Asus just blew them away on every level. Especially stability and reliability.
I bought the Nanopi R4S, and it was extremely easy to switch out their modified OpenWRT for vanilla (literally just use a command/program to install the image on an SDcard). Granted, I did have to find a solution for wifi, but even that was easy with the Belkin RT3200s and the instructions (more in-depth, but still hand-holding). I also flashed it onto a Netgear AC1200 using nmrpflash, which sounds imposing, but really just entailed installing the pre-reqs, hooking the router’s ethernet port directly to my PC’s and running the command.
I did have to do my research to arrive at my decision to buy these specific models for their compatibility with OpenWRT. If you don’t, you might end up with something that requires popping open the shell and setting up serial comms, which is a pain.
As far as I could find, out of the three Wifi6 enabled Asus models (RT-AX###) that are compatible with OpenWRT, 2 require ssh and running commands that are given in the guide; the other one, and all of the supported AC### models, seemed to work using ASUS’s built-in web-app to upload the OWRT image. I wouldn’t say any of it is easy, but I also can’t agree with “really hard.”
Another consideration is setup and maintenance. Proprietary firmware tends toward being as “click here to set and forget everything, here are the only 3 pieces of info you need to know from now on”; OpenWRT is definitely more hands on and requires a lot of RTFMing and routine maintenance.
There’s a few routes (pun intended) you could go.
DIY with opnsense on an old PC will give you the most flexibility and will allow you to build your router to your exact needs.
Ubiquiti is also another choice albeit a contentious one. Their hardware is pretty good which also doesn’t require a recurring charge to use (unfortunately rare when you get into the enterprise grade gear). The software side is where people have such mixed feelings as for consumers and prosumers it’s pretty good but when you start getting into enterprise level configurations you’ll find their software pretty lacking. For example if you need a L3 switch for inter VLAN routing you’ll want to go with a different vendor as ubiquiti’s L3 is practically broken.
I went with Mikrotik and it’s great, but honestly I cannot endorse them as consumer routers, they are very hard to set up
I love mikrotik especially their switches as they are the only vendor making relatively affordable 100 gigabit gear. I completely agree their software isn’t user friendly which I why I didn’t endorse them. Plus I don’t really have experience with their wireless access points nor have I seen any in the wild.
And Ubiquiti’s support is non-existent. Don’t get me wrong, I like their hardware, and their software works just fine for my needs, especially at their price point. But if you have issues, you’re searching forums or are SOL.
Ruckus gear is pretty good too, though I don’t have much hands-on experience with it. And it’s expensive. Like really expensive.
I’ve actually never had any problems with their support the two times I had to RMA some dead products but maybe I’ve been lucky.
They’ll RMA just fine, but I was speaking more to software support.
You can also get a Celeron-based (for example with a N100) fanless mini-pc meant for use as DIY routers like these and install something like pfSense on it.
Personally my really old router still does what I need so I’m leaving it be, though I’ve replaced my media box and my NAS with a similar device running Lubuntu but can’t really make it also be the router since it only has 1 ethernet port.