Hi r/openwrt i know I am new in here but I want to tell yall for my successful kinda DIY router I've made with just an old pc that I've got for free HP Compaq Elite 8200 SFF with the tplink TL-WN722Nv1 also free and the rtl8821ce that I've taken out from my old laptop and a secondary pcie to 1gbps ethernet also for free and my openwrt setup all of it just on that small 16gb usb drive and I've made it dual band but not really but getting the rtl8821ce working without issues is so hard compared to the tplink TL-WN722Nv1 its so easy and ive made the rtl8821ce as 5ghz access point and the tplink TL-WN722Nv1 as 2.4ghz wifi access point and the speeds on the rtl8821ce are 250 to 270 mbps and the tplink TL-WN722Nv1 are 30 mbps and on paper the speeds for rtl8821ce is 433 mbps and the tplink TL-WN722Nv1 is 150 mbps which means the speed of both combined 583 mbps or what I will like to name it ac583 and the ethernet speeds is 920 to 940 mbps or its the full speed and now for the specs part

1: pc: HP Compaq Elite 8200 SFF

2: Wifi cards: (1) realtek rtl8821ce (2) tplink TL-WN722Nv1

3: ram: 16gb ddr3 1333mhz (I know its overkill)

4: storage: 16gb usb drive

5: cpu: i5 2400

6: ethernet ports: there's 2 of them (1) internal one 1gbps (2) tplink pcie ethernet 1gbps

7: os version 25.12.4

What I can do with my kinda DIY router ?

Hi, I've made an OpenWRT firewall zone called "NVR" (192.168.1.0/24) that I've tied to one of the physical ports on the router. I've set up the zone so that devices in it can be reached from other zones but can't reach out. I've put a camera on that Ethernet port and all is well.

Now, my NVR software (Frigate fwiw) is running in a docker container on a machine (10.234.0.2) that's in another LAN zone (10.234.0.0/24, and the OpenWRT is 10.234.0.1). But I was thinking it would be good to also put Frigate in the NVR zone.

I've tried setting up a container, on the 10.234.0.2 machine, that uses a docker macvlan network on 192.168.1.0/24. I can raise the network and the container but I can't ping anything from it (neither the gateway at 192.168.1.1, nor the camera at 192.168.1.10).

If I join a laptop to that physical port I can ping both.

My networking knowledge is not that advanced so I was wondering if it's even possible to do what I want (have a macvlan on a subnet in one isolated zone while it lives on a machine whose main adapter is in another zone) or if I'm simply lacking something. And what that something might be, do I need to add a route on the docker machine, do I need a second physical adapter on the machine and to join it physically to the NVR physical switch, is there some rule I'm forgetting on OpenWRT etc.?

Google's AI says it should possible by executing the following command.

scp backup.tar.gz root@192.168.1.1:/tmp/backup.tar.gz

firstboot -y

tar -zxvf /tmp/backup.tar.gz -C /

reboot

But when I run the tar command I get the error "tar: can't open 'etc/uci-defaults/10_disable_services': No such file or directory"

What am I doing wrong?

Hi Guys!

I would like to buy an Asus router with AiMesh function and then install openwrt on it and use as satellite.

My already owned EasyMesh system:
- TP-Link GE230 (I had a good deal)
- TP-Link C64(it was a bad deal, my bad but I already have it)

So I want to do some test with an OpenWRT router, because this would be the first time I can touch an OpenWRT router and I'm really excited to play with it. So after I have tested everything I would like to use it in my already owned mesh system. I'm thiking on an asus router because it's cheap enough and it has the criterias I need. Now I'm looking at a used RT-AC87U for example.

Asus have an brand exclusive mesh system, but if I install OpenWRT on it then I would be able to use it with other EasyMesh routers?

I'm trying to set up a new router with 25.12.5 behind another OpenWRT router on the 23 series in advance of a swap. I want to manually recreate the router, rather than applying a backup configuration because there are some things I'd like to change that aren't easy to change after the router is all set up, or at least that's my impression.

The new router is set up with the WAN getting an address from the old router on it's LAN. I thought I might have been having address conflicts, but when I set up a VLAN with an ID and address that isn't on the old router, it still failed to apply.

Is there a current tutorial on setting up VLANs for the 25.12.* stable firmwares? I've found a bunch for 21 & 23, but nothing for 25, and I'm thinking that I'm missing something obvious. Or maybe not so obvious...

The big changes that I'm doing are separating out servers and infrastructure from resident's lan space. basically with the switches and APs sitting on the default VLAN (0), and the residents getting moved to a different VLAN than the servers and other fun stuff...

Intel does NOT offer a standalone NVM update for any i226 nics. Instead, they expect you to obtain their firmware from your device OEM but this is often unavailable or grossly outdated.

The Work Around. BEWARE YOU RISK BRICKING YOUR NIC => MAKE A BACKUP !!!

1. Download & Extract -- https://www.intel.com/content/www/us/en/download/15084/intel-ethernet-adapter-complete-driver-pack.html -- look inside for NVMUpdatePackage/I225/I225.tar.gz and extract -- look further into this I225 folder until you find nvmupdate64e (updater tool). Leave this tool where it is. Make a companion I226-V work folder and copy the nvmupdate64e + nvmudate.cfg from the I225 folder to the I226-V work folder.
2. Open a terminal inside this new folder </> sudo ./nvmupdate64e -i -l inventory.txt </> -- Take note of what this text file says the ETrackID numeric value is for your i226 NIC. This is the firmware identifier you currently have installed.
3. Visit BillyCurtis Community Repo for I226 firmware https://github.com/BillyCurtis/Intel-I226-V-NVM-Firmware/tree/main -- find your NIC and your current ETrackID. Find the latest 1mb or 2mb firmware version for your NIC, Take note of the ETrackID for the latest 1mb or 2mb firmware version for your NIC and download it.
4. Drop this firmware update directly into the local I226-V work folder.
5. Open any text editor and change the nvmupdate.cfg file -- example below
6. Open a terminal in this same folder </> sudo ./nvmupdate64e -u -l -b -c nvmupdate.cfg </>

NOTE: If by some chance you also need to update any I225 NIC, do that first if you intend to overwrite the initial I226 nvmupdate.cfg file. You can also update other Intel NICs using the other update folders respectively. In every case, you can use the same command listed in step 6 above. This will begin the process of evaluating your NIC Non-Volatile Memory chip (NVM) for update (-u). It will verbosely log its progress (-l). Make a backup (-b). Using the config file (-c) nvmupdate.cfg. If you neglect the -l flag it will proceed silently. If you neglect the -b flag there will be no backup. You can also use the update tool to inventory all your NICs and output to a text file as suggested in step 2.

I226-V Config file Process. Use ETrackId numeric values for your NIC firmware. Don't guess

A. This is the output of my initial discovery command above in step 2, minus sensitive info
</> sudo ./nvmupdate64e -i -l inventorty.txt </>
[00:005:00:00]: Intel(R) Ethernet Controller I226-V
Vendor : 8086
Device : 125C
Subvendor : 8086
Subdevice : 0000
Revision : 4
LAN MAC : ### LAN MAC is hidden by me ###
Alt MAC : 000000000000
SAN MAC : 000000000000
ETrackId : 80000308
SerialNumber : ### SerialNumber is hidden by me ###
NVM Version : 2.23(2.17)
PBA : G23456-000
VPD status : Not set
VPD size : 0
NVM update : No config file entry
checksum : Valid

B. This README file section is where I verified the correct (1MB) firmware for my i226-V NIC
-- https://github.com/BillyCurtis/Intel-I226-V-NVM-Firmware/tree/main/README.md
I226-V

you can see above my intial firmware is ETRackID 80000308 which tells me I need a 1MB size version of which the latest is version 2.32, ETrackID 80000425.

C. Just above where the README file is posted, I clicked on the I226-V > 2.32 downloads folder and downloaded FXVL_125C_V_1MB_2.32.bin raw file for my 1226-V NIC
-- https://github.com/BillyCurtis/Intel-I226-V-NVM-Firmware/tree/main/I226-V/2.32 -- and dropped it into my local I226-V work folder.

D. Having copied the initial i225 config file to my I226-V work folder, I overwrote it as follows

CURRENT FAMILY: 1.0.0
CONFIG VERSION: 1.20.0

; Upgrade all 4 onboard Intel i226-V controllers
BEGIN DEVICE
DEVICENAME: Intel(R) Ethernet Controller I226-V
VENDOR: 8086
DEVICE: 125C
SUBVENDOR: 8086
SUBDEVICE: 0000
NVM IMAGE: FXVL_125C_V_1MB_2.32.bin
EEPID: 80000425
REPLACES: 80000308
RESET TYPE: NONE
END DEVICE

E. Save and open a terminal </> sudo ./nvmupdate64e -u -l -b -c nvmupdate.cfg </>

D. I'm told I can restore the backups created by the -b flag by running the following.
</> sudo ./nvmupdate64e -r -l -c nvmupdate.cfg </>
However, I've had no need to use this command and therefore don't know it it'll work or if the config file needs more info or what.

I226-V Release Notes

The Cavium CN6640-SNIC10E is a dual-port 10GbE PCIe card that shows up on eBay for ~$15–20. It's an OEM "SmartNIC," an 8-core Octeon II SoC meant to run Cavium's vendor LiquidIO firmware. Problem: the stock liquidio driver basically doesn't work with these OEM boards (its flash-handshake boot model doesn't match), and secondhand cards tend to have bootloaders in a rough state. There's a good writeup of people hitting a wall on this back in 2021 on the OpenWrt forums. Both PCIe BARs would read back all-0xFF and the board looked architecturally dead as anything but LiquidIO.

Turns out that "BAR wall" is just unprogrammed PEM inbound registers, not a hardware limit. You can program them from the card side with plain u-boot write64 (no firmware needed) and open a full bidirectional PCIe channel.

On top of that I built:

- an OpenWrt image that runs on the card from RAM (nothing flashed, fully reversible)

- a reverse-engineered PCIe BAR2 shared-memory datapath between host and card

- an out-of-tree host kernel module (octnic) that registers the card as two independent Linux NICs, oct0/oct1

Result: line-rate 10GbE, TX at 9.7–9.8 Gb/s (zero-copy), RX at 8.1–8.8 Gb/s (DMA via the Octeon DPI engine), both ports live simultaneously on a DAC. Boots with no serial cable after a one-time provisioning step. A systemd service brings both NICs up automatically at boot, so day to day it's just a normal 10GbE card as far as the rest of the homelab is concerned.

No vendor NDA firmware anywhere in the stack, host OS untouched, and the whole thing is undoable if you want the card back to stock.

Repo (driver, boot tooling, docs): https://github.com/nicologiuliani6/cavium-cn6640-snic10e-octeon-ii-nic

Docs cover architecture, first-time flashing/provisioning over serial, usage, and full performance numbers if anyone wants to reproduce this on their own card.

Happy to answer questions. This took a fair bit of reverse engineering to get past the BAR wall so ask away if you're stuck on one of these boards.

If you want to help out (test on your own board, contribute code, whatever) open an issue or discussion on the repo. If you'd like to support the project, GitHub Sponsors is enabled there too.

UPDATE: new idea, Another interesting use case is running OpenWrt standalone directly on the card.

For around $13, you basically get a dual-port 10GbE SFP+ router, without needing a separate x86 machine. And with two or more of these, you could potentially build a pretty cheap multi-router failover setup.

That's actually one of the things I'd like to explore next.

​

Hi,

I'm running  OpenWrt 24.10.0 (flippy build, kernel 6.1.115) on a Radxa E24C board with RK3528 SoC and RTL8367B switch. I have a dual-WAN setup with mwan3 for load balancing, but throughput is capped at ~300 Mbps. I've done extensive testing and identified the root cause. I'm sharing my findings below in case they're useful for the community or if there's a solution I'm missing.

---

## 1. Hardware Setup

- **SoC:** Rockchip RK3528 (4× Cortex-A53 @ 2.0 GHz max)

- **Switch:** Realtek RTL8367B (4× GbE ports)

- **NIC driver:** stmmac (Synopsys DWMAC4/5, `st_gmac` module)

- **RAM:** 1 GB

- **Storage:** NVMe Intel 128 GB

### Switch Port Mapping (confirmed via testing)

| Port | VLAN | Interface | Role |

|------|------|-----------|------|

| 0 | VLAN 3 | eth0.3 → wan2 | WAN2 (second modem, 600 Mbps) |

| 1 | VLAN 1 | br-lan | LAN (PC connected) |

| 2 | VLAN 1 | br-lan | LAN (free) |

| 3 | VLAN 2 | eth0.2 → wan | WAN1 (main modem, 1000 Mbps) |

| 6 | — | CPU (internal) | SoC uplink |

### Current NIC Configuration

```

Driver: st_gmac (Synopsys DWMAC4/5)

RGMII link speed: 1000 Mbps (between stmmac and RTL8367B)

Queues: RX=1, TX=1 (single-queue hardware)

TSO: enabled in dmesg but tx_tso_frames=0 (not actually offloading)

RPS on eth0: 0xd (CPUs 0,2,3) ✓

RPS on eth0.2: 0x0 (disabled) ✗

RPS on eth0.3: 0x0 (disabled) ✗

Ring buffer: 1024 (max)

IRQ 55 (eth0): on CPU0, affinity 0-3

IRQ 56 (eth0): 0 interrupts (unused)

```

---

## 2. Software Configuration

- **mwan3:** Load balancing with weighted policy (5:3 ratio for 1000:600 Mbps links)

- **AdGuard Home:** DNS filtering on port 53

- **Firewall:** iptables (fw3), WAN REJECT policy

- **CPU governor:** schedutil (scales frequency with load)

- **Swap:** zram 512 MB (zstd) + swapfile 4 GB on NVMe

- **TCP:** BBR congestion control, fq_codel qdisc

---

## 3. The Problem

With both WANs active and mwan3 load balancing, throughput is capped at **~300 Mbps** aggregate. The expected combined throughput should be ~1600 Mbps (1000 + 600). Individual links can reach their full speed when tested alone (without mwan3), but with mwan3 active, the aggregate drops to ~300 Mbps.

---

## 4. Root Cause Analysis

### 4.1 Confirmed: Flow Offloading (SFE and xt_FLOWOFFLOAD) Breaks mwan3

I tested two different offloading mechanisms, and **both** caused mwan3 to enter "error" state:

**Test 1 — SFE (Shortcut Forwarding Engine):**

- Module: `kmod-shortcut-fe` + `kmod-shortcut-fe-cm` (compiled into kernel, `CONFIG_SHORTCUT_FE=y`)

- Result: mwan3 went to "error" state, network lost connectivity

- Had to disable SFE and restart mwan3 to restore

**Test 2 — xt_FLOWOFFLOAD (iptables flow offload):**

- Module: `xt_FLOWOFFLOAD` (loaded but inactive, `flow_offloading='0'`)

- Enabled via: `uci set firewall.@defaults[0].flow_offloading='1'` + firewall restart

- Result: mwan3 went to "error" state on both WAN interfaces

- Internet still worked on individual interfaces (ping via eth0.3 succeeded), but mwan3 tracking probes failed

- Had to restore firewall backup and restart mwan3 to restore

### 4.2 Why Flow Offloading Conflicts with mwan3

**mwan3** works by:

1. Marking packets in the `mangle` PREROUTING chain (`iptables -m mark --set-mark`)

2. Using `ip rule fwmark` for policy-based routing (selects WAN based on mark)

3. The routing decision determines the outgoing interface per-connection

**Flow offloading** (both SFE and xt_FLOWOFFLOAD) works by:

1. Caching the resolved route for established flows (including the output device)

2. Subsequent packets in the flow bypass conntrack, iptables, and routing — they're fast-pathed directly to the cached device

**The conflict:** Flow offloading bypasses the iptables mangle chain where mwan3 marks packets. Even though the first packet of a flow goes through the full path (mark → route → NAT), the flow offload entry caches the route. When mwan3's tracking probes (ICMP) are sent, they may be affected by the firewall restart or chain reordering, causing the tracking to fail.

Additionally, when the firewall is restarted (required to apply flow offloading changes), mwan3's iptables rules are temporarily removed and re-added. During this window, tracking probes fail and mwan3 marks the interfaces as "error".

### 4.3 Software NAT Bottleneck

Without any offloading, every packet goes through the full path:

1. conntrack lookup (hash-based, O(1))

2. iptables mangle (mwan3 mark processing)

3. Routing decision (policy routing via ip rule)

4. NAT rewriting (MASQUERADE/SNAT)

5. Forwarding to outgoing interface

On the RK3528 (Cortex-A53 @ 1.4–2.0 GHz), this path is CPU-bound. The single-queue NIC means the TX path (NAT rewriting) is single-threaded, limiting throughput to ~300 Mbps.

### 4.4 Additional Bottlenecks Found

| Issue | Status | Impact |

|-------|--------|--------|

| VLAN interfaces (eth0.2, eth0.3) have RPS=0 | Confirmed | RX processing not distributed across CPUs for VLAN traffic |

| TSO enabled but tx_tso_frames=0 | Confirmed | TCP segmentation not offloaded to NIC — CPU does all segmentation |

| RGMII link = 1 Gbps | Confirmed | Total aggregate throughput for all ports limited to 1 Gbps |

| CPU at 1416 MHz (not max 2016 MHz) | Confirmed | schedutil scales down — may not ramp up fast enough during burst |

| Single queue (RX=1, TX=1) | Confirmed | No multi-queue parallelism |

---

## 5. What Was NOT Tested (Due to Risk)

- **nftables flowtable** (`CONFIG_NFT_FLOW_OFFLOAD=m`): Likely has the same conflict as xt_FLOWOFFLOAD since both use the nf_flow_table infrastructure

- **Hardware NAT** (`flow_offloading_hw='1'`): RK3528 does not have a hardware packet processing engine (PPE), so this would fall back to software anyway

- **Bonding (LACP/LACP):** Requires ISP-side support, not applicable for two different ISPs

---

## 6. Questions for Support

1. **Is there a way to make flow offloading work with mwan3?** Specifically, can we configure xt_FLOWOFFLOAD or nftables flowtable to only offload AFTER mwan3 has marked and routed the packet, without interfering with tracking probes?

2. **Can the stmmac driver be configured for multi-queue?** The hardware reports `RX: 1, TX: 1` max queues. Is there a way to enable more DMA channels on RK3528?

3. **Why is TSO not working?** TSO is enabled in dmesg (`TSO feature enabled`) but `tx_tso_frames=0`. Is there a driver or firmware issue?

4. **Is there a way to increase the RGMII link speed?** The current link is 1 Gbps. Some RK3528 variants support RGMII at 2.5 Gbps. Is this configurable via device tree?

5. **Are there any kernel patches or driver modifications** that could improve single-queue NAT throughput on this hardware?

---

## 7. Current Working Configuration

The system is currently stable with:

- Flow offloading: **disabled** (`flow_offloading='0'`)

- SFE: **disabled** (module loaded but not active)

- mwan3: **active** (load balancing 5:3)

- Throughput: **~300 Mbps** aggregate

- Both WANs functional with failover

---

## 8. Summary

| Metric | Value |

|--------|-------|

| Hardware | RK3528 + RTL8367B |

| OpenWrt | 24.10.0 (flippy), kernel 6.1.115 |

| NIC driver | stmmac (single queue) |

| RGMII speed | 1 Gbps |

| Flow offloading | Confirmed broken with mwan3 (both SFE and xt_FLOWOFFLOAD) |

| Current throughput | ~300 Mbps aggregate |

| Expected throughput | ~1600 Mbps (1000 + 600) |

I appreciate any guidance or suggestions. Thank you for your time.

Best regards,

I know that not everybody checks out the OpenWRT forums, and that is a shame really. For those who are interested, and haven't moseyed over there for a gander, there has been a lot of work to bring Mainline OpenWRT to WiFi 7 devices lately.

The furthest along one currently is the GL.iNet Flint 3 (GL‑BE6500) linked below
https://forum.openwrt.org/t/gl-inet-flint-3-exploration-gl-be9300-ipq5332/250267

I have recently picked up the mantel of working on the Cudy AP11000 which can be found
https://forum.openwrt.org/t/installing-openwrt-on-cudy-ap11000/240369

That being said, what features and desires do the lovely OpenWRT community look for in WiFi 7 devices?

Hi everyone,

I have a ZTE ZXHN H188A/H288A (same hardware and software, different names) and I’m interested in getting OpenWrt running on it. I opened the device and extracted the following hardware information:

Detailed Specs In Googel Docs

Google Drive Link For All Modem’s Files Obtained Via FTP

Google Drive Link For High-res Motherboard Photos

The PCB is clearly marked ZXHN H288AV1.1.

I haven’t flashed anything yet. I’m willing to provide UART boot logs, firmware dumps, partition information, and test OpenWrt builds on this hardware.

Does anyone know if this device/platform is already supported, or if there is an existing EN751627/OpenWrt port that could be adapted?

Photos of the PCB attached. Any help from OpenWrt developers would be greatly appreciated!

Thanks to the community. I am getting 30-35 MB/s writes on the sandisk USB 3.0 flash drive and happy with it.

Hi, I am currently looking to replace my Turris Omnia with a more powerful option for my main router/gateway.

I want two sfp+ port and ideally one 2.5GBE.

I have considered banana pi r4 pro but seems overpriced. I have considered Ubiquiti UCG Fiber but would prefer remaining Open Source. Specialized mini-pc looks overpriced as soon as you start including RAM and storage.

For now the best value seems to be Lenovo m720q 150-250€ (depending of the RAM amount) but will need to find pcie riser and right card.

Any other option to consider?

I live in France if that matters.

Title says it all.

On my old TP-Link Archer C50 router, I go to 'DHCP Settings' and it's right the heck there - see attached. You fill in your DNS and your secondary DNS and click 'Save'. DONE....EASY.

How, on OpenWRT....can I just add Google's DNS servers in the same manner? I've read so many articles and posts about it, but every single one seems to contain different information...?

This is the last hurdle I'm having before I replace said old Archer with a LinkSYS WRT1900AC running OpenWRT that I picked up for cheap.

Thanks so much for the help!

Apparently I won't get full 802.11ac, no beamforming, and limited tri-band speed because it uses Broadcom BCM43602. I pretty much only use WiFi, I assume it's not worth the upgrade? It says it's supported, but am I correct with what I'm saying?

I need to install VPN to any of those routers. I had AX50 before and bought C6U for the sake of OpenWRT.

I've tried installing mihomo/Nikki and sing-box-tiny but they were really laggy and I don't really understand the reason behind it.

Is there any better way to solve this? Do I return C6U while I still can?

Edit: here’s the actual specs I obtained so far:
SoC: MediaTek/EcoNet EN751627, MIPS 1004Kc, 900 MHz
* RAM: 128 MB
* Flash: 128 MB SPI NAND (HeYangTek HYF1GQ4UDACAE)
* 2.4 GHz: MediaTek MT7603EN, 2x2
* 5 GHz: MediaTek MT7612EN, 2x2 802.11ac
* Ethernet: 4× Gigabit LAN + 1× WAN
* DSL: EcoNet EN7556N line driver
* VoIP: 2× FXS
* USB: 1× USB 2.0
* UART: Unpopulated 4-pin header, apparently connected to ttyS0
* Firmware: Dual-bank A/B layout with separate kernel/rootfs partitions

Actual ftp files from the modem itself:

https://drive.google.com/drive/folders/1AjXJRn7XsKcQGdAc9dWQ4g2I17xgbG4_

High-res Motherboard photos: https://drive.google.com/drive/folders/1SEecEH4HexAqZiC7v0f1l7hQwSTN3IJz

ZTE H188A V2 is highly capable of running OpenWrt. Why is there no build for it?
The ZTE H188A V2 is a very common and, from what I can tell, highly capable modem/router. In Egypt alone, it has been widely distributed by all four major ISPs: WE, Orange, Etisalat, and Vodafone. I see this router everywhere, so I wouldn’t be surprised if there are thousands—or potentially millions—of units in use.
I’m wondering why the H188A V2 isn’t supported by OpenWrt yet, especially considering the hardware it has.

The biggest problem with the ISP firmware for me is bufferbloat and the lack of proper QoS controls. I tested OpenWrt in a virtual machine on my laptop and installed SQM (Smart Queue Management). The difference was incredible. My bufferbloat results improved dramatically, which made me really want to run OpenWrt directly on the router.

The hardware also seems more than capable. As far as I know, it has 128 MB RAM and 128 MB flash (please correct me if I’m mistaken), along with what seems to be very decent hardware overall. The router itself has also proven to be reliable and has good longevity.

This is becoming more relevant in Egypt because we’re increasingly moving toward fiber connections. If these routers can’t run better firmware, I worry that a huge number of perfectly good H188A V2 units will eventually be thrown away and replaced, simply because the stock firmware is so limited.

What’s especially interesting to me is that other ZTE models, such as the H108, have OpenWrt support, while the H188A V2 doesn’t. So I’m curious: what is preventing support for the H188A V2?
I actually have an H188A V2 with me right now, and I’m willing to help with development/testing.

I can:

Open the router and provide high-resolution photos of the PCB and components
Provide information about the hardware/chips
SSH into the device

Provide a full software/firmware dump, if useful
Run commands/tests requested by developers
Provide any other information needed to investigate the platform

If someone is interested in trying to bring OpenWrt to this router, please let me know what information you need. I’d be happy to provide whatever I can.
Given how widely this router is deployed in Egypt, I genuinely think OpenWrt support could benefit a very large number of users. We could potentially continue using this hardware with our new fiber connections instead of throwing perfectly good routers away.

So, developers: is there a specific hardware, bootloader, driver, or firmware issue preventing OpenWrt support for the H188A V2? And what would you need from me to investigate it?

Downloads.openwrt.org got banned in my country, so I now have to use a mirror (which can be banned too) or a proxy. I need help with the latter. Is there a way to configure it to send requests through a proxy, like it's possible with apt?

I did search before posting, but I didn't find much, and what I've found (less-convenient solutions) doesn't even work.

UPD: Solved. Requires wget-ssl (not installed by default).

https_proxy=http://proxy.example.com apk <whatever>

Can someone please tell me with specific steps to set up my GL.iNet router to block DoT and DoQ?

Hello everyone im new in OpenWRT so far i did flash OpenWrt 25.12.2 r32802-f505120278 to my AX23 1.20. I've done my research thru AI and said that i can do Dual wan setup with failover and load balancing with this kind of router. Appreciate if someone did it already and am i already in correct openwrt version ? If you guys have any resources please do share it. Thank you !

I don't know, maybe I'm getting hyped by their videos, but every time I see their releases I think "damn, this is so powerful and polished". But so is OpenWrt, right? At least on the feature side of things. What we're missing on OpenWrt is just the fancy UI when compared with Ubiquiti?

The subject pretty much asks it...

The latest post I found in a search was this one: https://www.reddit.com/r/openwrt/comments/1oju4ah/how_do_you_actually_expand_to_the_entire_drive/

It's been 10 months and we have a new major version stable release. Is it possible to safely expand the partitions now, or is it still a problem?

Hi, Who are the admins over on the forums? They seriously need to deal with certain users. I shouldn't be given vauge answers time after time, and attacked for asking a serious question about adding hardware support. If you don't have nothing useful to add don't comment. Ok, rant over.

Is it possible to block port 853, which is what DoT and DoQ use? Then force all traffic to use the DNS settings of the OpenWRT router?

Has anyone compiled a list of DoH servers that is safe to block? How do I add the DoH server list to OpenWRT?

Can port 53 also be blocked, or is it required for internet access?

So I noticed that on the Attended Sysupgrade config page on luci you can switch the server and once I do that I can see the different versions available. So my question is, is this safe and has anyone tried it with success? I'm pretty new to openwrt/immortalwrt came from ddwrt which is drastically different.

immortalwrt as i understand it is simply openwrt with a few extra pkgs included automatically. If its just a few extra packages and settings are saved when doing the sysupgrade, the logic stands that it should just work, right?

I actually posted something on r/TPLink_Omada already but I wanted to ask on this sub regardless.

I bought the TP-Link EAP245 v3 because it had 2 ports and some other posts on Reddit said it should be bridged with the original firmware. Good if you don't have the space for a network switch.

To my suprise I can't seem to get a good connection from the second port. For testing I connected a laptop to ETH2 and got an IP, but I can't get internet. After some digging I found that DHCP and pinging Internal & External IPs works but DNS and other services (HTTP etc) won't work. Windows and Linux show the same synthoms.

Bla bla. While digging for info I found out that OpenWRT actually supports (or partly supports) the EAP245 (https://openwrt.org/toh/tp-link/eap245_v3). Does someone of you run this AP with OpenWRT installed and maybe has the resources to test running with daisy-chaining?

I'm not a fan of flashing OpenWRT to it, voiding a potential warrenty, before knowing if OpenWRT could fix the issue. The wiki page provided pictures of the inside of the device. Both ETH ports are connected to an Qualcomm Ethernet 7P-switch chip (QCA8337N-AL3C), so it seems it should work or it could be configured via TP-Link or OpenWRT.

Anyhow, thank you for your help and I hope even if this isn't resolvable, it still helped someone like me, buying the EAP for daisy-chaining.

(Also: Mods, if there is anything wrong with my post, please let me know)