OpenWrt is a Linux distribution for wireless routers. It provides excellent safety, performance, privacy, and extensibility, allowing users to fully leverage their router hardware without worrying about the manufacturers harvesting their data.

How I Got Started

My first experience with OpenWrt came when I was trying to build a home network at school. The ISP was giving me some trouble, and although I eventually solved the issue in a simple way (which I wrote about in a previous post), I thought that flashing my router with OpenWrt might give me more control and flexibility. While OpenWrt wasn’t necessary to solve the problem, it introduced me to this fantastic FOSS software, and I’ve been using it ever since.

The router I initially used was cheap and old. Since it wasn’t officially supported and was quite underspecified, I spent considerable time figuring out how to flash it. In the end, I had to pay for a custom U-Boot and a custom OpenWrt build from a Chinese forum. The installation went smoothly, and I had my first working OpenWrt device. I know that distributing such builds violates the GPL license, and using a binary from an unknown source can pose privacy and security risks, so I quickly moved on to a safer setup.

Moving Up: Specialized Routers

After seeing the capabilities of OpenWrt, I switched to GL.iNet routers, which come with OpenWrt preinstalled. These routers are more expensive than typical home routers, but they provide the computing power required for some of my applications. While using a secondary software-based non-wireless router is a cheaper option, it adds complexity and introduces another potential point of failure. GL.iNet’s preinstalled OS is a fork of OpenWrt with many packages preconfigured, making setup easy. Hardware acceleration further boosts network throughput and reduces latency. The downside is that OS updates are less frequent, which can leave devices exposed to software vulnerabilities.

What You Can Run on OpenWrt

  • VPN client: Route all connected devices’ traffic through a VPN. This prevents ISP and local network snooping, avoids DNS leaks, protects privacy, and can unlock geo-restricted content.

  • Proxy tools: Bypass Internet censorship in countries where VPN traffic is blocked.

  • Recursive DNS servers: Serve as a fallback when VPN fails and add another layer of privacy.

  • Ad-blockers: Block ads, malicious sites, and trackers network-wide.

  • VPN server: Allow remote access to your home network and services.

  • Home automation, NAS, or even game servers: OpenWrt supports Docker, so the possibilities are almost endless, though some setups may not be recommended on low-powered hardware.

Why It Matters

Your router is the gateway to your home network, which makes it a critical point for security and privacy. Running services directly on it:

  • Provides powerful features

  • Centralizes network management

  • Avoids multiple setups on different devices

OpenWrt transformed a humble router into a powerful network hub. Once you experience the freedom and control it provides, it’s hard to go back.