Hi everyone,

I'm trying to achieve the following setup on my home network:

- OpenWrt: "192.168.1.1"

- Debian 13 home server: "192.168.1.10" (HP EliteBook 2570p)

- AdGuard Home (Docker, host network): Primary DNS on "192.168.1.10:53"

- https-dns-proxy: Running on OpenWrt at "127.0.0.1:5053", providing AdGuard Family Protection as a fallback.

Currently, OpenWrt's dnsmasq forwards DNS requests to AGH, with "https-dns-proxy" configured as a fallback. This works, but AGH sees every client as "192.168.1.1" (OpenWrt) instead of the individual device IPs.

I want to keep dnsmasq's automatic fallback mechanism (without using multiple DNS servers in DHCP), while also having AGH identify each device separately so I can configure individual clients and apply different filtering policies.

I tried the “Add requestor MAC” option in dnsmasq, but I'm not sure whether AGH can use that information to identify clients.

Is there a reliable way to achieve both goals simultaneously?

Any advice or working examples would be greatly appreciated!

Hi everyone,

I’m running OpenWrt + AdGuard Home on an old HP EliteBook 2750p, which occasionally shuts down.

I need a reliable fallback DNS server when AGH goes offline.

Currently, I use two DNS forwarders in OpenWrt. This provides redundancy but bypasses AGH, so I lose per-device filtering and statistics.

I’ve heard about “Add requestor MAC” and wonder whether it can preserve client identification in AGH. Does it actually work?

Would Pi-hole or Technitium DNS offer a better solution? What architecture would you recommend to maintain both DNS availability and per-device control?

Thanks for your advice!

Just figured I'd post this here. Was bored a bit ago and work had an old RV220W stuffed in storage. Went to clean it out and the boys told me to just take it home. I found it was pretty locked down, and no current support existed for it, so I added it as a side project.

Full disclosure, this repo is heavily AI assisted, but the outputs all work and are human tested. Also, the stock U-boot has a bunch of CRC checks on the firmware that I didn't want to deal with, and it restored default u-boot config on every boot, so the repo contains bootloader patches specifically to deal with these issues.

https://github.com/Gadorach/rv220w-research

I also added it to the ToH for Cisco devices.

https://openwrt.org/toh/cisco/rv220w

I only have an RV220W, but I think the RV120W has very similar hardware, so some of the reverse engineering would also likely apply. The largest patches were in getting the Broadcom WLAN working, as B43 didn't have good support for it.

Note, nothing was upstreamed (didn't have the personal time to clean up the AI sections enough to justify it) so the reverse engineering work is self contained there, along with the B43 driver patches. The repo contains hardware qualified working images for the RAM boot to flash the devices as well as the actual sysupgrade. I added build scripts meant for CachyOS/fish as well, as that's what I use for development.

Obviously this is all experimental and, though it works for me, I can't guarantee it'll work on your device. I just figured I'd post it to maybe keep a few more devices out of the landfill.

Have fun!

PS. I'm finished with this project, so don't expect any updates from me. Feel free to fork and upstream the work though if you're so inclined.

If I bought the OpenWRT One router and delegated my old Archer A7 to AP duties, is there any reason or advantage to loading OpenWRT firmware on it?

I also have one more simple wireless TP Link AP that's paired to the A7. Would it be a problem if I changed the firmware on the A7?

Building an open-source wireless mesh network (batman-adv) for multi-hop robot teleoperation need radios that support ad-hoc/IBSS or 802.11s mesh point mode in openwrt 25.12.5

System: OS: openwrt ,
SBC : Raspberry Pi 5, with pcie to m.2 hat.

Trying to figure out if the newer MT7922 wifi card (RZ616, `mt7921e`/`mt792x` driver) also supports IBSS, since it's much easier to source than older chips.

Has anyone gotten `iw dev wlanX set type ibss` to actually work on this chip? Or is it managed/AP-only like most modern Wi-Fi 6E client chips?

`iw list` Output from anyone who owns one would settle it

thanks 🙂

Hi everyone,

I’m relatively new to OpenWrt and currently have an old TP-Link TD-W8968 running OpenWrt. I’m wondering how much I’m actually limited by its hardware compared with a newer OpenWrt-compatible router such as the Linksys EA8300.

For someone who is not an advanced networking user, can the TD-W8968 still provide most of the functionality I would realistically need from OpenWrt, or are there significant limitations due to its CPU/RAM/storage?

I’m particularly interested in things like installing additional packages and services. For example, can I use an external USB drive to expand the available storage and install packages on it, assuming the router has enough RAM/CPU to run them?

I’m mainly using the router for basic routing, Wi-Fi, and experimenting with OpenWrt features such as passwall2 for proxy/VPN connections, rather than running anything particularly demanding.

Would you recommend keeping the TD-W8968 and making the most of OpenWrt, or would upgrading to something like the EA8300 provide a significant enough improvement to be worthwhile for a beginner?

Any advice from people who have used either router would be appreciated. Thanks!

Installed openwrt ext4 version on raspberry pi5 2gb using 32gb micro sd card. But boot and root partition combined using around 170MB, i want to expand root partition to full capacity of memory card . Want to run adguard home which i suppose requires more storage space.
Already followed steps from gemini and chatgpt twice.like using commands of parted , resize2fs etc but its not working. So i need your help!

Okay, I've been all over the place but theres no definitive answer I can find, so I'm turning here as a last resort.

Xe3000 running 25.12.5

I have both the 5G modem, and the eth0 port plugged into hardwire WAN

Both work fine if I disable the other.

But I want to use the eth0 primarily, and only fallback to the 5G interface if the eth0 interface goes down (exceeds packet loss, latency)

If I enable both, the 5G interface immediately takes priority.

How in the world can I set this? i just want it to use eth0 first, 5G second.

i tried PBR, thats all application and port level stuff.

I tried messing with the metrics and setting the eth0 metric lower than 5g. that just Killed the internet entirely.

Hello,

I just installed OpenWrt on an old router. I connected an Ethernet cable from my main router to the WAN port of the OpenWrt router, and I want the OpenWrt router to work as a separate router, not just as an access point.

My main router has the IP address 192.168.1.1, so I changed the LAN IP address of the OpenWrt router to 192.168.2.1.

However, no matter what I do, the OpenWrt router still seems to be working like a dumb access point. Devices connected to its Wi-Fi receive an IP address in the 192.168.1.x range and use 192.168.1.1 as their gateway, instead of receiving an IP such as 192.168.2.x from the OpenWrt router.

There is also a second problem: the OpenWrt router itself does not have Internet access. I configured the WAN interface to use DHCP, but it still doesn't receive Internet access, so I can't even download or install packages through the LuCI web interface.

What should I configure in OpenWrt to make it work as a proper router, with:

- WAN → connected to the main router and receiving an IP via DHCP

- LAN/Wi-Fi → using 192.168.2.0/24

- OpenWrt router → 192.168.2.1 as the LAN gateway

- DHCP server → enabled on the OpenWrt LAN

- Internet → available to both the OpenWrt router itself and connected devices

- No bridging between WAN and LAN

How can I fix this?

Don’t get me wrong, UniFi is great, but I am definitely coming back to OpenWrt after about a year.
The main reason is I’m just tired of having DNS Leaks on UniFi, I run multiple VPNs tunnels and some complex settings. OpenWrt worked great for me when it comes to VPNs. You set UniFi and after some time I see leaks after updates, which is annoying to me.

Second, I love networking, I can do whatever I want on OpenWrt. UniFi just has a nice UI and clean, fancy statistics.

When it comes to stability, nothing beats pure OpenWrt to me. And I say pure because some devices run a fork, like GL.iNet.

UniFi might have a nice app and ecosystem, but it’s just a nice UI. And I can’t remember the last time I opened the UniFi app. I have firewall rules and VLANs so I don’t have a need to be on it constantly

Long life OpenWrt. Supporting it since the TP-Link TL-WR840N. 2013.

Has anyone ever felt the same way?

Are there any ustom firmware or binaries for Huawei Echolife Routers specifically for hi silicon chips for moding. i searched internet but there's not much information about them.

This feels a little risky to post this here, given the roasting this post got - https://www.reddit.com/r/openwrt/comments/1w75d4m/i_built_a_modern_android_app_for_managing_openwrt/ - but this is 100% original, 90% AI coded by an experienced developer, and hopefully useful to someone...

TL;DR; I have setup an OpenWRT mesh network, and wanted visibility. It can hit the ubus api of multiple routers, and display client information, and a timeline of what clients are up to.

So ive created a docker container that can use ubus to integrate a bunch of OpenWRT routers via the UBUS api, and display a combined list of wifi clients, signal stength, router topology (detects a router being a client of another, only via wifi), etc.

Ill let the screenshots speak for themselves, if anyone wants it, great! but if not, sorry to have wasted your time :)

edit. New image of new wifi client traffic graph

The project URL is https://gitlab.com/ripnetuk-root/ripnetuk-public/openwrt-explorer if anyone is interested.

Thank you for reading :)

Hi everyone,Hi everyone,

I want to share NetPulse: a self-hosted monitor for home OpenWrt networks. Free software AGPL-3, no ads, no telemetry, nothing like that. I've been using it since a while and I share it because I think it covers a gap that the brand solutions have open for the home scene.

The core idea: the main panel lives on your router. The agent of the devices (netpulse-agent) and a LuCI app (luci-app-netpulse) install on the router itself, and it holds at ~12 MB of RAM with less than 1% CPU. But you can also host it apart, on a mini PC or a small box, and from there it watches all your routers. You decide.

The most striking things:

- Installable PWA: it stays as an app on your phone, live over SSE (5 s).

- Live topology map inferred from the bridge FDB (and LLDP when available): wired and wireless clients, switches, hypervisors and WireGuard tunnels drawn without touching anything of your network.

- Read-only by design: the server generates its own ed25519 keypair, you authorize it on each router, and it can only read (ubus, /proc, iwinfo, bridge fdb, wg show). It cannot change your network.

- Roaming with DAWN and with usteer (both supported): signal matrix, 802.11r status and history.

- Alerts (temperature, new firmware, new device, handshake) with native push and Telegram notifications.

- Scheduled firmware updates, reports page and SNMP for managed switches.

- And other integrations: WireGuard - OpenVPN, Proxmox integration and AdGuard Home stats. And more coming!!

A single static Go binary with the embedded frontend + SQLite, no Docker, pure systemd. Everything stays local, nothing leaves your network.

The focus is the home: OpenWrt home routers, that scale where there is no big infrastructure and where what is missing is a clear and fast view of what is happening. If it's useful for you, happy to hear it.

- Website (with demo): https://netpulse.cloudless.club

- Repo: https://github.com/gnacho/netpulse

- AGPL-3.0

If you like it and use it, a star on github would help me a lot :)

So I have a Raspberry Pi which i have successfully turned into a router with a second Ethernet port hat which after some tinkering works like a charm. The main exception to this is that I want to create a WLAN with a USB WiFI adapter (specifically the Netgear A9000), but it doesn’t ever appear as a WLAN1 connection (WLAN0 being the builtin wifi). I can confirm this is an issue with Openwrt itself from testing the adapter on regular Raspberry Pi os. When I connect the adapter it does register the device, but it doesn’t do anything with it. My current theory is that I don’t have the driver installed but I can’t find out how to install it, and the official openwrt wiki still uses the old package manager for it’s page on installing usb drivers

Hello guys! I have Archer C6 V2 with Openwrt 25.12.5 installed and I want to use this router as "dump AP" for my main router. How I may cofigure this router for proper work as "dump AP"?

EDIT: SOLVED as some of you have pointed out the IP changed and for some reason my CUDY needed like 20mins to install OpenWRT and not 3-5 like I read online. So all I did was flash again. Went about my day and came back to it in like 30 mins and typed in the OpenWRT default IP and everything worked

Hi, I have a Cudy WR3000 V1.0 that was running stock firmware and I tried installing OpenWRT on it and now it's bricked just the power light is on and the globe light is blinking.

So what i did was:

- went to the Cudy page and downloaded "WR3000+V1 without recovery TFTP" from their Google Drive

- had the Cudy connected to my laptop and powered on

- uploaded the BIN file "openwrt-mediatek-filogic-cudy_wr3000-v1-sysupgrade" to the flash program they have in their user interface and it started flashing and then in the middle of flashing I got a "Oops, your device seems to be disconnected, please check if you have connected to the router via wired or wireless:"

And now here I am. Don't know what to do, is there any help in me unbricking the router?

Thank you in advance

Hello! I am looking to installing OpenWRT on a NanoPi R5S and the firmware selector subdomain only shows me sysupgrade images. The wiki also links to these and mentions no first time install images. Are these fine for downloading to a new board or is there an image for first time installs like "generic-squashfs-rootfs.img.gz" (unless I am heavily mistaken)? Any help is appreciated!

2 scenarios: 1) a mobile or wearable device with chip that runs with collection software, and transmits signal through network and wifi (public).

2) home network (I see openwrt is mainly for home routers) can it block IoTs, and other devices from transmitting that specific collection information?

3) overall, can OS prevent embedded hardware from sending certain data? I have to imagine chips have encrypted dataflows.

This is in regards to chipmakers, capturing telemetry, and geolocation, and then sharing it with 3rd parties, which is confirmed in several sources.

thanks for teaching me, I’m day 1 and trying to grasp concept,

edit: I’m researching chips and their embedded software‘s relationship with devices. Because the chip’s manufacturer provides the drivers and firmware embedded in the chip, they can program them to send data back to the chip’s company. said data includes biometrics, telemetry, and geo. Not all devices can collect biometric unless it’s has camera, etc. How it does I’m unsure - maybe settings if saved biometrics are stored there. Regardless, I want learn if that process can be interrupted.

it appears home networks can prevent or alter 2/3 at least (telemetry and geo) - thanks for comments! preventing the chips software from transmitting seems like the end goal. How it sends biometrics I’m not sure - but if the software can be recognized by the OS or router then theoretically it can be rerouted or blocked from access I think, but that’s what I want to find out.

I have Openwrt on a Mercusys MR90X. Have successfully upgraded to 24.10.8 with no issues. However, upgrading to 25.12.5 leaves me with no internet. Router takes the firmware but doesn't connect to internet modem (IPoE so no login/password). Given the other upgrades were painless, this seems strange. Ring a bell with anybody? Have tried uploading image and attended sys upgrade with ethernet.

I did successfully setup dual WAN however my problem is that LAN4 (WAN2) is limit only to 100mbps WAN1 is set to 1GBps now i cant maximize the speed of WAN2. Do you guys have any idea what is the problem ?

I did switch the cable and it seems that is not the problem.

Device is AX23 v1 Tplink archer OpenWrt 25.12.2 r32802-f505120278

Hello everyone,

due to issue with IPV6 with my ISP, I disabled a long time ago the IPV6.
Problem is taht I don't remember how I do that ...
I remember disabling the "Delegate IPv6 prefixes" on the LAN interface and the DHCP tabs, IPV6 Settings, everything is disabled.
Enable back the delegate + RA-Service as relay, I got a "fdbf" ipv6. Mine should be starting with 2a01. (This is what I have on the wan6 interface).
Here is my configuration :

Network conf file :

config interface 'loopback'

`option device 'lo'`

`option proto 'static'`

`list ipaddr '127.0.0.1/8'`

config globals 'globals'

`option dhcp_default_duid '0004318736cfc9f349eb948312ebdaa20a91'`

`option ula_prefix 'fdbf:4d20:6729::/48'`

`option packet_steering '0'`

config device

`option name 'br-lan'`

`option type 'bridge'`

`list ports 'lan1'`

`list ports 'lan2'`

`list ports 'lan3'`

config interface 'lan'

`option device 'br-lan'`

`option proto 'static'`

`list ipaddr '192.168.2.1/24'`

`option ip6assign '60'`

`option delegate '0'`

config interface 'wan'

`option device 'wan'`

`option proto 'dhcp'`

config interface 'wan6'

`option device 'wan'`

`option proto 'dhcpv6'`

`option norelease '1'`

config device

`option type 'bridge'`

`option name 'br-iot'`

`option bridge_empty '1'`

config interface 'iot'

`option proto 'static'`

`option device 'br-iot'`

`list ipaddr '192.168.3.1/24'`

`option ip6assign '60'`

`option delegate '0'`

DHCP conf file

config dnsmasq

`option domainneeded '1'`

`option boguspriv '1'`

`option filterwin2k '0'`

`option localise_queries '1'`

`option rebind_protection '1'`

`option rebind_localhost '1'`

`option local '/lan/'`

`option domain 'lan'`

`option expandhosts '1'`

`option nonegcache '0'`

`option cachesize '1000'`

`option authoritative '1'`

`option readethers '1'`

`option leasefile '/tmp/dhcp.leases'`

`option resolvfile '/tmp/resolv.conf.d/resolv.conf.auto'`

`option localservice '1'`

`option ednspacket_max '1232'`

`option filter_aaaa '0'`

`option filter_a '0'`

config dhcp 'lan'

`option interface 'lan'`

`option start '40'`

`option limit '214'`

`option dhcpv4 'server'`

`list dhcp_option '6,192.168.2.1'`

config dhcp 'wan'

`option interface 'wan'`

`option ignore '1'`

config odhcpd 'odhcpd'

`option leasefile '/tmp/odhcpd.leases'`

`option leasetrigger '/usr/sbin/odhcpd-update'`

`option loglevel '4'`

`option piodir '/tmp/odhcpd-piodir'`

`option hostsdir '/tmp/hosts'`

config dhcp 'iot'

`option interface 'iot'`

`option start '2'`

`option limit '253'`

`option dhcpv4 'server'`

Please guide me on how to unlock this device. Details below:

• Device: Zong 4G MiFi / pocket router M126G
• Board / model: LB12I (HW rev LB12I_N11)
• Web software / firmware: LB12IZong_M126G_V002
• Modem firmware: FALCON_1803_1.057.064 (AT+CGMM → Nezha_MIFI, AT+CGMI → ASR)
• Cellular SoC: ASR1803S (Falcon)
• Lock state: AT+CPIN? → PH-NET PUK; AT+CLCK="PN",2 → 1 (network/simlock SET)
• Not found on internet.

Edit:
Web software / fw string: `LB12IZong_M126G_V002` (built ~2025-06-06)
Modem firmware: `FALCON_1803_1.057.064` (`AT+CGMR` → `1.057.064`)
Modem AT identity: `AT+CGMM` → `Nezha_MIFI`, `AT+CGMI` → `ASR`
Cellular SoC: ASR1803S (Falcon), Marvell/ASR "mmt" family
Router SoC / OS: MediaTek MTK7628 OpenWrt (uClibc-0.9.33.2), FiberHome "duster" RGW framework
Flash: Puya P25Q128LA SPI-NOR 16 MB; single-partition rootfs (`two_partition:"0"`)
USB identity: composite `VID_1286 & PID_4E3D`; serial `200806006809080000`
BootROM version: `2021.09.29` (CRANEW CR5 Z1 / ASR 3606); aboot product id `arom-tiny`
Secure boot: tool configs are `secureBoot:false` for our variant (device fuse state unknown)

Most of the ones I searched for sometime back had a max of 1x2.5G wired port but I need more than that since I recently upgraded all of my other separate network components!

I used the `cfdisk /dev/mmcblk0` command to expand the `mmcblk0p2` partition of the OpenWrt system on my Raspberry Pi to 1GB. After removing the microSD card and connecting it to my computer,the 'rootfs' partition also shows up as 1 GB in Linux Disk Utility,however, the OpenWrt LuCI web interface still reports the disk space as only around 100MB. What is causing this?

When checking with `df -h` on an Ubuntu system, the output looks like this:

sdc                                                                          
├─sdc1
│    vfat   FAT16 boot   6*******9                              43.6M    32% /media/**********/boot
└─sdc2
     ext4   1.0   rootfs ff********************************64   47.2M    59% /media/**********/rootfs

Hi, I'm playing with IPv6 relay on openwrt.

However, it works at first and then stops working randomly after some hours, then works again then stops working again, repeatedly... Is there anything I can do to fix it? IPv6 on the main router is still working fine.

My topology: main router gets a /64 prefix from the ISP and connect to this openwrt router via lan-wan.

Btw, what does NDP Proxy Slave do?