I'm shopping a router and from what I read in the reviews, ALL mid-end family routers (those between $40 and $100) that I see need a cloud account to access the management page. I'm wondering if there is anything that does not need a cloud account? Thanks~~
https://openwrt.org/supported_devices
You might find / inquire about specific devices at the OpenWRT subreddit:
https://old.reddit.com/r/openwrt/
The Turris Omnia is priced above your preferred range, but is effectively a small server and has excellent capabilities. It runs a specifically-tuned and live-upgradable version of OpenWRT:
I use Mikrotik hAP2 (~£60/$80) - if you are comfortable with that sort of thing, otherwise I guess anything that supports OpenWRT as others have said.
Have you got examples of ones that need a cloud account? I'm intrigued now
It sucks that companies feel the need to cloudify everything.
For The router get a mikrotik or ubiquiti. Then you can run small- business APs from Ubiquiti and TP link for example. Or convert an older router into AP with open source firmware .
You don't have to buy from them the hardware.
I used to use OpenWRT (which is also a nice second option), but the robustness and flexibility of mikrotik is fantastic.
I buy them at Goodwill for $5-10 whenever I see them there, which is fairly often.
They have two main features I like:
- separate main and guest networks. I put all my non-computer stuff like phone, TV, Roku, Tivo, etc on the guest network. There is a setting to isloate the guest network from the main network on separate vlans.
- they have a QOS setting for uploads (I only have 1Mbit up), so when I do online backups with HashBackup (I'm the author), the router will use the full upload bandwidth if there are no other connections uploading, but if there are other connections needing to upload, the router splits the capacity between the active connections. Without QOS, it was impossible to have an interactive ssh session during a bulk upload. With QOS it works fine.
You can buy these on eBay for $15-25. Get one with free shipping so that if you have trouble and have to return it (unlikely with a high feedback seller), you don't have to pay for shipping.
See e.g. https://old.reddit.com/r/OPNsenseFirewall/comments/lemj0r/ha...
1. EdgeRouter X (ER-X) or EdgeRouter Lite (ERLite-3).
2. more userfriendly UniFi Security Gateway (USG) with controller (UCK) or UniFi Dream Machine (UDM)
- it propose creating cloud account, but __do not__ require it.
3. use devices capable to run OpenWRT or buy some hardware like Supermicro Embedded Solutions (later I can share models list) to run pfSense/OPNSense or VyOS.
4. other MikroTik soulutions (but I don't like them so my knowledge is not up to date; I don't know which solutions are good for you).
It can segment traffic by people (you record which MAC is who, segment away by theme, etc), host a custom DNS server very well, has nice firewalling features and there s no mandatory cloud account. I ve made a few custom scripts for it, and its linux base is good enough (old kernel a little bit). I paid around 300 USD for it I think, for 2 of them, and it's the best router I ever had, OpenWRT included.
The only thing I miss from openwrt is the custom vlan joining on optic fiber relay you can do with them to bypass your ISP fiber modem and just use an optical to eth converter. But that's not a huge overhead these days. Doubled the speed when the ISP's crappy boxes couldnt cool well enough for 500Mbps 10 years ago :D
The big advantage, for me, of Synology routers, over OpenWRT and its alternatives (I rmb one called Tomato something) is that it's so much clearer and easier to use quickly and climb from there. With OpenWRT in my old memories you were thrown in a discouraging mess that made me struggle a bit to find simple features (but it has them all).
I've visited a lot of homes to help troubleshoot internet connections, and the ones I've converted to this combination have gone silent (much more stable connections/wifi).
https://www.amazon.de/-/en/Router-Supervectoring-Server-Suit...
- Hidden Networks in TP-Link Routers https://news.ycombinator.com/item?id=29641868
- MikroTik RouterOS v7 stable released https://news.ycombinator.com/item?id=29473704
https://www.linksys.com/gb/support-article?articleNum=226218
Aruba Instant On might be possible too, but I am not sure.
However, I already operate OPNSense as my primary router, and all WiFi "routers" on the network act as Access Points and do no routing. OPNSense provides granular control over the network, and offers all the services you would expect in at least a SMB-grade edge device (arguably enterprise), including routing, firewall, DHCP, DNS, IDS/IPS, etc.
Even in AP mode (routing disabled), the new WiFi COTS routers seem to phone home. My guess is a combination of checks for patching and some telemetry. I just block those lookups at the DNS layer for that device, which was effective enough at preventing the traffic. If I have to, I'll block outbound from that device specifically, though I admittedly haven't played around with the after-effects since its sort of the gateway for that specific NIC interface.
Alternatively, build your own out of Turris MOX modules [2].
[0] https://openwrt.org/toh/turris/turris_omnia [1] https://forum.turris.cz/t/turris-omnia-2022/15995 [2] https://www.turris.com/en/mox/overview/
Note -- I didn't realize this when I originally bought mine -- they bundle support in with the starting price, and you have to have 3 months of support minimum, after which you can cancel. So assume you have to pay an extra 60-90 dollars on top of the hardware price.
But then you own a router with open source firmware that you can manage locally.
I would recommend moving up your price-point (if at all possible) and buy something slightly more capable that will last, potentially, longer.
Protectli [0] and Qotom [1] are popular among the OPNsense[2] / PFsense[3] / Untangle[4] firewall distros with respect to small form factor devices.
If all you want is a cheap "router" with a bare bones feature set for Internet edge routing I'd recommend a Ubiquiti EdgeRouter X [5]. At $59 it's the best piece of hardware you're likely to get for the money with total control and less big-brother.
If you can't find one email me at my HN username at counterbrea dot ch. I have a few different unused EdgeRouters I could send you for the cost of shipping.
[0] https://protectli.com/ [1] https://www.qotom.net/product/list-58.html [2] https://opnsense.org/ [3] https://www.pfsense.org/ [4] https://www.untangle.com/ [5] https://store.ui.com/products/edgerouter-x
https://www.thinkpenguin.com/gnu-linux/free-software-wireles...
It uses LibreCMC--a really well supported Libre branch of OpenWRT.
Everything just works, and there are regular updates patching vulnerabilities.
Since 2017 I've run pfSense and love it. Originally started on a fanless x86 machine with good NICs (until it eventually committed suicide), and now run an actual NetGate appliance. The appliance is even nicer to me, since FreeBSD/ARM isn't a likely drive-by target for a 0-day.
No cloud. Real OS, good feature set, regular updates, great performance.
Unfortunately I haven't found an access point I love without cloud accounts. Running Uniquiti APs now. I do like that they hand off devices between each other well, push IoT to 2.4Ghz and real stuff to 5GHz, etc. I'd never run their router exposed to the internet, but.. yeah.
NOTE: this is effectively a thin client PC, so you can try different router/firewalls to pick which works best for you. There are also commercial options that people prefer such as Untangle, Sophos and so on. Sophos even has a free home version.
There are other alternates to HP T730, but you may have to look around.
It should come to around ~$100-$120 depending on luck, since it's eBay.
I just bought a new Netgear router, I’ll be returning it, but it doesn’t require a cloud account.
Outside of Google Nest or Eero I don’t think many require a cloud account unless you want particular features like remote management, etc.
I advocate separating APs and WiFi from router.
You can run it without cloud account if you wish so. You do not loose any very important functionality.
In particular the Cloud Key actually does not require cloud to function, it is actually a webapp running locally that lets you manage your local infrastructure.
The Dream Router falls within your price range but is hard to get ahold of right now: https://eu.store.ui.com/products/dream-router-ea
Should be able to set it up and manage it over the local network via their mobile apps or via browser.
I'd recommend to separate router and wifi AP because this lets you pick the optimal place for the wifi AP regardless of where the internet cable is. Somewhat more costly but likely worth it for anything bigger than a three-room flat.
My setup here is a Cisco ASA 5512x firewall, catalyst 3750GBe poe switch, WLAN2504 controller and several CAP3702 APs. this requires quite a bit of experience to setup, but works very well. the wlan controller and two APs will probably cost about $300. that alone could be used behind your ISP modem if desired. i’ve got gigabit fiber up/down from ATT and use their modem but pass thru the IP to my asa.
Routes 1G, wifi is only 2x2 MIMO though so you won't get "amazing 9999 Gbit wifi) which you'll never get in real life anyways because of airtime congestion.
They have a noob UI, "pro" UI and CLI.
Both UI and CLI has all features (9x%, some features are hidden from gui while in beta).
They are affordable and have a lot of powerful features.
I have been using the "hAP ac" (2.4/5ghz) model for ~5 years now, and some other 2.4ghz model for another 5 years before that. Whenever I need to upgrade, I'll go with them.
It could be the budget options are reducing prices in exchange for the ability to gather data, similar to smartTVs
Do they? Zyxel don't, Huawei don't, Netgear don't, Asus don't etc etc..
Protectli Vault FW4B - 4 Port with OpenBSD and a Ubiquiti AP.
OpenWRT also great option.
Are you sure it's cloud account? All routers need ID and password but usually it's local and only ever stored on router itself.