OpenWrt
OpenWrt: Embedded operating system based on Linux secure by default
Open Source Router Firmware
Showing 4 of 4
OPNsense
OPNsense is a FreeBSD-based open-source firewall and routing platform, forked from pfSense. It provides a web-based interface for stateful firewall rules, VPN (WireGuard, OpenVPN, IPsec), traffic shaping, intrusion detection via Suricata, and a plugin system.
No matches for those filters.
Your router sees every device and every connection in your home, and stock firmware is often closed, rarely updated, and quietly chatty. Open-source firmware replaces it with code you can inspect, security you control, and features the manufacturer never shipped. These are the trusted options.
Why replace the stock firmware
Manufacturer firmware is closed source, frequently goes years without security updates, and sometimes phones home or carries known holes you cannot patch. Because the router is the gateway for your whole network, that is the worst place for unauditable, unmaintained code. Open firmware hands you control of updates, logging, and what the router is allowed to do.
What to look for
Active development with timely security updates, support for your specific hardware (check the list first), the features you actually need such as encrypted DNS, a VPN client, and VLANs, and a community you can lean on for setup. pfSense suits dedicated firewall hardware, while OpenWrt and LibreCMC cover many consumer routers.
A word of caution
Flashing firmware carries a small risk of bricking the device, so confirm your exact model is supported and follow the project’s guide step by step. Done carefully, it is one of the highest-leverage privacy upgrades available, since it protects every device on the network at the same time.
Frequently asked
- Will it work on my router?
- Only if your exact model is supported, so check the project's compatibility list before anything else. OpenWrt and LibreCMC cover a wide range of consumer routers; pfSense targets dedicated firewall hardware or a spare PC.
- Can I brick my router?
- There is a small risk during flashing, which is why you confirm your model is supported and follow the official guide closely. Done carefully, it is a well-trodden process with plenty of community help.
- What do I actually gain?
- Code you can inspect, security updates the manufacturer stopped shipping, and control over logging, DNS, and VPN at the network level. Because it sits on the gateway, it protects every device in your home at once.