choose proper router to start

This is my first time using OpenWrt. My goal is to build a secure setup to protect my data. I need to travel a lot for work, and because of that, I need to connect my laptop to the internet in hotels or offices (as well as the companies I need to visit). I am looking for a router to start learning and building my own system (with things like a firewall) to protect my data and myself on the internet. I use Linux.

I had the idea to use this router: TL-WR841N - https://www.tp-link.com/en/home-networking/wifi-router/tl-wr841n/#specifications to do this.

What do you think? Is it the best router for a beginner like me to start with? But I found this article, and I will rephrase this sentence from it: https://hackaday.com/2019/09/12/dissecting-the-tl-wr841n-for-fun-and-profit/ "but unfortunately OpenWRT has dropped support for the newer hardware revisions of the TL-WR841N."

Also I found this page: https://openwrt.org/toh/hwdata/tp-link/tp-link_tl-wr841n_v14 with this advice: "OpenWrt support for this device has ended in 2022."

So, I don't know what router should I pick. What do you suggest? I am looking for something cheaper, less 20 euros.

I did my search and I found this model: https://www.amazon.es/dp/B073TSK26W/ref=asc_df_B073TSK26W - GL.iNet GL-MT3000 - https://openwrt.org/toh/hwdata/gl.inet/gl.inet_gl-mt3000

or this one: https://www.cudy.com/products/x6-2-0#specs - Cudy X6

As you have already discovered, this device is not supported anymore. It's extremely under-resourced and cannot run a modern version of OpenWrt. There is zero value in using this device -- it's so old that it should just be e-wasted.

The MT3000 is a great device -- highly recommended if your usecase is a travel router or a small, inexpensive device to play with.

If you're looking for a home router, you may want to consider something with more ports and a wifi system more suited to the home (rather than travel).

You didn't describe how you will be using this device (home, travel, or just an experimental device for now), nor did you say what internet speeds you need to acomodate and any other services/needs you have (such as VPN inbound or outbound, etc.).

1 Like

The number of LAN ports is not a problem. I will use the router only with a laptop and Wi-Fi devices (my cellphone).

However, due to the price, it might be better to buy a "normal" router because of the number of LAN ports.

The reach of the Wi-Fi signal is not a concern. I will be close to the router, so it's not a big issue.

I plan to use the device for travel, at home, and for learning. This will be my first experience with OpenWRT or similar tools. I want to start learning how to protect myself and apply this knowledge to router configuration.

Regarding services, I've never used a VPN (only in company environment - I never setup all system), so I'm not sure about that. Services like Pi-hole would be nice too. What kind of services do you think a beginner like me would need?

My main goal is to connect more safely to outside networks. I already have a firewall set up on my Ubuntu system. But I want to add an extra layer of security at the router level.

If you're not planning to implement a VPN to secure (encrypt) your traffic the firewall in Ubuntu will provide as much protection as the Openwrt firewall when connecting to a hotel provided internet connection.
To main uses of a travel router are to connect to the hotel internet and then share it with multiple devices & encrypt all the traffic passing through the travel router via a VPN you control.

1 Like

https://openwrt.org/toh/cudy/tr3000

I was reading about VPNs, and wow, amazing! I've changed my mind about them. I'm thinking of using one of these services: NordVPN, ExpressVPN, WireGuard, OpenVPN, or Surfshark.

This "connect to the hotel internet and then share it with multiple devices & encrypt all the traffic passing through the travel router via a VPN you control" specification is also important to me because I will be using this router at home, and I don't have multiple routers.

Based on this decision, what router and service do you suggest?

I prefer the GL.iNet GL-MT3000 over the Cudy TR3000 (AX3000 Travel Router). Look at the Flash and RAM in both devices. Besides that, the GL.iNet GL-MT3000 receives updates and firmware support from the community. It is fully open-source. What do you think? Why did you suggest this router?

https://openwrt.org/toh/hwdata/gl.inet/gl.inet_gl-mt3000

https://openwrt.org/toh/cudy/tr3000

pretty much every router running openwrt can do this.
VPN doesn't really do anything for you here, you should ignore this selling point.

so does the TR3000.

if you're referring to the gl.inet firmware, it's not, they're lying.

in the past, TR3000 was cheaper than MT3000, it's not any more (where I've looked).
the GL3000 have more flash, price was the only reason for buying the TR3000.

A common use case is to set up a VPN server at home (using an OpenWrt router) then VPN back to your house when traveling-- either through a travel router or directly from a phone or laptop. This allows access to files and computers at home as well as making your Internet access encrypted and appearing to be from home to banks, TV streaming services, etc.

pretty much every router running openwrt can do this.
VPN doesn't really do anything for you here, you should ignore this selling point.

What services do you think I should install and use with openwrt?

It is a good suggestion but I don't have this opportunity. Thank you

depends on your needs ... ?

if you want to "dial home", VPN
if you want to block ads on your client, an adblocker
if you want to encrypt your DNS traffic, https-dns-proxy
if you want to share files with your clients, samba or ksmbd
if you want to share a wired printer, cups or p910nd

both routers get the same support from OpenWrt.

GL.iNet GL-MT3000 official firmware isn't open-source.

wireguard is better.

GL.iNet GL-MT3000 official firmware isn't open-source.

What do you suggest to do?

I will not need all these for now but I will in the future:

if you want to block ads on your client, an adblocker
if you want to encrypt your DNS traffic, https-dns-proxy
if you want to share files with your clients, samba or ksmbd

where are their sources? GitHub links?

They are lying right on their homepage.

1 Like

What are you talking about?

Gl.inet, lying through their teeth.

1 Like

So, what are your suggestions?