# Cloud/remote management possible? **URL:** \ **Category:** Installing and Using OpenWrt\ **Created:** [November 10, 2021, 12:11pm UTC](https://forum.openwrt.org/t/cloud-remote-management-possible/111505 "2021-11-10T12:11:00Z")\ **Posts on this page:** 20\ **Page:** 1
**Author:** ![Maxburn](https://forum.openwrt.org/letter_avatar/maxburn/32/5_5575768a8748004e209b776fc1b2916d.png) [@Maxburn](https://forum.openwrt.org/u/Maxburn)\ **Post date:** [November 10, 2021, 12:11pm UTC](https://forum.openwrt.org/t/cloud-remote-management-possible/111505/1 "2021-11-10T12:11:00Z")
If I won't be able to remotely access the WAN interface of the router is there some sort of remote management solution for OpenWRT? Something that would allow me to see the router UI and manage it through a cloud interface similar to Peplink InControl, Ubiquiti UISP, Cradlepoint NetCloud manager etc, etc. ---
**Author:** ![frollic](https://forum.openwrt.org/user_avatar/forum.openwrt.org/frollic/32/30113_2.png) [@frollic](https://forum.openwrt.org/u/frollic)\ **Post date:** [November 10, 2021, 12:15pm UTC](https://forum.openwrt.org/t/cloud-remote-management-possible/111505/2 "2021-11-10T12:15:10Z")
> [@Maxburn](#): > > solution for DDWRT? ask the people over at DDWRT ? but there probably isn't ... ---
**Author:** ![Maxburn](https://forum.openwrt.org/letter_avatar/maxburn/32/5_5575768a8748004e209b776fc1b2916d.png) [@Maxburn](https://forum.openwrt.org/u/Maxburn)\ **Post date:** [November 10, 2021, 12:31pm UTC](https://forum.openwrt.org/t/cloud-remote-management-possible/111505/3 "2021-11-10T12:31:14Z")
My mistake, I meant OpenWRT but I get them mixed up in my head. ---
**Author:** ![frollic](https://forum.openwrt.org/user_avatar/forum.openwrt.org/frollic/32/30113_2.png) [@frollic](https://forum.openwrt.org/u/frollic)\ **Post date:** [November 10, 2021, 12:34pm UTC](https://forum.openwrt.org/t/cloud-remote-management-possible/111505/4 "2021-11-10T12:34:36Z")
well, unfortunately there still isn't, AFAIK 😑 ---
**Author:** ![markbirss](https://forum.openwrt.org/user_avatar/forum.openwrt.org/markbirss/32/53451_2.png) [@markbirss](https://forum.openwrt.org/u/markbirss)\ **Post date:** [November 10, 2021, 12:52pm UTC](https://forum.openwrt.org/t/cloud-remote-management-possible/111505/5 "2021-11-10T12:52:47Z")
Access your OpenWRT router remotely via Zerotier > **[package: zerotier](https://openwrt.org/packages/pkgdata/zerotier)** > > package: zerotier Install Netdata > **[package: netdata](https://openwrt.org/packages/pkgdata/netdata)** > > package: netdata and view the router statistics on port 19999 ![image](https://forum.openwrt.org/uploads/default/original/3X/e/4/e4c005dae251f131fb479cfc180196a862f8d445.png) ---
**Author:** ![Maxburn](https://forum.openwrt.org/letter_avatar/maxburn/32/5_5575768a8748004e209b776fc1b2916d.png) [@Maxburn](https://forum.openwrt.org/u/Maxburn)\ **Post date:** [November 10, 2021, 1:08pm UTC](https://forum.openwrt.org/t/cloud-remote-management-possible/111505/6 "2021-11-10T13:08:40Z")
Zeortier does look interesting. I'm also wondering about just doing a simple additional OpenVPN connection to a management server I place somewhere. That client config wouldn't have any routing at all, I'd just reach the router GUI via the virtual IP from the management server. I can run multiple OpenVPN client connections on OpenWRT right? I'm already familiar with OpenVPN and when you have a hammer everything looks like a nail. ---
**Author:** ![lleachii](https://forum.openwrt.org/letter_avatar/lleachii/32/5_5575768a8748004e209b776fc1b2916d.png) [@lleachii](https://forum.openwrt.org/u/lleachii)\ **Post date:** [November 10, 2021, 4:54pm UTC](https://forum.openwrt.org/t/cloud-remote-management-possible/111505/7 "2021-11-10T16:54:04Z")
> [@frollic](#): > > well, unfortunately there still isn't, AFAIK > [@Maxburn](#): > > If I won't be able to remotely access the WAN interface of the router Huh, of course you can: - SSH (use keys and disable password-based login for safety) - Wireguard - OpenVPN - any other VPN - (now that LuCI is HTTPS in version 21, a strong password is now viable, but still could be brute forced) - I don't advise this Unless you meant that you ISP doesn't give you a Public IP...then you'd have to setup the VPN at a 3rd location and connect thru it. ---
**Author:** ![Maxburn](https://forum.openwrt.org/letter_avatar/maxburn/32/5_5575768a8748004e209b776fc1b2916d.png) [@Maxburn](https://forum.openwrt.org/u/Maxburn)\ **Post date:** [November 10, 2021, 5:09pm UTC](https://forum.openwrt.org/t/cloud-remote-management-possible/111505/8 "2021-11-10T17:09:00Z")
> [@lleachii](#): > > Unless you meant that you ISP doesn't give you a Public IP...then you'd have to setup the VPN at a 3rd location and connect thru it. Precisely that. We already use OpenVPN for connectivity but I want a management interface as well. As far as I can tell that can just be another OpenVPN connection. It's just nice when there's something ready to go like Peplink InControl, Ubiquiti UISP, Cradlepoint NetCloud manager. ---
**Author:** ![lleachii](https://forum.openwrt.org/letter_avatar/lleachii/32/5_5575768a8748004e209b776fc1b2916d.png) [@lleachii](https://forum.openwrt.org/u/lleachii)\ **Post date:** [November 10, 2021, 5:22pm UTC](https://forum.openwrt.org/t/cloud-remote-management-possible/111505/9 "2021-11-10T17:22:04Z")
> [@Maxburn](#): > > We already use OpenVPN for connectivity but I want a management interface as well. Well, wouldn't using one of the above listed methods thru the VPN work? If not, make a second instance for the management. ---
**Author:** ![frollic](https://forum.openwrt.org/user_avatar/forum.openwrt.org/frollic/32/30113_2.png) [@frollic](https://forum.openwrt.org/u/frollic)\ **Post date:** [November 10, 2021, 5:44pm UTC](https://forum.openwrt.org/t/cloud-remote-management-possible/111505/10 "2021-11-10T17:44:00Z")
That's pretty far from the "cloud" control OP was asking about, at least to my interpretation, but yeah, those solutions work. And _remote_ means logging in to the device(s), or the LAN from outside, then I agree, but that's not really _remote_, IMHO. ---
**Author:** ![Maxburn](https://forum.openwrt.org/letter_avatar/maxburn/32/5_5575768a8748004e209b776fc1b2916d.png) [@Maxburn](https://forum.openwrt.org/u/Maxburn)\ **Post date:** [November 10, 2021, 6:27pm UTC](https://forum.openwrt.org/t/cloud-remote-management-possible/111505/11 "2021-11-10T18:27:10Z")
Exactly, even some low end routers have it like GL.iNet GoodCloud. Those cloud managers are really rather necessary when you are managing say a hundred routers in different buildings in different states. I could hack something together with VPN and I'll look at doing that but it isn't remotely in the same ballpark. ---
**Author:** ![lleachii](https://forum.openwrt.org/letter_avatar/lleachii/32/5_5575768a8748004e209b776fc1b2916d.png) [@lleachii](https://forum.openwrt.org/u/lleachii)\ **Post date:** [November 10, 2021, 6:27pm UTC](https://forum.openwrt.org/t/cloud-remote-management-possible/111505/12 "2021-11-10T18:27:16Z")
> [@frollic](#): > > That's pretty far from the "cloud" control OP was asking about, at least to my interpretation, but yeah, those solutions work. Cucumber Tony: [http://www.ct-networks.io/](http://www.ct-networks.io/) Or OpenWISP 7 project: [http://openwisp.org/](http://openwisp.org/) There's others's too. Since the OP said we won't be able [to reach the device]...I'm not really sure how a management solution fixes that per se...but maybe you can elaborate for the OP. ---
**Author:** ![psherman](https://forum.openwrt.org/letter_avatar/psherman/32/5_5575768a8748004e209b776fc1b2916d.png) [@psherman](https://forum.openwrt.org/u/psherman)\ **Post date:** [November 10, 2021, 6:40pm UTC](https://forum.openwrt.org/t/cloud-remote-management-possible/111505/13 "2021-11-10T18:40:50Z")
> [@Maxburn](#): > > Those cloud managers are really rather necessary when you are managing say a hundred routers in different buildings in different states While I don't mean to drive you away from OpenWrt or open source setups, a setup of your size/scale may benefit from a commercial solution. The products on the market (both hardware and software) that are designed for cloud management of large fleets will often provide a better experience than you'll get by cobbling together an open source system. I say this in terms of the learning curve (just learn the management environment, not how to build said environment from the ground up), support (likely you'll have some sort of dedicated support avenue, although be aware that some companies like Ubiquiti and maybe others don't really have their own tech support -- it is community based, theoretically to save money and make the products cheaper overall), and reliability (if you run a large fleet, you need to know that the system you're deploying is robust for both your own needs and that of your customers). Don't get me wrong, you can go with the open source route, and I'm all for that, too. But consider the scale of your business and the benefits/risks of open source vs commercial products. Investing in the right hardware/software from the get-go will be more cost effective in the long run, even if it is more expensive up front. ---
**Author:** ![Maxburn](https://forum.openwrt.org/letter_avatar/maxburn/32/5_5575768a8748004e209b776fc1b2916d.png) [@Maxburn](https://forum.openwrt.org/u/Maxburn)\ **Post date:** [November 10, 2021, 6:48pm UTC](https://forum.openwrt.org/t/cloud-remote-management-possible/111505/14 "2021-11-10T18:48:00Z")
That is solid advice. I built our VPN hosting from OpenVPN community edition and yes I see what you are talking about regarding open source support. The thing is we are having supply chain problems. I've got over a hundred Ubiquiti deployed, and UNMS/UISP is working really well for us. BUT we can't get them. So developing a solution for OpenWRT and being fairly flexible on hardware has some attraction to me right now. Giving it a honest look anyway. ---
**Author:** ![Maxburn](https://forum.openwrt.org/letter_avatar/maxburn/32/5_5575768a8748004e209b776fc1b2916d.png) [@Maxburn](https://forum.openwrt.org/u/Maxburn)\ **Post date:** [November 10, 2021, 6:50pm UTC](https://forum.openwrt.org/t/cloud-remote-management-possible/111505/15 "2021-11-10T18:50:29Z")
The router would need to reach out to the management server through the internet. OpenWisp looks interesting at first glance, I'll read more on that. Would very much prefer to self host. ---
**Author:** ![psherman](https://forum.openwrt.org/letter_avatar/psherman/32/5_5575768a8748004e209b776fc1b2916d.png) [@psherman](https://forum.openwrt.org/u/psherman)\ **Post date:** [November 10, 2021, 6:52pm UTC](https://forum.openwrt.org/t/cloud-remote-management-possible/111505/16 "2021-11-10T18:52:51Z")
> [@Maxburn](#): > > The thing is we are having supply chain problems. Fair enough... and yeah, sucks. > [@Maxburn](#): > > So developing a solution for OpenWRT and being fairly flexible on hardware has some attraction to me right now. I see where you are going with this. If you do find an OpenWrt/open source option, I would recommend deploying it on as uniform a hardware fleet as you possibly can. You'll want firmware updates, settings, and all other feature of each device to be as consistent as possible so that you have the ability to test and then roll out updates easily (and with confidence) and also physically replace any problematic units with identical devices to make management/configuration/provisioning as easy as possible. Doing this on random bits of hardware scattered around your fleet could be a recipe for disaster. The need to acquire a fleet of uniform hardware may, unfortunately, lead you back to the whole supply chain issue. ---
**Author:** ![Tomer](https://forum.openwrt.org/letter_avatar/tomer/32/5_5575768a8748004e209b776fc1b2916d.png) [@Tomer](https://forum.openwrt.org/u/Tomer)\ **Post date:** [November 10, 2021, 7:59pm UTC](https://forum.openwrt.org/t/cloud-remote-management-possible/111505/17 "2021-11-10T19:59:27Z")
I am using two different methods to access my router: 1. OpenVPN 2 FWknop with ssh tunneling Both are working flawlessly and are pretty straight forward to setup (naturally you will also need to know the ip so you will need dynamic dns service such as no-ip/duckdns/etc) . ---
**Author:** ![Maxburn](https://forum.openwrt.org/letter_avatar/maxburn/32/5_5575768a8748004e209b776fc1b2916d.png) [@Maxburn](https://forum.openwrt.org/u/Maxburn)\ **Post date:** [November 10, 2021, 8:08pm UTC](https://forum.openwrt.org/t/cloud-remote-management-possible/111505/18 "2021-11-10T20:08:52Z")
> [@Tomer](#): > > I am using two different methods to access my router: These methods don't work when the WAN port on the router you want to manage is not on a public IP. What is necessary here is some management engine on the router needs to reach out and establish a connection to a management server on the internet. You then can reach back through that connection to do things in the router. ---
**Author:** ![reinerotto](https://forum.openwrt.org/letter_avatar/reinerotto/32/5_5575768a8748004e209b776fc1b2916d.png) [@reinerotto](https://forum.openwrt.org/u/reinerotto)\ **Post date:** [November 10, 2021, 8:20pm UTC](https://forum.openwrt.org/t/cloud-remote-management-possible/111505/19 "2021-11-10T20:20:47Z")
Just completed custom firmware for a perspective, large fleet of openwrt devices (\>1000), used in IoT. As a commercial project, also including certain aspects of "Remote Management", i.e. remote (re-)configuration, FW-upgrade OTA, certain system statistics. I think, all the open source tools are available, i.e. collectd for simple statistics, or zabbix, for much more covenient usage. And can be tailored to the usage case. My client even refused to use the org management system from the openwrt-compatible device, because not being reliable enough. Actually using just one openwrt device type, but this will change. Having different custom openwrt-firmware images/routers to manage this way, is not a big deal, in case still within similar capabilities. Of course, not so flexible like the UBT stuff, to be available for a vast variety of devices, but that might not be required, anyway. OpenWISP for hotspot systems seems to be far too oversized, for my taste. I prefere aVPN-based, custom system, which can drop a lot of security features, required otherwise. I.e. via VPN, no problem to use simple mqtt or even http for management. A general remark, anyway: I think, it is a bit far fetched, for a commercial application, like in your case, to ask for a complete open-source solution, ready to use, free of charge 🙂 ---
**Author:** ![Maxburn](https://forum.openwrt.org/letter_avatar/maxburn/32/5_5575768a8748004e209b776fc1b2916d.png) [@Maxburn](https://forum.openwrt.org/u/Maxburn)\ **Post date:** [November 10, 2021, 8:39pm UTC](https://forum.openwrt.org/t/cloud-remote-management-possible/111505/20 "2021-11-10T20:39:49Z")
You mention zabbix but something like I'm discussing here is far fetched? Does not compute, zabbix is amazing and I can't believe it's available free. On the other hand we pay for the management systems I mentioned in OP, the ones that do charge anyway as UISP is free. CT-net doesn't sound like our interests are aligned, for example we don't want WiFi on these so all that's lost on us. Mostly I'm just feeling out what the potential directions we could go here, this thread has been educational. [Next page](https://forum.openwrt.org/t/cloud-remote-management-possible/111505.md?page=2)