Optimized build for the TP-Link C2600 / Netgear R7x00 / Linksys EA8500 / Zyxel Armor Z2

The glibc version is slightly faster but incompatible with upstream packages. So unless everything you need is in this build then use non-glibc (musl) version.

1 Like

Are the packages preinstalled for L2TP connections?

Short answer, no.

Nice! Thanks for building for R7800!

Do you have any plans to implement Fast-Path in your builds? I have a WDR4900.

See here:


It's coming.

1 Like

@escalade FYI: https://taczanowski.net/strongswan-ipsec-on-lede-openwrt-with-fast-classifier-and-shortcut-fe-modules/

I believe that's specific to the Qualcomm fastpath.

Correct. I was thinking, maybe that's the reason why it is not in your build: problems with IPSEC/OpenVPN.

I'd rather use something supported by the upstream kernel.

Ok, understood. I will try to incorporate the mod by quarky to SFE, that provides fast-path-support for an IPSEC/OpenVPN tunnel, in a new firmware.

Hi there. I installed the firmware this morning. Wireless is working OK, but LAN speed is only set to 100Mbps. With stock firmware I got 1Gbps speed. Any suggestions on why this is? My networkcard is a Killer2400, so more than capable of getting 1Gbps Lan speed.

I'm getting gigabit no problem here.

Solved the problem. Replaced the cable and voilà :slight_smile:

Hi Escalade!

first of all i love your builds and i have been using them on my wndr3700 and wndr3800.
now i have a tplink c2600 and want to use your new build.
in your previous builds you had pushbullet notifications on vpn login.
i really liked that option is there an easy way voor a noob like me to enable that option again.

thnx for your great builds!

greats luis

Thanks for the great work.
So if I want to build this for my own router (Youku L1), I can just clone your source and build it for my router's profile/target?


Here's the ip-up script, which you need to enable in OpenVPN/strongSwan.

$ cat ipup.sh 

# Is push enabled?
[ $(uci get arokh.settings.push) = "1" ] || exit 0

push() {
  API=$(uci get arokh.settings.push_api)
  if [ ! -z $API ]; then
    curl -k -u $API: https://api.pushbullet.com/v2/pushes -d type=note -d title="OpenWrt" -d body="$MSG" > /dev/null 2>&1
    echo "Set your API key in /etc/config/arokh"

if [ ! -z $PLUTO_PEER ]; then
  if [ $PLUTO_VERB = "up-client" ]; then
    push "IPsec user $PLUTO_PEER_ID connected from $PLUTO_PEER."
  push "OpenVPN client $X509_0_CN connected from $trusted_ip."

Might need to be adapted to use wget as I don't think curl is included in the current build.


Yes, just start with one of the configs from profiles/.

Is there a mroe step by step guide on how to get VPN to work with the latest build for the archer c2600? I read through my vpn's instructions as well as what is listed here and am unable to figure it out, I am trying to configure privateVPN.com to work. Thank you in advance for your help.

This build ships a VPN server. Client connections to external services are out of the scope of this thread.

Greetings escalade and all,

I am utilizing escalade optimized build on my TP-Link C2600 router. Everything is running great, and I am beyond happy - I want to thank escalade very much for your contributions to the community!

My question is this (may sound dumb): can we do a FULL system upgrade, including a kernel upgrade? and if you wouldn't mind, what process do you use personally to upgrade (IF that is even suggested)?

I have hesitated to do any upgrading of the system so far, for fear I could lose configs, or have shit break during the upgrade process. I am curious your stance on system upgrades of your optimized builds.

Running opkg list-upgradable it shows 210 packages that have updates:

OpenWrt:~# opkg list-upgradable | wc -l

I am finding that the kernel version that got installed (4.9.77) is old enough that I cannot use any of the kernel modules on the opkg current servers.

OpenWrt:~#  opkg list-installed | grep -i kernel
kernel - 4.9.77-1-1f3a37c5d5f925b599635bd2260e7a17

Most, if not all current opkg packages show they require different kernel version (4.9.91 at this time), so if I try to install a simple kernel module, for example: kmod-rt2x00-usb
The errors are similar to this:

OpenWrt:~# opkg install kmod-rt2800-usb kmod-rt2x00-usb
Installing kmod-rt2800-usb (4.9.91+2017-11-01-4) to root...
Downloading http://downloads.lede-project.org/snapshots/targets/ipq806x/generic/packages/kmod-rt2800-usb_4.9.91%2b2017-11-01-4_arm_cortex-a15_neon-vfpv4.ipk
Installing kmod-rt2x00-usb (4.9.91+2017-11-01-4) to root...
Downloading http://downloads.lede-project.org/snapshots/targets/ipq806x/generic/packages/kmod-rt2x00-usb_4.9.91%2b2017-11-01-4_arm_cortex-a15_neon-vfpv4.ipk
Configuring kmod-rt2x00-usb.
Collected errors:
 * satisfy_dependencies_for: Cannot satisfy the following dependencies for kmod-rt2800-usb:
 * 	kernel (= 4.9.91-1-b99371c4cc80dcfdaaaddd5995edca4e) * 	kernel (= 4.9.91-1-b99371c4cc80dcfdaaaddd5995edca4e) * 
 * opkg_install_cmd: Cannot install package kmod-rt2800-usb.

As a way around upgrading, I could see it possible to point opkg at servers that have packages for the kernel the original optimized build runs (in this case/my case 4.9.77), I just have yet to locate said server.
This is my current opkg config:

OpenWrt:~# cat /etc/opkg/distfeeds.conf 
src/gz openwrt_core http://downloads.lede-project.org/snapshots/targets/ipq806x/generic/packages
src/gz openwrt_base http://downloads.lede-project.org/snapshots/packages/arm_cortex-a15_neon-vfpv4/base
src/gz openwrt_luci http://downloads.lede-project.org/snapshots/packages/arm_cortex-a15_neon-vfpv4/luci
src/gz openwrt_packages http://downloads.lede-project.org/snapshots/packages/arm_cortex-a15_neon-vfpv4/packages
src/gz openwrt_routing http://downloads.lede-project.org/snapshots/packages/arm_cortex-a15_neon-vfpv4/routing
src/gz openwrt_telephony http://downloads.lede-project.org/snapshots/packages/arm_cortex-a15_neon-vfpv4/telephony

Does anyone else have any input here for which opkg servers to use, or do you just flat-out run a full system upgrade, and continue to utilize the snapshot opkg servers?

Thank you everyone.