Thanks for watching@@highgrade81 ! Yup it's definitely pretty apparent, at least in terms of phyiscal form factors, and PCB specs. Otherwise, their user experiences are very different.
While great for the non-techie types as simple to set up router, I would go with the GLInet Flint or Flint2, because I like a web interface and flashable with OpenWRT/GoldenOrb firmware.
@@BillAnt thanks for watching and sharing your opinion. I share the same thoughts. I prefer more configuration options, especially now that I know what many of them mean. This takes me back to when I was younger and in high school and had no clue what some of the most basic router settings were. It’s certainly been awhile since then. Anyway, I prefer OpenWrt as it gives me the most flexibility, though, GLiNet’s UI is nice too. I have yet to really dig into GoldenOrb / Rooter but I have tried it on a Raspberry Pi to help me with a cellular modem project I was working on in another video. It certainly helped and I’d like to make a video on GoldenOrb one day as it’s valuable build oriented for people using cellular modems for internet. How’s your experience been with GoldenOrb?
@@DevOdyssey I agree without points., GLInet's UI is very polished. GoldenOrb is a n OpenWRT mode specifically for routers with either and internal cellular modem or a USB tethered phone, which is my favorite method or going online.
Hey DevOdyssey, really loving your videos. They helped me alot with my projects and u deserved my sub. Just wanted to ask will you be willing to make a video on building a pfsense image from source. Keep up the good work
Thanks for the support @RNGesus-ep6wn! It really means a lot. Happy to help on your projects! Feel free to share with me what they are, I'd be happy to chat about them. So I've been meaning to get into making pfSense videos, even though I prefer OPNsense, there are quite a number of people that use pfSense and since they are very similar, it would only make sense, no pun intended. Now making a custom image of pfSense from source does sound interesting to me. Given its unix, (FreeBSD), I'd imagine building it from source and including additional packages would be similar to when I built OpenWrt from source, so its something I can certainly look into! Appreciate the suggestion. Are there certain packages you'd want in a custom pfSense image from source? Guess I'm really asking, whats your specific use case for building from source?
@@DevOdyssey thanks for replying, Haha yea I am more of an OPNsense person myself compared to pfsense. My motive for building pfsense from source is to add my AI model in it with snort 2.x. I tried building pfsense 2.7.0 multiple times on my own but failed at various steps. So, for the time being I moved with openWRT but would love to go back to pfsense.
@@RNGesus-ep6wn you’re welcome! And great to hear haha! Regardless of preference it’s definitely fun to explore both. Gotcha, sounds interesting. I honestly haven’t used snort that much, so I’m not exactly sure on how you’d incorporate your AI model into it. Are you simply trying to incorporate the rules that your AI output into snort? Does that then really require a custom build of pfSense? Since you mention OpenWrt, are you getting your AI model for snort working in OpenWrt or you’re just simply using that because it’s easier as a stop gap solution? I can’t say I if I’ve ever heard of snort being used on OpenWrt but it would be very much a surprise to me if that’s the case.
I get that there's convenience in having the service built into the device, but $10 a month for the continued VPN service is pretty steep. Most well known services offer two-year plans that come to just over $2 per month.
Thanks for watching @slycordinator. I do agree that relative to many other VPN providers, their cost is expensive. I pay roughly $5-6 for my VPN provider, though that takes into account dollar to euro exchange fees. I'm certainly not an expert at all VPN providers, as I haven't tried out many of them, so I can't say all the reasons that they would justify the cost of $10 dollars a month, other than convenience and experience using their VPN service. I'd imagine it also has to do with economies of scale as they are a startup. A good value test would be to see how well they do against other VPN providers in terms of access to streaming services. As streaming services tend to aggressively block VPN servers, it would be interesting to see if they rotate their location IPs, or perform other means of bypass to allow their VPN users access to streaming streams, i.e. circumvent blocks. That value would be relative to the user to see if it makes it worth 10 dollars a month, but it definitely would make the VPN service worth more than others. When it comes down to price, it should reflect the quality of their VPN, notably usage.
Thanks for watching @ketsiasanon5! You sure can use this if you want to work abroad. They have different electrical adapters available for countries abroad. Would you be able to share your use case with me to ensure it Encrouter will suit your needs? Such as, are you trying to VPN to your home network when abroad? Or just trying to use a VPN in general? Or are you trying to use a VPN while out and about, such as on your phone? With a better understanding of what you want to achieve, I can help you see how well Encrouter will suit your needs.
I have to ask, are YOU that user that prefers an app over a web-browser? I agree that it is for MOST users, but not having a web-server installed on the router is a big no for me. :) Otherwise sounds like a smart business plan. Simplify for the user.
Thanks for watching @marcusjohansson668! Always appreciate hearing from you. Well, if I may be so honest, I _generally_ prefer a web UI. Call me old fashion, but its just what I'm used to. This is not to say that I wouldn't appreciate a mobile app, but with my level of expectation for technical abilities, I'd basically want a mobile app that can do everything a web UI can, but tailored to a great mobile experience. When using mobile apps for other network companies / hardware, I have found myself frustrated, as I'm digging through settings trying to do something I know I'm used to finding easily in a Web UI. While they do have a Web Server here, it seems to have a static page. Clearly, they do have some sort of service that communicates with the app, which from my research, seems to be some sort of Web RPC call written in Go, but without digging further, I can't confirm that. I thought it would be some sort of HTTPS API, but I wasn't able to find that when doing a network probe of it. But like you said, smart business plan, catering to most users (whom may not be as technical or savvy as you nor I), who just want to never leave their phone to be able to intuitively configure their router, from wherever, even if it comes at the cost of doing more advanced networking. This is probably the best way for them to get starter as to grow faster, and then expand their offering as their user base grows.
Hello, I appreciate your kind words. I really need your help due to the place I live in. I have a Mini PC N5095 with OpenWrt installed on it. It has three WAN ports, each connected to a separate internet link, and one LAN port and one Wi-Fi. My request to you is to create a tutorial video for the scenario I'm about to describe, so that both I and others facing the same issue can benefit from it. I would like to set up OpenVPN on each of the WAN ports and configure load balancing and failover between these three OpenVPN connections, so that I can utilize the combined bandwidth of these three connections on the LAN and Wi-Fi. Additionally, I want the scenario to include a kill switch, DNS leak protection, and an ad blocker. Thank you in advance for your assistance.
Thanks for watching @javida8085! While this video isn't related to OpenWrt, I can certainly offer my guidance. I generally try to create tutorials that can apply to the most people as possible, which can then be used as building blocks to create even larger deployments and setups. That being said, I haven't done any videos on OpenVPN, which I plan to do soon, but I will be as simply as setting up a OpenVPN Server on a router, setting a client on the router to access a VPN provider, and probably a site to site configuration as well. Nonetheless, in regards to your setup, when you say OpenVPN on each WAN port, I'm not sure exactly what you mean. You'd only have to install OpenVPN once, and have it listen on three different interfaces if you want each WAN port to be able receive an OpenVPN connection from a client. Configuring load balancing and failover would involves using mwan3 package in OpenWrt, which you can refer to here. openwrt.org/docs/guide-user/network/wan/multiwan/mwan3 If you are trying to set up 3 OpenVPN clients, which is seems like you'd want to, then you'd need to direct each OpenVPN interfaces to use a specific WAN interface. This will likely not work the way you want it to without the below (MultiPath TCP), because you can't really use 3 OpenVPN interfaces to improve its failover / load balancing, you'd do that on the WAN side. If the WAN fails, then the OpenVPN fails, so it doesn't matter. The OpenVPN connection would use the new WAN connection when the failover occurs (once configured). If you are trying to use the combined bandwidth of these three WAN interfaces, that isnt load-balancing or failover. That would be something like MultiPathTCP, which you can look into here, though I'd be cautious about this setup. If you have enough bandwidth in one of your WANs then I would not try to do multipath TCP unless you really want to try it out. openwrt.org/docs/guide-user/network/mptcp This setup with multipath TCP and OpenVPN might not work the same way you'd expect it to, so I'd do some reading on it first before trying to implement it. In terms of a Kill Switch, if you're taking a physical kill switch, that will depend on what hardware you are using, and if it has a physical switch available to use. I'd look at the GL.iNet routers that do have VPN kill switches on them, or more so on/off switches, as an example. For a virtual kill switch, you'd simply shut off the OpenVPN interfaces. Lastly DNS leak protection is simply a matter of setting the DNS server on the WAN interfaces to use a DNS server you trust, and for ad blocker, simply install a AdGuard package in OpenWrt. openwrt.org/docs/guide-user/services/dns/adguard-home This should cover most of what you want to do. But if you want to explain more on your OpenVPN setup, feel free to share. Otherwise I can only offer the above guidance.
Thanks for watching @pappuplumber6313! So while this video doesn’t cover OpenWrt, I’ll offer my best guidance. I’m not sure what you are trying to achieve, when you refer to sessions it makes me think of “sticky sessions”, something usually advertised as a proxy feature. In this sense I don’t think you’ll find a package on OpenWrt for this. Where is your Netflix session originating from? When using a VPN your sessions should continue to use the VPN unless you change it. If you can share your use case, I can provide a more guidance that could help you achieve your end goal.
Thanks for watching @Lotoss25! Thats what I noticed as well. It definitely would be OpenWrt ready, given the specs from the AX1800 and the ENC-AX1800A are identical. Getting OpenWrt onto it, well that I'm not sure how to do, given there is not place in the interface to upload a firmware image. However, if you can find a way to uboot, and get closer to the hardware to flash a OpenWrt image directly onto the the NOR / NAND, then you can probably get it to boot OpenWrt no problem. I'm not too familiar with this process, as it gets more into hardware than I'm familiar with, but I'd imagine its possible. As for the VPN ipk, their Encrouter OS seems to have their VPN solution baked in, and even though it uses WireGuard, I don't think you can get their VPN offering outside of their OS, given the additional work they've done to get VPNs to work seamlessly, like key exchange (which is outside of the WireGuard protocol).
@@BillAnt that’s true, and a good point. I’m not well versed here so I’m not sure where to start and try to force it to load another OS. I assume I’d have to take it apart and get at the hardware level. It’s a bit beyond my skill level but would be cool to see. If someone has done this for GL.iNet’s Flint, it would be a great reference to give it a shot and see if it can be done.
Thanks for watching @Mihai1174! That’s correct it will not work with ExpressVPN. This solution brings together hardware and software provided by the same company. It does not open up the use of different VPN providers. However with that, you get extreme simplicity of use. It all depends on what you’re looking for as a consumer.
![VENEZUELA vs. ARGENTINA [1-1] | RESUMEN | ELIMINATORIAS SUDAMERICANAS | FECHA 9](http://i.ytimg.com/vi/SJfoPdeOPCQ/mqdefault.jpg)
What's your take on the Encrouter? Would you replace your home router with one?
Rebrand of GL-AX1800
Thanks for watching@@highgrade81 ! Yup it's definitely pretty apparent, at least in terms of phyiscal form factors, and PCB specs. Otherwise, their user experiences are very different.
While great for the non-techie types as simple to set up router, I would go with the GLInet Flint or Flint2, because I like a web interface and flashable with OpenWRT/GoldenOrb firmware.
@@BillAnt thanks for watching and sharing your opinion. I share the same thoughts. I prefer more configuration options, especially now that I know what many of them mean. This takes me back to when I was younger and in high school and had no clue what some of the most basic router settings were. It’s certainly been awhile since then.
Anyway, I prefer OpenWrt as it gives me the most flexibility, though, GLiNet’s UI is nice too. I have yet to really dig into GoldenOrb / Rooter but I have tried it on a Raspberry Pi to help me with a cellular modem project I was working on in another video. It certainly helped and I’d like to make a video on GoldenOrb one day as it’s valuable build oriented for people using cellular modems for internet. How’s your experience been with GoldenOrb?
@@DevOdyssey I agree without points., GLInet's UI is very polished. GoldenOrb is a n OpenWRT mode specifically for routers with either and internal cellular modem or a USB tethered phone, which is my favorite method or going online.
Hey DevOdyssey, really loving your videos. They helped me alot with my projects and u deserved my sub.
Just wanted to ask will you be willing to make a video on building a pfsense image from source.
Keep up the good work
Thanks for the support @RNGesus-ep6wn! It really means a lot.
Happy to help on your projects! Feel free to share with me what they are, I'd be happy to chat about them.
So I've been meaning to get into making pfSense videos, even though I prefer OPNsense, there are quite a number of people that use pfSense and since they are very similar, it would only make sense, no pun intended.
Now making a custom image of pfSense from source does sound interesting to me. Given its unix, (FreeBSD), I'd imagine building it from source and including additional packages would be similar to when I built OpenWrt from source, so its something I can certainly look into! Appreciate the suggestion.
Are there certain packages you'd want in a custom pfSense image from source? Guess I'm really asking, whats your specific use case for building from source?
@@DevOdyssey thanks for replying, Haha yea I am more of an OPNsense person myself compared to pfsense.
My motive for building pfsense from source is to add my AI model in it with snort 2.x. I tried building pfsense 2.7.0 multiple times on my own but failed at various steps. So, for the time being I moved with openWRT but would love to go back to pfsense.
**vietnam flashbacks**
@@RNGesus-ep6wn you’re welcome!
And great to hear haha! Regardless of preference it’s definitely fun to explore both.
Gotcha, sounds interesting. I honestly haven’t used snort that much, so I’m not exactly sure on how you’d incorporate your AI model into it. Are you simply trying to incorporate the rules that your AI output into snort? Does that then really require a custom build of pfSense?
Since you mention OpenWrt, are you getting your AI model for snort working in OpenWrt or you’re just simply using that because it’s easier as a stop gap solution? I can’t say I if I’ve ever heard of snort being used on OpenWrt but it would be very much a surprise to me if that’s the case.
@@MehrozMustafa-q3y
😂 thanks for watching!
I get that there's convenience in having the service built into the device, but $10 a month for the continued VPN service is pretty steep. Most well known services offer two-year plans that come to just over $2 per month.
Thanks for watching @slycordinator.
I do agree that relative to many other VPN providers, their cost is expensive. I pay roughly $5-6 for my VPN provider, though that takes into account dollar to euro exchange fees. I'm certainly not an expert at all VPN providers, as I haven't tried out many of them, so I can't say all the reasons that they would justify the cost of $10 dollars a month, other than convenience and experience using their VPN service. I'd imagine it also has to do with economies of scale as they are a startup.
A good value test would be to see how well they do against other VPN providers in terms of access to streaming services. As streaming services tend to aggressively block VPN servers, it would be interesting to see if they rotate their location IPs, or perform other means of bypass to allow their VPN users access to streaming streams, i.e. circumvent blocks.
That value would be relative to the user to see if it makes it worth 10 dollars a month, but it definitely would make the VPN service worth more than others. When it comes down to price, it should reflect the quality of their VPN, notably usage.
Can I do this if I want to work abroad??
Thanks for watching @ketsiasanon5!
You sure can use this if you want to work abroad. They have different electrical adapters available for countries abroad.
Would you be able to share your use case with me to ensure it Encrouter will suit your needs? Such as, are you trying to VPN to your home network when abroad? Or just trying to use a VPN in general? Or are you trying to use a VPN while out and about, such as on your phone? With a better understanding of what you want to achieve, I can help you see how well Encrouter will suit your needs.
I have to ask, are YOU that user that prefers an app over a web-browser?
I agree that it is for MOST users, but not having a web-server installed on the router is a big no for me. :)
Otherwise sounds like a smart business plan.
Simplify for the user.
Thanks for watching @marcusjohansson668! Always appreciate hearing from you.
Well, if I may be so honest, I _generally_ prefer a web UI. Call me old fashion, but its just what I'm used to. This is not to say that I wouldn't appreciate a mobile app, but with my level of expectation for technical abilities, I'd basically want a mobile app that can do everything a web UI can, but tailored to a great mobile experience.
When using mobile apps for other network companies / hardware, I have found myself frustrated, as I'm digging through settings trying to do something I know I'm used to finding easily in a Web UI. While they do have a Web Server here, it seems to have a static page. Clearly, they do have some sort of service that communicates with the app, which from my research, seems to be some sort of Web RPC call written in Go, but without digging further, I can't confirm that. I thought it would be some sort of HTTPS API, but I wasn't able to find that when doing a network probe of it.
But like you said, smart business plan, catering to most users (whom may not be as technical or savvy as you nor I), who just want to never leave their phone to be able to intuitively configure their router, from wherever, even if it comes at the cost of doing more advanced networking.
This is probably the best way for them to get starter as to grow faster, and then expand their offering as their user base grows.
Hello, I appreciate your kind words. I really need your help due to the place I live in. I have a Mini PC N5095 with OpenWrt installed on it. It has three WAN ports, each connected to a separate internet link, and one LAN port and one Wi-Fi. My request to you is to create a tutorial video for the scenario I'm about to describe, so that both I and others facing the same issue can benefit from it.
I would like to set up OpenVPN on each of the WAN ports and configure load balancing and failover between these three OpenVPN connections, so that I can utilize the combined bandwidth of these three connections on the LAN and Wi-Fi. Additionally, I want the scenario to include a kill switch, DNS leak protection, and an ad blocker.
Thank you in advance for your assistance.
Thanks for watching @javida8085!
While this video isn't related to OpenWrt, I can certainly offer my guidance. I generally try to create tutorials that can apply to the most people as possible, which can then be used as building blocks to create even larger deployments and setups. That being said, I haven't done any videos on OpenVPN, which I plan to do soon, but I will be as simply as setting up a OpenVPN Server on a router, setting a client on the router to access a VPN provider, and probably a site to site configuration as well.
Nonetheless, in regards to your setup, when you say OpenVPN on each WAN port, I'm not sure exactly what you mean. You'd only have to install OpenVPN once, and have it listen on three different interfaces if you want each WAN port to be able receive an OpenVPN connection from a client. Configuring load balancing and failover would involves using mwan3 package in OpenWrt, which you can refer to here.
openwrt.org/docs/guide-user/network/wan/multiwan/mwan3
If you are trying to set up 3 OpenVPN clients, which is seems like you'd want to, then you'd need to direct each OpenVPN interfaces to use a specific WAN interface. This will likely not work the way you want it to without the below (MultiPath TCP), because you can't really use 3 OpenVPN interfaces to improve its failover / load balancing, you'd do that on the WAN side. If the WAN fails, then the OpenVPN fails, so it doesn't matter. The OpenVPN connection would use the new WAN connection when the failover occurs (once configured).
If you are trying to use the combined bandwidth of these three WAN interfaces, that isnt load-balancing or failover. That would be something like MultiPathTCP, which you can look into here, though I'd be cautious about this setup. If you have enough bandwidth in one of your WANs then I would not try to do multipath TCP unless you really want to try it out.
openwrt.org/docs/guide-user/network/mptcp
This setup with multipath TCP and OpenVPN might not work the same way you'd expect it to, so I'd do some reading on it first before trying to implement it.
In terms of a Kill Switch, if you're taking a physical kill switch, that will depend on what hardware you are using, and if it has a physical switch available to use. I'd look at the GL.iNet routers that do have VPN kill switches on them, or more so on/off switches, as an example. For a virtual kill switch, you'd simply shut off the OpenVPN interfaces.
Lastly DNS leak protection is simply a matter of setting the DNS server on the WAN interfaces to use a DNS server you trust, and for ad blocker, simply install a AdGuard package in OpenWrt.
openwrt.org/docs/guide-user/services/dns/adguard-home
This should cover most of what you want to do. But if you want to explain more on your OpenVPN setup, feel free to share. Otherwise I can only offer the above guidance.
Hi is there any openwrt package for website session ? I want to use netflix session on my home network . Session copy
Thanks for watching @pappuplumber6313! So while this video doesn’t cover OpenWrt, I’ll offer my best guidance. I’m not sure what you are trying to achieve, when you refer to sessions it makes me think of “sticky sessions”, something usually advertised as a proxy feature. In this sense I don’t think you’ll find a package on OpenWrt for this.
Where is your Netflix session originating from? When using a VPN your sessions should continue to use the VPN unless you change it. If you can share your use case, I can provide a more guidance that could help you achieve your end goal.
Its a copy of GL.Inet AX1800. Maybe, vpn ipk from this router will work on others? Openwrt ready ?
Thanks for watching @Lotoss25! Thats what I noticed as well.
It definitely would be OpenWrt ready, given the specs from the AX1800 and the ENC-AX1800A are identical. Getting OpenWrt onto it, well that I'm not sure how to do, given there is not place in the interface to upload a firmware image.
However, if you can find a way to uboot, and get closer to the hardware to flash a OpenWrt image directly onto the the NOR / NAND, then you can probably get it to boot OpenWrt no problem. I'm not too familiar with this process, as it gets more into hardware than I'm familiar with, but I'd imagine its possible.
As for the VPN ipk, their Encrouter OS seems to have their VPN solution baked in, and even though it uses WireGuard, I don't think you can get their VPN offering outside of their OS, given the additional work they've done to get VPNs to work seamlessly, like key exchange (which is outside of the WireGuard protocol).
@@DevOdyssey- Till you actually try it, we don't know if it has a locked bootloader and only the Encrouter firmware can be on it.
@@BillAnt that’s true, and a good point. I’m not well versed here so I’m not sure where to start and try to force it to load another OS. I assume I’d have to take it apart and get at the hardware level. It’s a bit beyond my skill level but would be cool to see. If someone has done this for GL.iNet’s Flint, it would be a great reference to give it a shot and see if it can be done.
not work with Expressvpn
Thanks for watching @Mihai1174!
That’s correct it will not work with ExpressVPN. This solution brings together hardware and software provided by the same company. It does not open up the use of different VPN providers. However with that, you get extreme simplicity of use.
It all depends on what you’re looking for as a consumer.