OpenWRT

openwrt.org
OpenWRT Icon

Plenty of scope for customization and a ton of supported addons. Stateful firewall, NAT, and dynamically-configured port forwarding protocols (UPnP, NAT-PMP + upnpd, etc), Load balancing, IP tunneling, IPv4 & IPv6 support.

Open Source

OpenWRT Privacy Policy

Privacy Policy Summary

  • There is a date of the last update of the terms
  • The service can delete your account without prior notice and without a reason

Documents

Domains Covered by Policy

  • openwrt.org
  • forum.openwrt.org

About the Data

This data is kindly provided by tosdr.org. Read full report at: #1603

OpenWRT Source Code

Author

openwrt

Description

This repository is a mirror of https://git.openwrt.org/openwrt/openwrt.git It is for reference only and is not active for check-ins. We will continue to accept Pull Requests here. They will be merged via staging trees then into openwrt.git.

Homepage

License

NOASSERTION

Created

09 Nov 15

Last Updated

29 Apr 24

Latest version

v23.05.3

Primary Language

C

Size

241,252 KB

Stars

18,332

Forks

9,736

Watchers

18,332

Language Usage

Language Usage

Star History

Star History

Recent Commits

  • Christian Marangi (29 Apr 24)

    procd: make mDNS TXT record parsing more solid mDNS broadcast can't accept empty TXT record and would fail registration. Current procd_add_mdns_service checks only if the first passed arg is empty but don't make any verification on the other args permittins insertion of empty values in TXT record. Example: procd_add_mdns "blah" \ "tcp" "50" \ "1" \ "" \ "3" Produce: { "blah_50": { "service": "_blah._tcp.local", "port": 50, "txt": [ "1", "", "3" ] } } The middle empty TXT record should never be included as it's empty. This can happen with scripts that make fragile parsing and include variables even if they are empty. Prevent this and make the TXT record more solid by checking every provided TXT record and include only the non-empty ones. The fixed JSON is the following: { "blah_50": { "service": "_blah._tcp.local", "port": 50, "txt": [ "1", "3" ] } } Fixes: b0d9dcf84dd0 ("procd: update to latest git HEAD") Reported-by: Paul Donald <[email protected]> Link: https://github.com/openwrt/openwrt/pull/15331 Signed-off-by: Christian Marangi <[email protected]>

  • Kazuki H (22 Dec 23)

    toolchain: glibc: update to glibc 2.38 This updates glibc to version 2.38. Add --enable-crypt since the crypt function got disabled in 2.38, but we still need it. Also add the newly introduced --enable-fortify-source flag and hook it up to the build system. Switch to .zst archive while at it. Signed-off-by: Kazuki H <[email protected]> Link: https://github.com/openwrt/openwrt/pull/14259 [ switch to .zst and fix mirror HASH ] Signed-off-by: Christian Marangi <[email protected]>

  • Christian Marangi (29 Apr 24)

    qualcommax: ipq60xx: mute warning on bootcount enable compile ipq60xx bootcount script include /lib/functions that produce warning when the script is enabled on image compilation. This script is already included by /etc/rc.common hence it's not needed. While at it also fix the format of the switch case. Signed-off-by: Christian Marangi <[email protected]>

  • Robert Marko (29 Apr 24)

    arm-trusted-firmware-mvebu: refresh cryptopp hash Well, it seems that cryptopp hash was never refreshed since calling make package/boot/arm-trusted-firmware-mvebu/check FIXUP=1 V=s does not actually refresh the download calls hashes so refresh it manually. Signed-off-by: Robert Marko <[email protected]>

  • Robert Marko (29 Apr 24)

    arm-trusted-firmware-mvebu: use SOURCE_VERSION instead of VERSION Since ("download: don't overwrite VERSION variable") trying to download the required sources for mvebu ATF will fail with: Makefile:247: *** Download/mox-boot-builder is missing the SOURCE_VERSION field.. Stop. This also broke the buildbot mvebu/cortex-a53 builds. So, fix it by switching to SOURCE_VERSION instead. Signed-off-by: Robert Marko <[email protected]>

  • Felix Fietkau (29 Apr 24)

    mediatek: fix remaining invalid MT7531 switch reg IDs See commit 8b66f1a06d05afbc1450978f6e20516c8308da25: "mediatek: correct address of MT753x switch IC" Fixes: ac8bfe316b81 ("generic: 6.1, 6.6: mt7530: import accepted patches") Signed-off-by: Felix Fietkau <[email protected]>

  • Paul Spooren (17 Mar 24)

    apk: add package APK (Alpine Package Keeper) is the package manager of Alpine Linux and has multiple advantages over OPKG. While Alpine uses APK version 2, this commit adds version 3 with a heavily optimised database structure and additional feature making it suitable for OpenWrt. This commit will be followed by many more to add APK build capabilities to the OpenWrt build system, firstly enabling side by side builds of APK and OPKG packages, later replacing OPKG entirely. Signed-off-by: Paul Spooren <[email protected]>

  • Mieczyslaw Nalewaj (29 Apr 24)

    generic: 6.6: add kernel missing symbol CONFIG_SPI_BCMBCA_HSSPI Add missing symbol CONFIG_SPI_BCMBCA_HSSPI causing bcm4908 compilation errors. Signed-off-by: Mieczyslaw Nalewaj <[email protected]> Link: https://github.com/openwrt/openwrt/pull/15320 Signed-off-by: Robert Marko <[email protected]>

  • Paul Spooren (17 Apr 24)

    download: don't overwrite VERSION variable In package-defaults.mk the VERSION variable contains the final package version, which is a combination of `PKG_VERSION`, `PKG_RELEASE` and if used, parameters of `PKG_SOURCE_VERSION`. While this works fine for building, within the package Makefile the content VERSION varies: When building a package from a release tarball, the content of VERSION contains the actual package version, however when building from source (i.e. Git), the VERSION is overwritten by `PKG_SOURCE_VERSION`. To fix the overwrite, this commit switches from `VERSION` in download.mk to `SOURCE_VERSION` which isn't used anywhere else yet. As a result, Makefiles may pass the package version to be included inside the binary. Signed-off-by: Paul Spooren <[email protected]>

  • David Bauer (25 Apr 24)

    mpc85xx: convert WS-AP3710i to simpleImage wrapper Convert the Enterasys WS-AP3710i access point to use the simpleImage wrapper. This is necessary, as the bootlaoder does not align the DTB correctly (and does not support altering the FDT loadaddress). Booting images with kernels 5.15 and later can break depending on the alignment on the DTB within the FIT image. Signed-off-by: David Bauer <[email protected]>

  • Hauke Mehrtens (28 Apr 24)

    mbedtls: Remove Kconfig options removed from mbedtls 3.6.0 These options are not available in mbedtls 3.6.0 and selecting them causes an error. MBEDTLS_CERTS_C was removed in: https://github.com/Mbed-TLS/mbedtls/commit/1aec64642cd0b9490c96fdd1fa9816741d93fce4 MBEDTLS_XTEA_C was removed in: https://github.com/Mbed-TLS/mbedtls/commit/10e8cf5fef7e062927bfbec69ad85fbf491b4299 MBEDTLS_SSL_TRUNCATED_HMAC was removed in: https://github.com/Mbed-TLS/mbedtls/commit/4a7010d1aaae937dfa328ef253d70d04b3b260ff Fixes: 0e0664264386 ("mbedtls: Update to version 3.6.0") Signed-off-by: Hauke Mehrtens <[email protected]>

  • Marius Dinu (31 Mar 24)

    libaudit: update to 3.1.4, join with daemon and utils, rename Changes: - new URL for sources (old address is dead) - daemon and utils from packages feed are merged in here - only build once - no need to update at the same time in both places - update to v3.1.4 - removed unneeded patches - added audisp-syslog - removed audispd (no longer exists) - rename and move to package/utils/audit - update new path in one dependent package Signed-off-by: Marius Dinu <[email protected]>

  • Nick Hainke (07 Feb 24)

    toolchain: binutils: switch to version 2.42 by default Change the default binutils version to 2.42. Tested-by: Jonathan Lancett <[email protected]> Tested-by: Andre Heider <[email protected]> Signed-off-by: Nick Hainke <[email protected]>

  • Hauke Mehrtens (13 Mar 24)

    malta: refresh kernel 6.6 configuration This refreshes the configuration on top of kernel 6.6 and activates it as test kernel configuration. Signed-off-by: Hauke Mehrtens <[email protected]> Signed-off-by: Tony Ambardar <[email protected]>

  • Tony Ambardar (20 Apr 24)

    kernel/malta: Restore kernel files for v6.1 This is an automatically generated commit which aids following Kernel patch history, as git will see the move and copy as a rename thus defeating the purpose. For the original discussion see: https://lists.openwrt.org/pipermail/openwrt-devel/2023-October/041673.html Signed-off-by: Tony Ambardar <[email protected]>

  • Tony Ambardar (20 Apr 24)

    kernel/malta: Create kernel files for v6.6 (from v6.1) This is an automatically generated commit. When doing `git bisect`, consider `git bisect --skip`. Signed-off-by: Tony Ambardar <[email protected]>

  • Tony Ambardar (20 Apr 24)

    scripts/kernel_bump: Fix commit text formatting Text of a commit message body should wrap at 75 characters. Manual commits are expected to do so, but automated commits *must* do so to avoid adding repeated ugly commits. Signed-off-by: Tony Ambardar <[email protected]>

  • Jean Thomas (24 Apr 24)

    uqmi: set dangling-pointer as error With "ebfe8b4 CMakeLists: set no-dangling-pointer" the compilation option is set in uqmi, and can therefore be removed from no-error. Signed-off-by: Jean Thomas <[email protected]>

  • Jean Thomas (24 Apr 24)

    uqmi: update to git HEAD e7207be uqmi: print radio interfaces in serving system command 6ef41d6 uqmi: create function to print radio interface string e25d042 uqmi: Add basic 5G NR support 3e782be uqmi: sync data from libqmi project 368d46c uqmi: support C reserved keywords in upstream JSON files 02e42c0 reorganize source code in common and uqmi specific parts 4591f0a .gitignore build/ directories 2b57ee1 uqmi: commands-uim: fix uninitialized use of card_application_state 7c77e77 data/code-gen: add support for indications ddbf864 qmi-struct.h: add missing includes 5320c1d move qmi_get_error_str to into utils.c 1503bc7 dev.c: add missing import strings.h bae945f commands-nas: add missing includes 9ffd0e2 commands: make `struct blob_buf status` public a4fbdcc commands-nas: fix gcc warning 8ff632a dev.c: add comment to qmi_request_wait() a043a74 CMakeLists: refactor SOURCES variable to allow later adding uqmid ebfe8b4 CMakeLists: set no-dangling-pointer c47125d CMakeLists: improve generated files 0f64b69 CMakeLists: update cmake minimum version to 3.5 As the built uqmi binary is now moved to a dedicated directory, update the Makefile accordingly. Signed-off-by: Jean Thomas <[email protected]>

  • Weijie Gao (14 Mar 24)

    libunwind: update to 1.8.1 Rebased patches: - 003-fix-missing-ef_reg-defs-with-musl.patch - 004-ppc-musl.patch Signed-off-by: Weijie Gao <[email protected]>

  • Weijie Gao (06 Jan 24)

    grub2: update to 2.12 compile tested: x86_64,i386,loongarch64 Signed-off-by: Weijie Gao <[email protected]> {Refresh patches} Signed-off-by: Hauke Mehrtens <[email protected]>

  • Daniel Golle (28 Apr 24)

    mediatek: bpi-r4: store random MAC addresses for the BPi-R4 Despite coming with multiple I2C EEPROMs supposedly dedicated for that purpose, the BPi-R4 does not seem to have factory assigned MAC addresses. Hence, just like for all other BPi boards, store a randomly generated MAC address on first boot and derive WAN and Wi-Fi MAC addresses from that as well. Not perfect, but better than random on every boot. Signed-off-by: Daniel Golle <[email protected]>

  • Daniel Golle (28 Apr 24)

    mediatek: bpi-r3-mini: persist WiFi and WAN MAC addresses Derive WAN and WiFi MAC addresses from the (random) MAC address stored in the U-Boot environment. Signed-off-by: Daniel Golle <[email protected]>

  • John Audia (28 Apr 24)

    kernel: bump 6.6 to 6.6.29 Changelog: https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.29 Removed upstreamed: generic/backport-6.6/740-v6.9-01-netfilter-flowtable-validate-pppoe-header.patch[1] generic/backport-6.6/740-v6.9-02-netfilter-flowtable-incorrect-pppoe-tuple.patch[2] generic/backport-6.6/790-29-v6.9-net-dsa-mt7530-fix-improper-frames-on-all-25MHz-and-.patch[3] generic/backport-6.6/790-31-v6.10-net-dsa-mt7530-fix-enabling-EEE-on-MT7531-switch-on-.patch[4] generic/backport-6.6/790-34-v6.10-net-dsa-mt7530-fix-mirroring-frames-received-on-loca.patch[5] generic/backport-6.6/790-35-v6.10-net-dsa-mt7530-fix-port-mirroring-for-MT7988-SoC-swi.patch[6] mediatek/patches-6.6/963-net-ethernet-mtk_eth_soc-fix-WED-wifi-reset.patch[7] Manually rebased: generic/backport-6.6/790-23-v6.9-net-dsa-mt7530-get-rid-of-priv-info-cpu_port_config.patch All other patches automatically rebased. 1. https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=v6.6.29&id=a2471d271042ea18e8a6babc132a8716bb2f08b9 2. https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=v6.6.29&id=4ed82dd368ad883dc4284292937b882f044e625d 3. https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=v6.6.29&id=21b9d89d93422221cdda1b82fd075fa3c94a11d9 4. https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=v6.6.29&id=bd41ee1efd478852a0882ce5f136bc2b5e83eff2 5. https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=v6.6.29&id=d1be3960539249a8690ed09a29d0e3bf34189dd2 6. https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=v6.6.29&id=f8de1b6208bf71bd3102548d33dd8475573ad2ea 7. https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=v6.6.29&id=6855f724f19620c3ddff57c349e0abba797475b1 Build system: x86/64 Build-tested: x86/64/AMD Cezanne, flogic/xiaomi_redmi-router-ax6000-ubootmod, ramips/tplink_archer-a6-v3 Run-tested: x86/64/AMD Cezanne, flogic/xiaomi_redmi-router-ax6000-ubootmod, ramips/tplink_archer-a6-v3 Signed-off-by: John Audia <[email protected]>

  • Hauke Mehrtens (08 Nov 23)

    mbedtls: Update to version 3.6.0 This adds support for mbedtls 3.6.0. The 3.6 version is the next LTS version of mbedtls. This version supports TLS 1.3. This switches to download using git. The codeload tar file misses some git submodules. Add some extra options added in mbedtls 3.6.0. The size of the compressed ipkg increases: 230933 bin/packages/mips_24kc/base/libmbedtls13_2.28.7-r2_mips_24kc.ipk 300154 bin/packages/mips_24kc/base/libmbedtls14_3.6.0-r1_mips_24kc.ipk The removed patch was integrated upstream. Signed-off-by: Hauke Mehrtens <[email protected]>

  • Hauke Mehrtens (08 Apr 24)

    hostapd: Fix compile against mbedtsl 3.6 Fix compile of the mbedtls extension for hostapd. Signed-off-by: Hauke Mehrtens <[email protected]>

  • Hauke Mehrtens (07 Apr 24)

    uencrypt: Fix mbedtls 3.6 compatibility This makes it compile with mbedtls 3.6.0. Signed-off-by: Hauke Mehrtens <[email protected]>

  • Hauke Mehrtens (07 Apr 24)

    uencrypt: Fix compile warnings keylen and ivlen are of type long and not size_t. Signed-off-by: Hauke Mehrtens <[email protected]>

  • Nick Hainke (22 Apr 24)

    at91: 5.15: remove old config and patch files 6.1 is now default so remove old config and patch files. Signed-off-by: Nick Hainke <[email protected]>

  • Nick Hainke (22 Apr 24)

    at91: set 6.1 as default kernel version Adjust the kernel version to default 6.1 in order to facilitate testing for a broader audience. Signed-off-by: Nick Hainke <[email protected]>

OpenWRT Website

Website

[OpenWrt Wiki] Welcome to the OpenWrt Project

Redirects

Does not redirect

Security Checks

All 66 security checks passed

Server Details

  • IP Address 64.226.122.113
  • Hostname wiki-03.infra.openwrt.org
  • Location Frankfurt am Main, Hessen, Germany, EU
  • ISP DigitalOcean LLC
  • ASN AS14061

Associated Countries

  • US
  • DE

Saftey Score

Website marked as safe

100%

Blacklist Check

openwrt.org was found on 0 blacklists

  • ThreatLog
  • OpenPhish
  • PhishTank
  • Phishing.Database
  • PhishStats
  • URLhaus
  • RPiList Not Serious
  • AntiSocial Blacklist
  • PhishFeed
  • NABP Not Recommended Sites
  • Spam404
  • CRDF
  • Artists Against 419
  • CERT Polska
  • PetScams
  • Suspicious Hosting IP
  • Phishunt
  • CoinBlockerLists
  • MetaMask EthPhishing
  • EtherScamDB
  • EtherAddressLookup
  • ViriBack C2 Tracker
  • Bambenek Consulting
  • Badbitcoin
  • SecureReload Phishing List
  • Fake Website Buster
  • TweetFeed
  • CryptoScamDB
  • StopGunScams
  • ThreatFox
  • PhishFort

Website Preview

OpenWRT Reviews

More Router Firmware

  • Easy and powerful user interface. Great access control, bandwidth monitoring and quality of service. IPTables is built-in for firewall, and there's great VPN support as well as additional plug-and-play and wake-on-lan features.

About the Data: OpenWRT

API

You can access OpenWRT's data programmatically via our API. Simply make a GET request to:

https://api.awesome-privacy.xyz/networking/router-firmware/openwrt

The REST API is free, no-auth and CORS-enabled. To learn more, view the Swagger Docs or read the API Usage Guide.

About the Data

Beyond the user-submitted YAML you see above, we also augment each listing with additional data dynamically fetched from several sources. To learn more about where the rest of data included in this page comes from, and how it is computed, see the About the Data section of our About page.

Share OpenWRT

Help your friends compare Router Firmware, and pick privacy-respecting software and services.
Share OpenWRT and Awesome Privacy with your network!

View Router Firmware (2)