Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

MikroTik RouterOS v7 stable released

mikrotik.com

Post reply on HN
Print view View original

111–120 of 188 posts

Re: MikroTik RouterOS v7 stable released

#111

Post by dont__panic »

yardstick wrote: post #108
dont__panic wrote: post #83

Earlier quoted context omitted.

Yeah, I've been frustrated with the router space for a while recently so I figured you might benefit from my research (and likely bias as well). Too bad others in this thread downvoted me without responding, though -- if anybody can recommend a decent answer to this question that I didn't cover or explain why I'm wrong, I'm happy to admit that. I would really like there to be a decent router out there for my use case…

What’s your opinion on Mikrotik devices?

I looked into them a while back, and they do generally seem to be capable devices. I think they fall into the too-footgun-y category I mention above, though -- if you don't already know a lot about networks, you can easily leave gaping holes in your network security since there are so many options to screw up. They're a bit on the expensive side, too, and honestly even trying to figure out which router to buy was enough of a nightmare to dissuade me.

Re: MikroTik RouterOS v7 stable released

#112

Post by darkr »

ok_dad wrote: post #27

So, what's the best wifi gateway with extra access points for a home that I don't have to screw with and doesn't spy on me or have cloud crap? My ISP sent a Google wifi thing but I'd rather pay a few hundred than use that for 10 bucks a month to rent that thing, and I don't trust Google. Edit: Thanks for all the answers, from me and anyone else who was looking! I have some good ideas from the below comments and hopef…

Not sure if it passes the “don’t have to screw with” test (as configuration generally requires a decent level of networking knowledge), but I’m quite happy with Mikrotik Audience access points/routers.

Re: MikroTik RouterOS v7 stable released

#113

Post by raesene9 »

dangoor wrote: post #87
dont__panic wrote: post #84

Earlier quoted context omitted.

I'm not sure I would call Ubiquiti "impressive" after their recent bout of security breaches: https://krebsonsecurity.com/2021/03/whistleblower-ubiquiti-b... Not exactly what I want to see in the device that can literally compromise all of my other devices. Am I missing something -- did this turn out to be nothing, or did folks decide that Ubiquiti has bounced back? This seemed really really serious at the time and t…

As noted in the update to the article, Ubiquiti was a victim of an extortion attempt from an employee. This is a pretty difficult attack to prevent.

this is true but if the details in this post https://news.ycombinator.com/item?id=29456593 and others in that thread are to be believed, they have some serious security problems.

Re: MikroTik RouterOS v7 stable released

#114

Post by lormayna »

I am a huge fan of Mikrotik. In the past, I have been worked for an ISP, and we made fantastic stuff with them. A CCR box that costs less than 1000€ can handle the same number of users, with advanced QoS queueing than an equivalent Cisco that costs 20x. Having (almost) the same features to ever model, from the big boxes to the core routers, it's a big plus, they are very flexible, and they have almost all the features that a carrier-class router needs (the big lack at that time were OSPF-v3 and multi-core BGP). Once you learn the CLI and some quirky configuration, it's worth the money.

The only problem is the availability: they are not stable as a Cisco/Juniper, but you can add several layers of redundancy with a fraction of the costs. Also the support is very basic.

Re: MikroTik RouterOS v7 stable released

#115

Post by new_realist »

bigyellow wrote: post #37

Sincere question: why would someone trust a closed source OS for their router?

As soon as your router hands off packets to your ISP, packet handling is either closed source software, or closed source hardware, anyway. Even if your gateway is open source, the chips it uses are not.

Re: MikroTik RouterOS v7 stable released

#116

Post by Integer »

dont__panic wrote: post #72
ok_dad wrote: post #27

So, what's the best wifi gateway with extra access points for a home that I don't have to screw with and doesn't spy on me or have cloud crap? My ISP sent a Google wifi thing but I'd rather pay a few hundred than use that for 10 bucks a month to rent that thing, and I don't trust Google. Edit: Thanks for all the answers, from me and anyone else who was looking! I have some good ideas from the below comments and hopef…

Hot take: All routers completely suck right now, and most of them are built to spy on your network at worst and accidentally expose you to cyberattacks at best. There are two choices, the way I see it: 1. Invest in a decent router (probably $150-200 at least) and throw openwrt on it. You'll need something with serious CPU beef because openwrt relies more on software than hardware, and most routers use hardware for Qo…

You could try Turris Omnia, it has beefy hardware and sane defaults. Or some other solutions with OpenWRT pre-installed.

Re: MikroTik RouterOS v7 stable released

#117

Post by tw04 »

ok_dad wrote: post #27

So, what's the best wifi gateway with extra access points for a home that I don't have to screw with and doesn't spy on me or have cloud crap? My ISP sent a Google wifi thing but I'd rather pay a few hundred than use that for 10 bucks a month to rent that thing, and I don't trust Google. Edit: Thanks for all the answers, from me and anyone else who was looking! I have some good ideas from the below comments and hopef…

Synology has been far and away the best I've deployed for "friends and family". I've not received a single phone call for support and it's the first wifi product I can say that about.

They also are introducing full VLAN support in DSM 1.3 which should be out soon if you're a power user. Honestly if they supported PoE for their extenders I probably would have switched out to it. The extenders will mesh wired or wireless which is nice.

Re: MikroTik RouterOS v7 stable released

#118

Post by nullify88 »

Really happy with the CRS-305 and its value for money.

Release candidates for 7.1 had container support which opens worlds of possibilities for the switch. But unfortunately was removed for the final version pending updates.

Edit: Container support was introduced in rc3 and removed in rc5.

Re: MikroTik RouterOS v7 stable released

#119

Post by iso1210 »

tguvot wrote: post #109
iso1210 wrote: post #46

Earlier quoted context omitted.

Yes, mikrotiks separate bridges, vlans, interfaces. If you want to set ether 3, 4 and 5 to untagged vlan called "Alf" with ID 11, ether 6 to untablled vlan "Bob" (id 12), and ether 7 and 8 to a trunk of both Alf and Bob, you can do 1) Create a bridge for Alf, and a bridge for Bob 2) Assign IPs for them (assuming your mikrotik is the router), and maybe dhcp pools, server etc 3) add ether3, 4 and 5 as bridge ports for…

you just need to remember that in case you make bridges: - you need to enable hardware offloading for it - different models have different limits on number of hardware offloaded bridges - if it's not hardware offloaded, you run all traffic through cpu and kill throughput

I tend to work with CCRs, so no hardware offloading - everything runs through the CPU (and normal throughput isn't an issue)

Re: MikroTik RouterOS v7 stable released

#120

Post by icybox »

60Vhipx7b4JL wrote: post #45
ok_dad wrote: post #27

So, what's the best wifi gateway with extra access points for a home that I don't have to screw with and doesn't spy on me or have cloud crap? My ISP sent a Google wifi thing but I'd rather pay a few hundred than use that for 10 bucks a month to rent that thing, and I don't trust Google. Edit: Thanks for all the answers, from me and anyone else who was looking! I have some good ideas from the below comments and hopef…

how about openwrt/openwisp?

I'm running Netgear N600 / WNDR3800 with OpenWRT since day one. So if you (can) plan for OS before buying, you can dodge a bullet when $VENDOR stops giving f*cks. That particular box has been released in 2011! Mikrotik is good enough (tm) probably, but it's licensed/closed-source. bcantrill once mentioned that "Infrastructure software should be open-source" and I'm adhering to this mantra for 10 years now. Dodged many bullets coming my way ... (i.e. if you want to buy something, can you plan for linux/BSD OS when vendor just doesn't care anymore?)

Would like to hear ideas about Apple's airports running custom NetBSD ... are you guys still running those as edge/internet routers with wifi or have you pushed them to the inside of the network and promoted some other box to the firewall role? I'm kinda stuck in the conundrum "it's unix with PF, it can handle itself" and "it's does not get updates anymore".

Post reply on HN