Tools · Chapter 7
Router Hardware
Five ways to replace an ISP router, by difficulty and what each is best at.
| Option | Difficulty | Best for | Notes |
|---|---|---|---|
| GL.iNet travel routers (GL-MT3000, GL-AXT1800) | Easy–Medium | Getting started with OpenWrt | Ship with OpenWrt pre-installed. Excellent value, good hardware, strong community. My recommendation for first custom router. |
| Asus routers with Asuswrt-Merlin firmware | Easy–Medium | Full-featured consumer router | Merlin is a maintained fork of Asus firmware with enhanced privacy and security options. Easy upgrade path from stock Asus hardware. |
| OpenWrt on supported hardware | Medium | Custom configuration, full control | The gold standard open-source router OS. Runs on dozens of devices. Full VLAN, firewall, and package support. See openwrt.org for compatible hardware. |
| pfSense / OPNsense on dedicated hardware | Advanced | Home lab, maximum control | Full enterprise-grade firewall and router OS. Runs on a Mini PC (e.g. Protectli Vault, Beelink Mini S). OPNsense is the more actively maintained fork. This is what I run. |
| Firewalla | Easy | Simplicity with good features | Plug-in device with good IoT controls, DNS filtering, and network monitoring. Limited customisation but very accessible. Good for non-technical household members. |
Reproduced verbatim from The Privacy Diet, Chapter 7 — “Router Hardware Recommendations”. The book explains the reasoning behind each verdict.