# Recommendations for Silent and Secure Routers

**URL:** https://discuss.privacyguides.net/t/recommendations-for-silent-and-secure-routers/32870
**Category:** Questions
**Created:** 2025-11-15T14:38:17Z
**Posts:** 27

## Post 1 by @SureDragonfly — 2025-11-15T14:38:17Z

Hey everyone,

I’ve seen a lot of threads here about routers like OPNsense, pfSense, Firewalla, UniFi and many others. But the noise from most of them really gets to me, especially since you can’t exactly put a humming box in the living room or bedroom. Anyone have solid recommendations for truly quiet models? I’d love options from companies that genuinely prioritize security and privacy. I already know Asus, Cisco and Fritz!Box, but I’m looking for other silent performers that nail both.

Thanks!

---

## Post 2 by @anon57862721 — 2025-11-15T14:40:26Z

The absolute best option here for what you’re looking for is the Banana Pi OpenWRT Router. Originally released and to be found here:

[https://www.aliexpress.us/item/3256807609464530.html](https://www.aliexpress.us/item/3256807609464530.html)

This is a highly reputable product even though you may not like the website on which it is listed (though it has great reviews). You may want to change your country if you’re not in the US before placing an order on the website.

The only drawback here I can think of is that this router does not support WiFi 7. But it is plenty fast nonetheless.

---

## Post 3 by @any1 — 2025-11-15T14:58:21Z

> [@anon57862721](#):
>
> This is a highly reputable product even though you may not like the website on which it is listed (though it has great reviews). You may want to change your country if you’re not in the US before placing an order on the website.

It is also available through the [proxystore](https://shop.proxysto.re/en/i/network/1065/banana-pi-openwrt-one) if you are in Europe.

---

## Post 4 by @anon57862721 — 2025-11-15T14:59:23Z

Wow. I didn’t know this. Excellent!

---

## Post 5 by @any1 — 2025-11-15T15:03:41Z

No idea how loud it is, but security-wise I have seen [peplink routers](https://www.peplink.com/products/soho-routers/b-one/) be recommended.

---

## Post 6 by @anon57862721 — 2025-11-15T15:05:51Z

This doesn’t even appear to support Wireguard. I would not recommend buying this when there are objectively better options available with open source firmware.

---

## Post 7 by @any1 — 2025-11-15T15:17:48Z

I recommend reading this for info on router security.

> **[Suggested secure routers - RouterSecurity.org](https://routersecurity.org/SecureRouters.php)**
>
> Suggested secure routers - RouterSecurity.org

---

## Post 8 by @anon57862721 — 2025-11-15T15:18:36Z

Thanks for sharing. Didn’t know about this website. I’ll read up to learn more.

---

## Post 9 by @anon57862721 — 2025-11-15T15:23:15Z

I still feel my recommended router (which has been discussed on the forum in the past) does come highly recommended still that’s a lot more affordable. And with OpenWRT, it gives you full flexibility to manage your network as you want in a highly privately and securely (which is OPs preference).

Also, the link you shared is of a business router, not really ideal for residences.

---

## Post 10 by @tomasz86 — 2025-11-16T08:12:45Z

> [@anon57862721](#):
>
> The absolute best option here for what you’re looking for is the Banana Pi OpenWRT Router. Originally released and to be found here:
> 
> [https://www.aliexpress.us/item/3256807609464530.html](https://www.aliexpress.us/item/3256807609464530.html)
> 
> This is a highly reputable product even though you may not like the website on which it is listed (though it has great reviews). You may want to change your country if you’re not in the US before placing an order on the website.
> 
> The only drawback here I can think of is that this router does not support WiFi 7. But it is plenty fast nonetheless.

Do you know if there is something similar but with support for a 5G SIM card? I’m looking for a router that supports 5G (and possibly WiFi 7), but the choices seem extremely limited…

---

## Post 11 by @anon57862721 — 2025-11-16T08:30:11Z

What you’re asking for is still relatively brand new for routers (even though WiFi 7 has been out for a while but is no where close to being ubiquitous yet). I mean, there are WiFi 7 routers easily available now but I don’t know of any that can support custom firmware like OpenWRT or DD-WRT.

Right now, you’ll have to pick one you want more.

---

## Post 12 by @tomasz86 — 2025-11-16T08:36:15Z

Yeah, I’ve been only able to find some Chinese routers with those capabilities, and a single one from Taiwan. All with proprietary firmware, of course, and with the latter being super expensive.

---

## Post 13 by @anon57862721 — 2025-11-16T08:37:38Z

I still recommend sticking with my preference above. It really is the best option though I wish they release one with WiFi 7 soon. I might upgrade. I’m a sucker for privacy tech. Albeit I wonder if its possible to simply change the WiFI card in the router. I need to look into this more.

---

## Post 14 by @null — 2025-11-16T09:10:25Z

[Banana Pi BPI-R4 Pro](https://docs.banana-pi.org/en/BPI-R4/BananaPi_BPI-R4) is the only one that come to mind it. Is a WiFi 7 router and you can add 5G SIM Card Module to it but just know it’s experience and it’s more a do it yourself router then OpenWRT ONE and it isn’t officially supported by the OpenWRT team like how the OpenWRT ONE is. Also need a heat sink with fan.

I have no idea how good it is or how good the OpenWRT support is. The only reason I know of it is because I did research on Banana PI a year ago because I wanted to buy a OpenWRT ONE.

---

## Post 15 by @kissu — 2025-11-16T14:37:44Z

Good well known recommendation companies from that article (that are also cross-referenced across the Internet in general):

- [GL.iNET’s MT-6000 Flint 2](https://www.gl-inet.com/products/gl-mt6000/)
  - or MT-3000 as [recommended on the official OpenWRT forums](https://forum.openwrt.org/t/best-newcomer-router-2025/222871)

- [Firewalla](https://firewalla.com/collections/firewalla-products)
- [BananaPi R4](https://docs.banana-pi.org/en/BPI-R4/BananaPi_BPI-R4) if you want something with more performance for a given price
  - [R4 Pro](https://docs.banana-pi.org/en/BPI-R4_Pro/BananaPi_BPI-R4_Pro) is also in the works in your wish to have 10Gbe but it is still quite a dev board, don’t expect everything to work flawlessly
  - [R3 Mini](https://docs.banana-pi.org/en/BPI-R3_Mini/BananaPi_BPI-R3_Mini) if you want the opposite, something smaller and _cute_ to carry around or use as an Access Point

- Turris is also a [known company apparently](https://discuss.privacyguides.net/t/do-you-have-any-router-recommendations/33583/14), they have their own firmware but the [Turris Omnia](https://openwrt.org/toh/turris/turris_omnia) is also compatible with OpenWRT

* * *

I’m definitely no security expert but I heard about this one from Naomi Brookwell (it can support some 4G):

- [https://protectli.com/](https://protectli.com/)

Looks decent in terms of features and privacy even tho it might be sourcing the hardware itself from China. Not sure about Qualcom, Mediatek etc…but maybe it’s not a good thing? Again no expert. :man_shrugging:t2:

* * *

[Tomaž Zaman](https://www.youtube.com/@tomazzaman) is building his own router + software last time I checked.

> **[Tomaž Zaman](https://www.youtube.com/@tomazzaman)**
>
> I hate routers. Most of them anyway. Which is why I decided to do something about it. You can follow my story here.

Looks quite knowledgeable on the topic and has a page for his upcoming product here: [mono.si](https://mono.si/). Might be worth giving it a look for something very much different?

Jeff Geerling reviewed an early version of it recently.

> **[$1m server vs $600 router](https://www.youtube.com/watch?v=3D5q3NWEMZY)**
>
> HUGE thanks to Patrick from @ServeTheHomeVideo for helping with this test!Links to everything I mentioned: - Mono Gateway: https://mono.si - Tomaž Zaman on...

* * *

Finally yes, a BananiPi is probably the best way to go because it’s based on [OpenWRT One](https://openwrt.org/toh/openwrt/one) itself and looks very self-contained + amazing price/performance ratio. :heart_eyes:

Btw, they also plan to release [the Two](https://news.ycombinator.com/item?id=43512495) soon with a spec bump and around 250$?  
Still too early to have more details tho.

* * *

Finally, you have Ubiquiti (which is not recommended by the post above btw).  
It’s a banger for the price/performance ratio and some people are very happy with their proprietary software but at the same time, I am not sure how private it is.  
It’s the old decision of, do you:

- harden an iPhone
- run GrapheneOS on an Android

You could probably also just wipe their software and install OpenWRT on it but then you pretty much lose the entire point of buying some good hardware for _cheap_.  
And the same could be told for any kind of crappy router that you nuke.

* * *

TLDR: probably go for the OpenWRT one (with any BananaPi :banana: + some accessories to tune it further) tbh. :+1:t2:

* * *

Update: I personally ended up going with the Flint 2 for the following reasons:

- easier to buy and with no fluff as of when/where I would receive it, stock on Aliexpress is not always the best
- I’m not sure about the overall quality of the R4/R4 Pro when it comes down to shielding and doing the thing right[[1]](#footnote-121413-1)
- R4 Pro’s firmware situation is still a hot mess and I don’t feel like it is nowhere as stable as the R4’s + I don’t want to receive a cool PCB but have no actual use for it waiting for a firmware bump :joy:
- follows my needs better: WiFi 7 is not ready at all[[2]](#footnote-121413-2), I don’t plan on using a 5G mobile card for a backup, I am not sure I want to straight upgrade to 10Gbe given the amount of work it requires, I’ll probably stick to 2.5G for now
  - since I realized that a basic WiFi 6 router would be more than enough for me right now, I then decided to pick the most stable and reliable recommendation over the Internet: the Flint 2
  - you can flash [its firmware](https://openwrt.org/toh/gl.inet/gl-mt6000) if you want a Zero Trust approach :victory_hand:
  - the OpenWRT forums themselves are leaning heavily towards Flint 2 or BPi R4, hence both are safe bets for something that works just well :1st_place_medal:

Now it’s time to flash that bad boi! :face_savoring_food:

* * *

1. I didn’t felt like getting into 3D printing a custom case + applying copper/aluminum foil + everything in between, was a bit too enthusiast for a first timer [↩︎](#footnote-ref-121413-1)

2. moreover, I have no WiFi 7 clients supporting it anyway [↩︎](#footnote-ref-121413-2)

---

## Post 16 by @ty89 — 2025-12-01T01:21:49Z

> [@tomasz86](#):
>
> I’m looking for a router that supports 5G (and possibly WiFi 7), but the choices seem extremely limited…

Are you sure you really need WiFi 7? Far less choices than WiFi 6, not even considering cellular modem requirements, and you might not experience WiFi 7 benefits as much as marketing departments want buyers to think.

You can search for OpenWrt supported routers at the [OpenWrt Table Of Hardware page](https://toh.openwrt.org/). Click filters and select the features you want.

Here’s a good resource if you’d like to read more about WiFi generations and real world stuff vs marketing: [https://www.wiisfi.com/](https://www.wiisfi.com/)

---

## Post 17 by @kissu — 2025-12-01T09:29:53Z

Excellent links, thanks for those! :folded_hands:t2:  
And yes I agree, got surprised that my Pixel 9a doesn’t support Wifi 7 but turns out not a lot of devices do anyway so the benefits are quite relative as of today. :relieved_face:

I guess people like LTT might be hype-ing it a lot. :sweat_smile:

---

## Post 18 by @anon16234852 — 2026-02-15T11:45:48Z

I had the Flint 2 on trial, but switching to the Asus RT-BE88 running MerlinWRT was a no-brainer. The performance is night and day, though obviously, the price reflects that.

---

## Post 19 by @kissu — 2026-02-15T12:17:24Z

Running OpenWrt on the Flint2?  
Also, how did you compare the performance?

WiFi, wired, through some VPN or something totally different?  
Let us know how you ended up on this conclusion. :hugs:  
I also wonder which version of OpenWrt did you ran on it and if it’s _kinda_ comparable (based on different foundations to begin with so eh :woman_shrugging:t2:).

The Asus has:

- double the RAM but that shouldn’t really matter
- 10Gbe port, that should make it a bit more toasty :fire:
- slightly more storage
- WiFi 7 might give an edge if consumed by compatible clients

---

## Post 20 by @anon16234852 — 2026-02-15T12:29:11Z

I’m tied up right now, I’ll respond later.

---

## Post 21 by @anon16234852 — 2026-02-15T14:00:53Z

It doesn’t even have WiFi 7 enabled. Really, it was the 10Gb, 4×2.5Gb, and 4×1Gb ports, plus the more powerful hardware, that sealed the deal. Of course, this should also be future-proof for a long time, since I tend to upgrade my devices often anyway.

What definitely also played a part was that it has a familiar OS I’ve used for a long time, so there’s no learning curve. So the Flint is surely a great router too!

---

## Post 22 by @kissu — 2026-02-15T14:25:51Z

If you have the networking around 10Gb then it might be an upgrade if you use the actual bandwidth usage downstream indeed.  
For the more powerful hardware, I guess it matters on what you do have running on it but I hardly see a router being used at 90% of the CPU haha, 10% at best. :sweat_smile:  
When it comes down to cooling, maybe some potential throttling but again, the non-SFP ports do better on that regard if you use copper because of the heat it generates.

> [@anon16234852](#):
>
> Of course, this should also be future-proof for a long time, since I tend to upgrade my devices often anyway.

In routers, I am not sure how much of it is true because of the fast iterations but you could indeed use the Asus down the road as an AP while upgrading your router yes. :+1:

> [@anon16234852](#):
>
> it has a familiar OS I’ve used for a long time

That is probably why you actually prefer the Asus one. :smiley:

I’m not sure how maintained/more or less secure OpenWrt vs MerlinWrt are in comparison but I for sure wouldn’t trade some hardware for a familiar UI especially when this one can be fully custom with some custom CSS and the help of some LLMs.

But hey, I guess that the router is still quite more secure than a regular Asus router and won’t end up being part of the usual botnet Asus is so well-known for. :sweat_smile:

I personally still see it as an over-priced (ROG premium) kind of Asus thingy.  
Hopefully you will never need to RMA it too. :smiling_face_with_tear:

---

## Post 23 by @anon16234852 — 2026-02-15T14:42:46Z

That OS thing is definitely true. Since I flashed Merlin onto this right away, all the bloatware was disabled. The VPN features have also improved a ton, which makes projects a lot easier. And since I already know how to do pretty much everything securely, the only reason to buy a new one was that it was so close to EOL that I had to upgrade.

I also started a business a week ago, but I won’t go into that any further.

---

## Post 24 by @anon16234852 — 2026-02-23T12:20:40Z

Finally got everything working right. The 5 Wireguard clients and 20 customers on them are barely noticeable. It got a bit overkill when all the IoT devices are also on multi-hop, plus Hagezi Ultimate and IVPN Hardcore Mode on top. Total traffic probably dropped 60-80% because of them, but it works perfectly locally. I’m really happy with the device now that I’ve learned how to use everything properly.

 ![router.cleaned](https://forum-uploads.privacyguidesusercontent.com/original/3X/3/0/3082f5dbe29901a294b7418b086a4feb7d7959eb.png)

---

## Post 25 by @kissu — 2026-02-23T13:20:32Z

As expected yes. :hugs:  
A networking stack will always consume less resources than your average JavaScript website nowadays while achieving much more at the same time. :grinning_face_with_smiling_eyes:

---

## Post 26 by @iluvprivacy — 2026-02-23T14:11:39Z

But does it work? I haven’t seen anyone post about setting up a BPI with a 5G modem.

---

## Post 27 by @thinker — 2026-03-30T21:28:41Z

I use Mudi V2 and Puli Ax with Norypt Privacy firmware identity randomization.
