New router for good price - Best firmware for stability, security and privacy?

[SysXpl]

Flashed my RT-AC68U with tomato like 10-15 years ago... after that I had a few routers. These was Asus except a couple of exceptions - all Asus did run Merlin. My recent Asus RT-AX88U Pro. is great. Just now I bought a Asus RT-AC88U in near mint condition for about 70 dollar including shipping. Good deal? Anyway, this go to my gf in Ukraine. After she went her to celebrate christmas we might go togheter to her place and I install it. She got my previous RT-AC65P about 2 years ago. But her daughter moves to her own flat, and she asked us if she can bring this router with her. She also has a new flat, that is a small but modern. When she moved in, the previous owner left the Asus RT-N14U b1 (or similar rubbish that is barely working). Plans to have something that just run and run, for 1-2 users. Preferbly for 10+ years, possibly without touching it.

The flat could end up with something like this... about 55 squaremeters:

- 1-2 phones
- 1-2 laptops
- 1 tablet
- 1 guest network
- Few smart home devices (including control boiler outside home, smart plugs, fire alarm, gas alarm, not very advanced automatisation)
- Robot vaccum
- I am not sure about any possible wi-fi devices or smart home implementation for her car soon or later in the future
- Hi-Fi speaker in bedroom with Chromecast
- TV with streaming Netflix, Tidal, PLEX (up to lossless 4k or HD from my apartment in Sweden)
- When I visit her
- when having other guests
- Washing machine, kitchen gadgets and/or dishwasher might have smart home support

This... and...

- Jackary Explorer 2000 Plus + solar panels (working mainly as UPS but can be self-sufficient for gas boiler, USB-charging and internet)
- Teltonika Rutx50 (5G router with 5G passthrough feature and 2 SIM slots - as backup if ISP goes down) (Also supports 4G, Ukraine is very close to get 5G)

She is NOT very technical. I like it to be very stable no matter what happens. Best possible firmware for being completely untouched? Best for security, stablility and privacy? I think I want to avoid the risks for china to access or "sell" her data to i.e. Russia for geo-location. BTW, she has a very important position in energy sector atm. So, she or her workplace have higher risk of being a target - one of the largest cities in Ukraine. Now, she might move to me on sight or change job. But still, I want to minimze risk at all costs (despite very low risks).

So, what do you say? Best 3rd party firmware?? Set and forget...

 

[SysXpl]

Funny. I just cancelled the Asus RT-AC88U... seems like ASUS RT-AX59U is a much better deal on discount. ATM, just about 35 dollar more. I will have a new one with warranty, faster speeds, WPA3, Wi-Fi 6, longer period access to updates and maybe auto-update? Maybe 5G fallback only works like I want on this more recent model, I have not checked into the details. I guess, worth the 35 dollar extra. Maybe I can wait until black friday if I want to cut more? I do not have money until 2 weeks now anyway. But ASUS RT-AX59U does not have Melin, as it seems.

Any opinions?

 

[bbunge]

In today's environment there is no such thing as set and forget. A modern factory firmware that will get regular automatic updates is best for the non geek.

 

[SysXpl]

In today's environment there is no such thing as set and forget. A modern factory firmware that will get regular automatic updates is best for the non geek.

Thanks for confirming this. Good input, I agree especially because it is a country with active warfare (cyber warefare against citizens included) - so, it might be even more important.

Do you have any specific model you would recommend right now? In the 150-200 dollar price range? Any specific features I should look into that I did not already mention?

Hmm... I thinking about the best thing I could do considering the situation.

Maybe, I could try to gain distance - and regulary update Merlin through SSH or something? If something specific happens (if we break up - because of practical issues or that they do not let people in or out of the country for instance) I might just replace. We have a long term relationship - it has been serious and we meet. So, I do not think something like this happens anytime soon. Which makes me be able to keep it updated. I think Merlin is still a better alternative than.

https://www.snbforums.com/threads/merlin-automatic-firmware-update-possible.85406/

However, I do not want to comprimise her security while open up the router for the network for the web. Hmm... better idea to get an Raspberry Pi maybe? Maybe SSH or (for more convience) teamviewer? Then I can access her network on distance, upgrade firmware, help her out etc.

 

[bbunge]

Today the AX86U Pro is on sale at Amazon for $198.00 (US) and that is $50 less than I paid for mine. The AX86U Pro is right up there with the AX88U Pro as the most recommended router on this forum. Sure, the WIFI 7 routers are getting a lot of attention but they are $$$!
As for the firmware, the Asus firmware has teams that work on upgrades and their firmware is specific for the model. It is suspected the Merlin firmware, while great, may use a generic GPL which works for the purpose but... I feel security wise the Asus firmware for your router is best. You can use Wireguard or OpenVPN to manage the router remotely. One down side with Asus firmware is the new Windows 11 release does not like to connect to the router Samba. However, it is not a grest idea to use a router for a NAS.
Good prices can also be found for AX86U or AX86S and they should be getting their firmware upgrades soon.