Next it's going to be mandatory for US router manufacturers to leave a hardcoded backdoor for feds to use at any arbitrary reason.
this post was submitted on 26 Mar 2026
81 points (100.0% liked)
Technology
42605 readers
645 users here now
A nice place to discuss rumors, happenings, innovations, and challenges in the technology sphere. We also welcome discussions on the intersections of technology and society. If it’s technological news or discussion of technology, it probably belongs here.
Remember the overriding ethos on Beehaw: Be(e) Nice. Each user you encounter here is a person, and should be treated with kindness (even if they’re wrong, or use a Linux distro you don’t like). Personal attacks will not be tolerated.
Subcommunities on Beehaw:
This community's icon was made by Aaron Schneider, under the CC-BY-NC-SA 4.0 license.
founded 4 years ago
MODERATORS
for feds to use at any arbitrary reason.
For the safety of the children you mean /s
Oh yes. That's what I meant to say. Silly me.
I genuinely thought that was already the case
It is. CALEA has been around for a long time, and it's surprising to me not many people are aware of it
Consider what the media feeds the masses, and it becomes far less confusing. Not everyone checks out TechDirt.
If I recollect right they had some backdoor intents for nvidia AI chips.
Yeah, I think this is less about how secure foreign routers are and more about inserting their own backdoors in citizens hardware for surveillance purposes.
I think it is more the US government saying, "Hey, you can't do that! Only WE can do that!"
I wonder how they define "router". Any device with two network interfaces can be made into a router.
Edit: phrasing
Noooo, FCC, this isn’t a router, it’s just a computer with 6 network interfaces
Afaik, you'd want hardware acceleration for the actual packet routing, or it'll be quite slow/inefficient. So any ASIC for routing packets would be considered a "router".
I wonder if there exists an open router design based on an FPGA platform...
Tell that to the poweredge r210 ii in my closet running PFsense with its CPU barely getting touched despite four NICS, two of them 10gbps.
You're thinking of switching hardware.
That being said I might go hit up mikrotik while I still can for switches. Shame cuz I was hoping to wait until they got PoE versions of the CRS310-8G+2S+IN, but I think they wanna get rid of the crusty old stock of CRS112-8P-4S-IN. They made a similiar newer switch but it only runs swos instead of router is which is bunk.
Ubiquiti stuff can still be flashed with openwrt so I'm good on APs I think once my dlink dies, even if it'll be overpriced.
Worst case I just buy em like I do my FPV flight controllers: from Ali Express
Interesting, yeah I'm not actually well versed, that's why i began with "afaik" hah. My experience with EdgeRouter is that you basically have to enable hw offloading to get the full throughput, and my assumption was that probably all off-the-shelf routers are doing something similar for them to be usable in such a small/cheap/lower-power box.
When you say I might be thinking of "switching hardware", I assume you're referring to "managed switching", and isn't that just routing without any NAT? Like, if your pfsense router has 4 NICs, then it has to do the job of both a router and switch, no? First one, then the other for each packet?
Doing routing/firewall in software is a lot more flexible, and easier to patch when vulnerabilities come out. Especially when software is integral to the routing (looking at you wireguard/openvpn).
Keep in mind those edgerouters look like they have dual core embedded MIPS CPUs.
My dell power edge is a full blown rack-mount server that could run a small plex instance. You could stick a 1060 in this thing and get Witcher 3 to play at a reasonable framerate.
That's what makes up for the lack of dedicated asics.
As for the four NICs they are as follows:
- 1gb - wan (to modem)
- 1gb - config (to config vlan on switch)
- 10gbps - main lan trunk to LAN switch
- 10gbps - trunk line to public server VM host (DMZ'd from rest of lan, each VM has its own vlan/subnet/firewall ruleset)
They don't act as a switch because it handles packets, not frames, allowing/dropping/denying them based on rules set in software.
Man, just when I think I understand home networking...
I think you actually need 3.
Otherwise there is no real "routing" just "in here, out there" and vice versa.
The "routing" can still refer to routing to devices attached via a switch. So no need for a third port to qualify as a router.
That's true. I forgot about a down network switch.
Technically you only need 1 interface when using VLANs. Basically any device with a CPU and NIC can be a router.
It's a router if it operates on layer 3. Most WiFi routers only use two interfaces (ISP side and WiFi) and yet they are routers. They also provide a layer 3 firewall.
But several devices can connect to the WiFi side.
Counts as multiple endpoint devices.
Same with Ethernet
I'm calling it now - Palantir and others of their ilk will be the ones leading this nonsense.
Ding ding ding
Palantir, the copyright assholes
I can name a few more
If you want to spy on everything that all people do, their modems and traffic routers will be step one
FCC and Executive Branch unilaterally try to**
That said, I don't have the money to try to import an unapproved router for personal use and then find/hire lawyers sue when its seized in customs, and am uncertain what arguments could be used in-court to affect this issue beyond for, maybe, myself ending up with a product I honestly don't plan to use, but there has to be a way beyond begging Congress-Critters for some basic crumbs of Illusion-of-Choice-masquerading-as-Consumer-Rights ... right?
Buy a mini-PC and install something like OPNSense, PFSense, or WRT, etc.
Make sure it's got two NICs on it
My personal solutions regardless of the law or regulations are besides the point.
Your options for a new router will be Amazon or Google and you will like it. Also it will be 19.99 a month from your ISP. And you have no control or access to any settings in it.