Looking for a Secure and Long-Term Supported Router (Home Use)

[NoShine]

Hello everyone,

I'm currently using an old modem from my ISP, with my PC connected via Ethernet. Occasionally, I also connect my smartphone via Wi-Fi.
I'm now looking to buy a dedicated router, with the main goal of improving the security of my home network.
My main priorities are security, stability, and long-term reliability, rather than raw performance or advanced features.

What I'm looking for:

• A router with a long lifecycle, offering regular firmware updates (especially security patches and bug fixes).
• Wi-Fi range is not a priority, as the router will be placed very close to my devices.
• Ideally compatible with firmwares such as Asuswrt-Merlin, OpenWRT, or others focused on control and security.
• Strong technical support and an active user community are appreciated.

Any model suggestions, brand recommendations, or personal experiences would be greatly appreciated.

Thanks in advance for your help!

 

[Jeffrey Young]

A router with a long lifecycle, offering regular firmware updates (especially security patches and bug fixes).

This is very much at the whim of the manufacturer. Asus does well with regular updates, but for the life cycle, that all depends on various market factors.

 

[bbunge]

RT-AX86U Pro should be supported for quite a while. Now on sale @Amazon for $149.99. One of the most recommended routers here.

 

[Tech9]

My main priorities are security, stability, and long-term reliability

Keep using your ISP provided gateway. They are all locked down tight with minimum features and attack surface. More secure than most over the counter home routers. Save your money if you have a few clients only. The clients have own firewalls and protection against malware.

 

[NoShine]

Keep using your ISP provided gateway. They are all locked down tight with minimum features and attack surface. More secure than most over the counter home routers. Save your money if you have a few clients only. The clients have own firewalls and protection against malware.

Thank you for your response, I appreciate your input!
I understand the reasoning and it makes sense in many cases, especially for those with few devices who prefer simplicity.

In my specific case, the ISP gateway is quite old, which raises some concerns regarding security updates and long-term support.
Since I’m focusing more on home network security, I’m looking for a solution that offers greater control, transparency, and the possibility of regular updates — ideally through firmware like OpenWRT or Asuswrt-Merlin.

I would greatly appreciate any recommendations that align with this.

 

[degrub]

Why not ask your ISP to provide the latest model for your service tier ?
Then put whatever defense device on the DMZ port of the ISP router and see what you can do without risking harm to your real devices. Seriously, you could try OPNsense or PFsense on a mini PC and go from there. Maybe take an old machine and create a honeypot behind it to test the defense device configuration ? Your own security lab, if you will.

 

[Tech9]

OpenWRT

GL.iNet GL-MT6000 is quite popular lately. You have to look for Qualcomm or MediaTek hardware in case you want alternatives. You have to follow the community and maintain your device yourself. Higher level of networking knowledge is required.

Asuswrt-Merlin

For longer support choose one of BE-class devices listed as supported on Asuswrt-Merlin website. They'll have expected longer support upstream from Asus, something Asuswrt-Merlin developer relies on. This is not an entirely open source project and it's driven by a single main developer. It may end at any time for various reasons and with no prior warning.

The more popular device you choose the more targeted it is going to be. The more features this device offers the larger attack surface it is going to have. Choose wisely and hope for the best. Supporting a device with 3rd party firmware becomes entirely your responsibility.

 

[Tech9]

Seriously, you could try OPNsense or PFsense on a mini PC

Perhaps the best option for expected longer support @NoShine. Requires x86 hardware appliance, additional switch (if needed) and access point(s), higher than average networking knowledge. Anything else you purchase over the counter and rely on someone else to make firmware for it - may last number of years, but not guaranteed. Then you have to restart the cycle with a different device.

 

[tgl]

Another vote here for pfSense (or OPNsense if you prefer that). Those systems will be around for a long time. You'd want to replace the hardware they run on every so often, but once you have a configuration you like you could keep using it on new hardware. There's definitely a learning curve, but I'm not sure it's anything that should daunt someone who's been using Asuswrt-Merlin.

 

[NoShine]

Hi everyone,

First of all, thank you again for all the helpful replies — I really appreciate the time and knowledge shared here.

After reading your comments carefully, I’m starting to realise that I may have been a bit too ambitious when considering custom firmware options like OpenWRT or Asuswrt-Merlin. Although I initially asked about them (influenced by other posts I had read), I now understand that my technical level might not yet be sufficient to handle the responsibility that comes with these setups.

Because of that, I’m reconsidering my approach. Maybe the most sensible option for me at this stage would be to go with a solid, over the counter — something with good official support, stable firmware, and long-term reliability, without requiring too much technical knowledge right away.

With that in mind, I’ve been looking into a few models that seem interesting:

• Asus: RT-AX86U Pro, RT-AX88U Pro, GT-AX6000, RT-BE58U, RT-BE86U
• AVM Fritz!Box: 7530 AX
• MikroTik: hAP ax³

Would anyone recommend any of these in particular? Or are there other models I should consider. I was also wondering if going for one of the newer BE series (Wi-Fi 7) models could be a good long-term investment in terms of extended support. Does that line of thinking make sense?

Thanks again for all your advice — it really helps!

 

[Tech9]

RT-AX86U Pro, RT-AX88U Pro, GT-AX6000

The above are all popular around models from Asus, but again - I don't think you need to invest money in additional own router when you have one PC and one mobile phone as clients. It won't increase your security much. With mostly encrypted Internet traffic such gateway devices don't even see the passing traffic. End device security and user behavior is more important. Modern OS devices and Web Browsers do what you need already in background and more effectively since they actually see the traffic. In your particular case I don't see getting an additional home router as good investment because you have total control over all client devices.

 

[NoShine]

The above are all popular around models from Asus, but again - I don't think you need to invest money in additional own router when you have one PC and one mobile phone as clients. It won't increase your security much. With mostly encrypted Internet traffic such gateway devices don't even see the passing traffic. End device security and user behavior is more important. Modern OS devices and Web Browsers do what you need already in background and more effectively since they actually see the traffic. In your particular case I don't see getting an additional home router as good investment because you have total control over all client devices.

Hi again,

Thank you for the clear explanation—I completely understand now why, with just a PC and a phone under my control, a dedicated router won’t dramatically boost my security. I’ll continue to focus on keeping my devices updated, practising safe browsing habits and using strong endpoint protections.

That said, I do want to learn more about home-network security over time and eventually take more direct control of my LAN (firewall rules, guest networks, simple VLANs, DNS filtering, etc.). With that longer-term goal in mind:

Could you recommend a good “first” router—something solid out of the box, easy enough for a beginner to configure, but with enough features to let me experiment as I go?

 

[Tech9]

I would suggest Ubiquiti UCG-Ultra gateway + U6-Plus access point. Makes complete mini UniFi system, very power efficient, very small size, user friendly enough and with advanced features when needed. Software quality and support above average consumer products. It will cost you around $250 for both units + PoE injector to power the access point. Network information and statistics whatever you want in a nice customizable UI.

 

[NoShine]

I would suggest Ubiquiti UCG-Ultra gateway + U6-Plus access point. Makes complete mini UniFi system, very power efficient, very small size, user friendly enough and with advanced features when needed. Software quality and support above average consumer products. It will cost you around $250 for both units + PoE injector to power the access point. Network information and statistics whatever you want in a nice customizable UI.

Thanks a lot for the detailed recommendation, Tech9— much appreciated!

That UniFi setup (UCG-Ultra + U6-Plus) sounds like a great balance between user-friendliness and long-term learning potential. I like the idea of starting with something modular and efficient, with good software and community support, rather than jumping straight into custom firmware or DIY solutions.

I'll definitely look more into this option — thank you again for all the guidance and for taking the time to explain everything so clearly!

 

[NoShine]

I would suggest Ubiquiti UCG-Ultra gateway + U6-Plus access point. Makes complete mini UniFi system, very power efficient, very small size, user friendly enough and with advanced features when needed. Software quality and support above average consumer products. It will cost you around $250 for both units + PoE injector to power the access point. Network information and statistics whatever you want in a nice customizable UI.

I do have one follow-up question regarding budget and features: considering the price difference, do you think it would be worth considering the Dream Router 7 instead? From what I’ve read, it seems to offer a more all-in-one solution with advanced features out of the box, possibly simplifying initial setup without sacrificing too much flexibility for learning and security.

 

[Tech9]

Dream Router 7

I forgot about this device. It’s even better value for the money.

 

[NoShine]

I forgot about this device. It’s even better value for the money.

Hi Tech9,

Just wanted to say a big thank you for all your help throughout this thread.

Your explanations were always clear, honest, and thoughtful — and your recommendations really helped me reframe how I think about home networking, both for now and for the future. I genuinely appreciate the time you took , and I’ve learned a lot from your replies.

Really appreciate all your help — wishing you the very best. People like you genuinely make this community a better place.

 

[Tech9]

Take care and enjoy learning new things. This UDR7 unit is quite capable device, can run pretty large 2.5GbE network with some additional switches and access points. It’s a new model, may have some initial issues, but Ubiquiti support their hardware well and constantly improve the software.