Banana Pi has released a new WiFi 7 router board called the BPI-R4. This router board is powered by the MediaTek MT7988A (Filogic 880) quad-core Arm Corex-A73 processor. It features 4GB DDR4 RAM, 8GB eMMC flash, and 128MB SPI-NAND flash.

The BPI-R4 also includes two 10GbE SFP cages, four Gigabit Ethernet RJ45 ports, a USB 3.2 port, an M.2 socket for a 4G/5G modem or an NVMe SSD, and two mini PCIe slots with PCIe 3.0 to support WiFi 7.

The specifications of the Banana Pi BPI-R4 are as follows:

• SoC: MediaTek MT7988A (Filogic 880) quad-core Arm Corex-A73 processor @ 1.8GHz with AI-powered packet accelerator
• System Memory: 4GB DDR4
• Storage: 8GB eMMC flash, 128MB SPI NAND Flash, microSD card slot, M.2 Key M for NVMe SSD
• Networking: 2x 10GbE SFP cages, 4x Gigabit Ethernet RJ45 ports
• USB: USB 3.2 port
• Expansion: M.2 Key-B slot with USB 3.2 interface for 5G or 4G LTE connectivity, M.2 Key-M slot with 1-lane PCIe 3.0 for NVMe SSD, 2x mini PCIe slots with 2-lane PCIe 3.0 for Wi-Fi 7 NIC, 26-pin GPIO header for expansion
• Debugging: 3-pin header for 3.3V serial console
• Misc: Reset button, WPS button, bootstrap switch, RTC battery connector
• Power Supply: 12V/5.2A or 19V/3.2A via DC jack, 20V DC input via header, optional PoE module (RT5400), 5V/12V output header
• Dimensions: 148 x 100.5 mm
• Weight: 250 grams

The Banana Pi BPI-R4 currently has three OpenWrt images available for eMMC, NAND flash, or microSD card boot. A Debian image is also in development. The board does not come with a WiFi 7 module by default but can support it through the two mini PCIe sockets.

The WiFi 7 iPA NIC Module, which can be added to the BPI-R4, is based on a four-chip design with MediaTek MT7996 (WiFi 7 tri-band BE19000 SoC), MT7995N (2.4 GHz WiFi), MT7977AN (6 GHz), and MT7977B (6 GHz).

The Banana Pi BPI-R4 is available for purchase on Aliexpress for $103.15, but the WiFi 7 card must be purchased separately. Coupon codes are available for discounts during the Black Friday promotion.

Overall, the Banana Pi BPI-R4 is a powerful WiFi 7 router board with a range of features and expandability options.

Source: CNX Software – Embedded Systems News.

Netgate, the provider of pfSense Community Edition (CE) software, has announced the release of version 2.7.1. pfSense CE is an open-source project that has been supported by Netgate since 2008. The source code for the project is available on GitHub under the Apache 2.0 open-source license. pfSense CE can be used on common hardware to build routers and more.

One major change in this release is the upgrade of OpenSSL to version 3.0.12. This upgrade was necessary as OpenSSL 1.1.1 has reached its End of Life and will no longer receive security patches. With the upgrade to OpenSSL 3.0.12, older and weaker encryption and hash algorithms have been removed, and security certificates based on these algorithms have been deprecated. It is highly recommended to review the release notes and Netgate’s blog post on this topic before performing the upgrade.

Another notable feature in version 2.7.1 is the addition of Kea DHCP as an opt-in feature. While basic functionality is present, it is not yet feature-complete. Switching to the Kea DHCP server can be done through the web interface by navigating to System > Advanced and changing the server backend radio button in the DHCP Options section to “Kea DHCP”. It is important to note that switching to Kea DHCP may result in ignored hostnames for devices on the network that were assigned using static leases or rely on dynamic lease registration in DNS.

This release also includes improved support for SCTP (Stream Control Transmission Protocol) in PF for firewall rules, NAT, and logging. Rules can now act on SCTP packets by port number, whereas previously it was only possible to filter on source or destination address. Additionally, the IPv6 Router Advertisement configuration has been relocated to Services > Router Advertisement as part of the ongoing integration of the Kea DHCP server.

Other changes in version 2.7.1 include the upgrade of PHP to version 8.2.11 and the base operating system to a more recent point of FreeBSD 14-CURRENT. The release also addresses various bugs and issues.

Source: pfSense.

Netgate has announced the Release Candidate (RC) of pfSense CE software version 2.7.1. This open-source project, supported by Netgate since 2008, is a widely-used firewall and routing platform. The RC release is an opportunity for users to try out the new version and provide feedback.

The major changes and features in pfSense CE software version 2.7.1 include:

1. Upgraded OpenSSL to version 3.0.12: This upgrade was necessary as OpenSSL 1.1.1 has reached its End of Life and will no longer receive security patches. The upgrade removes older and weaker encryption and hash algorithms, improving security.

2. Kea DHCP added as an opt-in feature: The Kea DHCP server is now available as an optional feature. While it is not feature complete in this version, users can switch to Kea DHCP by navigating to the System > Advanced menu and changing the DHCP Options to “Kea DHCP”. However, switching to Kea DHCP may result in the ignoring of assigned hostnames and dynamic lease registration in DNS.

3. Improved support for SCTP: Support for SCTP in firewall rules, NAT, and logging has been enhanced. Users can now filter SCTP packets by port number, in addition to source and destination address.

4. IPv6 Router Configuration moved: The IPv6 Router Advertisement configuration has been relocated to Services > Router Advertisement as part of the integration with the Kea DHCP server.

Other changes in this release include upgrading PHP to version 8.2.11, upgrading the base operating system to a more recent point of FreeBSD 14-CURRENT, and addressing various bugs and issues.

Testing of the RC software release is crucial to ensure its reliability and robustness for all users. Netgate encourages users to download and test the release candidate, and provide feedback on any issues they encounter.

To install the upgrade, users can follow the detailed Upgrade Guide available in the pfSense documentation. It is recommended to back up the pfSense CE configuration prior to the upgrade. The upgrade can be performed through the web interface by navigating to System > Update and setting the Branch to “Next Stable Version (2.7.1-RC)”.

OpenWrt 23.05, the open-source Linux operating system for routers and resource-constrained headless embedded systems, has just been released with significant updates and improvements. This release comes with over 4300 commits since the previous release of OpenWrt 22.03, which was launched a little over a year ago.

One of the notable features of OpenWrt 23.05 is its expanded device support. It now supports over 1790 devices, which is an increase of about 200 devices compared to the previous release. Some of the new targets include the Qualcomm IPQ807x target for WiFi 6 SoCs, the Mediatek Filogic 830 and 630 subtarget for WiFi 6/6e chips, and the HiFive Unleashed and Unmatched targets for RISC-V development boards.

In terms of security, OpenWrt 23.05 has switched from using wolfSSL to MbedTLS as the default. This change was made because MbedTLS has a smaller footprint and offers a more stable ABI and LTS releases. However, it’s worth noting that MbedTLS lacks support for TLS 1.3. Therefore, users who require TLS 1.3 can still switch to using wolfSSL.

Another significant addition in this release is support for packages written with the Rust programming language. Some examples of these packages include bottom, maturin, aardvark-dns, and ripgrep. This expansion of supported programming languages provides developers with more flexibility and options when creating applications for OpenWrt.

OpenWrt 23.05 also brings updates to its core components. It now utilizes Linux 5.15 as the foundation for all targets, as well as updated versions of busybox, musl libc, glibc, gcc, and inutils. Additionally, the networking components have seen upgrades, including the use of the hostapd master snapshot from September 2023, dnsmasq 2.89, dropbear 2022.82, and cfg80211/mac80211 from kernel 6.1.24.

For users looking to upgrade from OpenWrt 22.03, the migration from swconfig to DSA configuration that was introduced in the previous releases is no longer an issue. Most people should be able to upgrade smoothly using the sysupgrade utility, which will preserve the configuration. However, it is still recommended to back up the configuration before proceeding with the upgrade.

OpenWrt 23.05 is now available for download, and users can find binary images for their specific targets on the OpenWrt website.

Source: CNX Software – Embedded Systems News.

GL.iNet has released the Flint2 (also known as GL-MT6000), a new AX6000 router based on the MediaTek MT7986 (Filogic 830) ARM SoC. This router supports VPN speeds of up to 900 Mbps using WireGuard and 190 Mbps with OpenVPN. Compared to previous GL.iNet routers like the Spitz AX and the Beryl AX, which were based on the Filogic 820 (MT7981B) CPU with transfer rates of up to 300 Mbps using WireGuard, the Flint2 is expected to triple the VPN performance.

The GL.iNet Flint2 router comes with the following specifications:

• SoC – MediaTek MT7986 (Filogic 830) quad-core Arm Cortex-A53 processor @ 2.0 GHz with hardware acceleration engines for Wi-Fi offloading and networking
• System Memory – 1GB DDR4
• Storage – 8GB eMMC flash
• Networking:
  • 2x 2.5 Gbps Ethernet ports
  • 4x Gigabit Ethernet LAN ports
  • 802.11b/g/n/ac/ax WiFi 6 with 4x external Wi-Fi antennas
    • Up to 1,148 Mbps @ 2.4 GHz
    • Up to 4,804 Mbps @ 5 GHz
    • DFS (Dynamic Frequency Selection) support
  • VPN – OpenVPN server/client tested up to 190 Mbps, and WireGuard server/client tested up to 900 Mbps (tests over Ethernet in client mode)
• USB – 1x USB 3.0 Type-A port
• Dimensions – 233 x 137 x 57mm

The GL.iNet Flint2 router comes pre-installed with OpenWrt 23.05 (or a fork) with Linux 5.15 and the GL.Inet Admin Panel, which is common to all GL.iNet routers. It supports four different network modes: router, access point, extender, and WDS. The router also includes features such as AdGuard Home, parental controls, and Cloud remote management.

The significant improvement in WireGuard performance, tripling the previous model’s speed, is noteworthy. While the upgrade from a 1.3 GHz dual-core Arm Cortex-A53 CPU to a 2.0 GHz quad-core Cortex-A53 CPU partially explains the increase, the main reason is likely the switch from Linux 5.4 to Linux 5.15. The Filogic 830-based router benefits from in-kernel WireGuard support introduced in Linux 5.6. As a point of comparison, the first Flint router achieves speeds of up to 500 Mbps with WireGuard.

The Filogic 830 SoC used in the Flint2 is also found in other devices, such as the Banana Pi BPI-R3 and BPI-R3 Mini router SBCs.

Source: CNX Software – Embedded Systems News.

The PALMSHELL NeXT H2 is an affordable micro server and single-board computer (SBC) powered by an AMD Ryzen Embedded R1505G processor. It offers impressive networking capabilities with two 10GbE SFP+ cages and one 2.5GbE RJ45 port. The system also supports up to 32GB of RAM and has storage options including an M.2 NVMe SSD and two SATA drives. It features wireless connectivity options such as WiFi 6, Bluetooth 5.2, and the possibility of adding a 4G LTE or 5G module. These network features make it an interesting option for various homelab uses. Theoretically, the device could support ECC memory as the Ryzen Embedded R1505G has such support, but this is not mentioned in the specifications for the NeXT H2 specifications, although it is mentioned in the specifications for the CPU. It should be noted that such support also depends on motherboard and firmware, not just on the CPU.

The system is equipped with a customized copper heatsink and a 3000 RPM PWM speed control fan for efficient cooling. It can be powered by a 12V to 19V DC power supply. The PALMSHELL NeXT H2 is designed to support multiple operating systems, including Ubuntu, Arch Linux, Fedora, Debian, OpenWrt, Windows, pfSense, and ROS.

The SBC without memory, storage, or wireless connectivity starts at $199. The barebone model with a metal enclosure is priced at $249. Two models with 8GB RAM/256GB SSD and 16GB/512GB configurations, along with the Intel AX210NGW WiFi 6E/BT 5.2 module, are available for $299 and $349, respectively. Power supply is not included with any of the options.

Source: CNX Software – Embedded Systems News.