|Router Security||Turris Omnia Router||
Website by |
In June 2018, I was lent a Turris Omnia to kick the tires on. This page will be update as I learn more and try it out...
The Turris Omnia may have been the first router sold for its security features. It is fully open source, both the hardware and software. The OS is called TurrisOS and its based on OpenWRT. It is from CZ.NIC, a non-profit organization in the Czech Republic.
The Omnia may have been the first router that self-updated its firmware. It includes NAS features and can serve as a DNLA (Digital Living Network Alliance) server. It is said to analyze the data traffic and identify suspicious data flows. It then alerts the home office of a possible attack. Data from other Turris routers is collected to asses the security status of the detected traffic. If its something bad, updates are sent to all the routers. It is also multi-WAN.
The target audience of the Omnia is very similar to that of the Pepwave Surf SOHO, techies. You don't have to be a networking or hardware expert, but their documentation assumes you know what a pigtail and a diplexer are.
Turris, like many other routers, can collect data. Peplink does not do this. But while other vendors may do it for marketing reasons, Turris does it to research attacks. Quoting their description of this optional feature:
"If you own the Turris Omnia router, you can join the research project called Project:Turris and ... contribute your data. In return you can check the statistics about your connection and attacks to your router. We will also contact you if ... our analyses reveals a potential threat in your network ... If the data collection is enabled ... either disable the emulated services (so-called minipots, which emulate services that are a common target of internet attackers) or you can choose whether you opt-in for the collection of credentials entered by the attackers."
Compare and contrast the two routers on big things:
Compare and contrast the two routers on small things:
Shipments were initially expected to start in April 2016, then in Oct. 2016, then in Dec. 2016. By May 2017 it was for sale in roughly 25 countries, including Germany, Ireland, Greece, Austria, Switzerland, Spain, Belgium, Denmark, France, Finland, Italy, Poland, and England. As of June 2018, it was available all over Europe, but not in the U.S.
Like Eddie Murphy in the 1988 movie, the Omnia router is Coming to America. In June 2017, the company said they were working on FCC certification for the U.S. They guessed, at the time, that it would go on sale in the U.S. in the Fall of 2017. As of June 2018, FCC approval is expected in October 2018. Union Technology Cooperative of Middleton, WI plans on selling it in the US, after FCC approval. They plan to localize it for the US, test it and ship it with the latest software. They expect to sell it for $349 (not sure if thats with 1GB or 2GB of ram).
One clump of documentation is at doc.turris.cz/doc/en/start
Another clump of documentation is at doc.turris.cz/doc/en/howto/start
Video Tutorials are at doc.turris.cz/doc/en/howto/video
Links to all the manuals are at: doc.turris.cz/doc/en/howto/omnia_manuals
First thing: doc.turris.cz/doc/_media/en/howto/omnia_manual_en.pdf. Four pages of initial hardware setup, an overview of the lights, ports and connectors and instructions for a factory reset.
Initial setup and Foris: doc.turris.cz/doc/en/howto/foris. Foris is the name of the simple web based user interface. There is a second interface with advanced features called LuCI.
There are three different generations of the Omnia router. See what they look like at doc.turris.cz/doc/en/howto/turris_versions
Turris offers to answer questions emailed to info at turris.cz
I have found very few reviews of the Omnia router. If you know of any not shown here, please let me know by emai (see bottom of the page).
Finally, the Omnia can also run the Next Generation Firewall, Untangle. The Home edition of Untangle costs $50/year to license. It runs on PCs, their own appliances, the Omnia and the Linksys WRT1900ACS. (thanks to Joe for the heads up)