US bans any new consumer-grade routers not made in America
Citing national security fears, America is effectively banning any new consumer-grade network routers made abroad.The Federal Communications Commission (FCC) has updated its Covered List to include all foreign-made consumer routers, prohibiting the approval of any new models.
For clarification, the FCC says this change does not prevent the import, sale, or use of any existing models that the agency previously authorized.
That Covered List details equipment and services covered by Section 2 of The Secure Networks Act, which, by their inclusion, are deemed to pose an unacceptable risk to US national security.
According to the FCC, this move follows a determination by a "White House-convened Executive Branch interagency body with appropriate national security expertise," in line with President Trump's National Security Strategy that the US must not be dependent on any other country for core components necessary to the nation's defense or economy.
Its determination was that foreign-produced routers introduce a supply chain vulnerability which could disrupt critical infrastructure and national defense, and pose a severe cybersecurity risk that could harm Americans.
Country that put backdoors into Cisco routers to spy on world bans foreign routers
: Unfortunately, there aren't many options unless you're StarlinkDan Robinson (The Register)
like this
mrmaplebar and SuiXi3D like this.
mr_anny
in reply to Powderhorn • • •mrbn
in reply to mr_anny • • •For the safety of the children you mean /s
mr_anny
in reply to mrbn • • •captchacrunch
in reply to mr_anny • • •mr_anny
in reply to captchacrunch • • •floquant
in reply to captchacrunch • • •Powderhorn
in reply to floquant • • •floquant
in reply to mr_anny • • •U.S. law governing telecommunications
Contributors to Wikimedia projects (Wikimedia Foundation, Inc.)Kairos
in reply to Powderhorn • • •I wonder how they define "router". Any device with two network interfaces can be made into a router.
Edit: phrasing
Steve
in reply to Kairos • • •Otherwise there is no real "routing" just "in here, out there" and vice versa.
Kairos
in reply to Steve • • •Steve
in reply to Kairos • • •Counts as multiple endpoint devices.
Kairos
in reply to Steve • • •FrederikNJS
in reply to Steve • • •Steve
in reply to FrederikNJS • • •Taasz/Woof
in reply to Steve • • •compostgoblin
in reply to Kairos • • •teawrecks
in reply to compostgoblin • • •Afaik, you'd want hardware acceleration for the actual packet routing, or it'll be quite slow/inefficient. So any ASIC for routing packets would be considered a "router".
I wonder if there exists an open router design based on an FPGA platform...
magic_smoke
in reply to teawrecks • • •Tell that to the poweredge r210 ii in my closet running PFsense with its CPU barely getting touched despite four NICS, two of them 10gbps.
You're thinking of switching hardware.
That being said I might go hit up mikrotik while I still can for switches. Shame cuz I was hoping to wait until they got PoE versions of the CRS310-8G+2S+IN, but I think they wanna get rid of the crusty old stock of CRS112-8P-4S-IN. They made a similiar newer switch but it only runs swos instead of router is which is bunk.
Ubiquiti stuff can still be flashed with openwrt so I'm good on APs I think once my dlink dies, even if it'll be overpriced.
Worst case I just buy em like I do my FPV flight controllers: from Ali Express
teawrecks
in reply to magic_smoke • • •Interesting, yeah I'm not actually well versed, that's why i began with "afaik" hah. My experience with EdgeRouter is that you basically have to enable hw offloading to get the full throughput, and my assumption was that probably all off-the-shelf routers are doing something similar for them to be usable in such a small/cheap/lower-power box.
When you say I might be thinking of "switching hardware", I assume you're referring to "managed switching", and isn't that just routing without any NAT? Like, if your pfsense router has 4 NICs, then it has to do the job of both a router and switch, no? First one, then the other for each packet?
magic_smoke
in reply to teawrecks • • •Doing routing/firewall in software is a lot more flexible, and easier to patch when vulnerabilities come out. Especially when software is integral to the routing (looking at you wireguard/openvpn).
Keep in mind those edgerouters look like they have dual core embedded MIPS CPUs.
My dell power edge is a full blown rack-mount server that could run a small plex instance. You could stick a 1060 in this thing and get Witcher 3 to play at a reasonable framerate.
That's what makes up for the lack of dedicated asics.
As for the four NICs they are as follows:
* 1gb - wan (to modem)
* 1gb - config (to config vlan on switch)
* 10gbps - main lan trunk to LAN switch
* 10gbps - trunk line to public server VM host (DMZ'd from rest of lan, each VM has its own vlan/subnet/firewall ruleset)
They don't act as a switch because it handles packets, not frames, allowing/dropping/denying them based on rules set in software.
teawrecks
in reply to magic_smoke • • •MachineFab812
in reply to Powderhorn • • •FCC and Executive Branch unilaterally try to**
That said, I don't have the money to try to import an unapproved router for personal use and then find/hire lawyers sue when its seized in customs, and am uncertain what arguments could be used in-court to affect this issue beyond for, maybe, myself ending up with a product I honestly don't plan to use, but there has to be a way beyond begging Congress-Critters for some basic crumbs of Illusion-of-Choice-masquerading-as-Consumer-Rights ... right?
Banzai51
in reply to MachineFab812 • • •MachineFab812
in reply to Banzai51 • • •Manalith
in reply to Banzai51 • • •Tharkys
in reply to Powderhorn • • •Banzai51
in reply to Tharkys • • •Bieren
in reply to Powderhorn • • •sleepundertheleaves
in reply to Bieren • • •I expect a tiering system. Free tier allows a maximum of five connected devices and integrates ads, gold tier removes the ads, platinum tier upgrades to 10 connected devices, diamond tier gives you 5G and unlimited connections.
its_me_xiphos
in reply to Powderhorn • • •Phoenixz
in reply to its_me_xiphos • • •Ding ding ding
Palantir, the copyright assholes
I can name a few more
If you want to spy on everything that all people do, their modems and traffic routers will be step one