OpenWRT will natively support NextDNS in upcoming 19.07.0 release

1. OpenWRT for the most flexibility but you have to edit config files for the more obscure stuff. Tends to take more memory/CPU than others and tends not to run well on older hardware. An entire platform.

2. DD-WRT for the most features available from the web interface. Older versions are suggested for older hardware but that might have security implications.

3. Tomato for the easiest and nicest web configuration interface. Does not support as wide a range of hardware as the others. Might also have issues with older hardware for more obscure features.

Tomato hasn't had a stable release in 9 years.

OPEN-WRT is a fork of DD-WRT. Lede was a fork of OPEN-WRT, but has remerged with OPEN-WRT. OPEN-WRT is the best firmware for home routers/access points in my opinion.

I don't know that there is one.

My experience these days when I install a new wifi router is wading through pages and pages of forum posts to try and identify the firmware (or particular build thereof) that will work best on the particular hardware I am configuring that day.

Usually, after a few hours of digging, I sort of "converge" on a particular firmware and a particular release.

Then it's on to experimenting if the thing actually works. If it doesn't, rinse and repeat.

This is very frustrating, and for a number of reasons:

    - From a security perspective, you end up installing a random unvetted piece of binary software on what is basically the gate holding the fort secure.

    - You operate on hearsay (forum posts)

    - There is no guarantee the process will converge.

The days of a $50 router in the home having great software seem to be over.

OWE = Opportunistic Wireless Encryption, previously if your WiFi has no password everybody can passively snoop all the packets, so it makes sense to use a password even if you tell everybody what it is, like FreeWiFiHere - so that an active attack would be needed to steal data and you've some chance to detect it. OWE says wait, why not use ephemeral keys even if there's no password and then you only set a password if you actually wanted to deny access to people who don't know the shared password.

With the common ‘social-graph trackers’ apps list tab, toggling WhatsApp if you have to text with a European or Instagram if you want to post is easy, for instance.

Or, leverage the NextDNS app, and use the giant toggle button.

>Get in-depth analytics about your Internet traffic.

>Shield your kids from adult content.

Do you use NextDNS as a way to monitor your children online?

I would imagine the performance of settings it on pihole would be unnoticeable, as it also stores blacklist in memory. The only latency difference would be in network request likely.

I should definitely do some benchmarks though. There are occasional times where I feel like DNS lookups take significantly longer than normal but that’s once in a blue moon.