OpenWrt/LEDE Project

Welcome to the OpenWrt/LEDE Project bug reporting and issue tracking system

Problems to be reported here are for the OpenWrt/LEDE Project targets, sources, toolchain, core packages, build procedures, distribution and infrastructure. Guidelines for submitting a good bug report can be found at the OpenWrt/LEDE Project website. Problems related to LuCI or OpenWrt packages need to be reported in their repositories:

Notifications of all submissions and task changes are sent to

OpenedIDCategoryTask Type  ascPrioritySeveritySummaryReported InStatus
04.08.20181735Base systemFeature RequestVery LowLowdeprecate pages search optimalityTrunkUnconfirmed Task Description

Currently when searching for just about any technical question, the pages show up in google search before the newer pages that are on the main url. This is confusing and leads to out-of-date information. It should be possible to de-rank without delisting the wiki pages.

08.08.20181750DocumentationFeature RequestVery LowLowProvide notification channel for release announcementsAllUnconfirmed Task Description

After installing OpenWrt on any device, I have to actively monitor the project website to know whenever a new release is available, potentially fixing security issues with my installation.

I propose creating a release-announce mailinglist used only for that purpose, readable & subscribable for everyone.

There might already be other channels offering more push-like notifications, but I didn’t find any ones that are officially sanctioned thus reliably complete.

28.08.20181821Base systemFeature RequestVery LowLowAvoid conf-opkg when package config files hasn't changeTrunkUnconfirmed Task Description


Today, during a package installation, opkg checks if a config file exists in rootfs.
If it does not match hash from package, it saves the new file with a config-opkg suffix.

Would it be possible, during a package update check if the old version hash match and avoid
creating the config-opkg file? Something like:

foreach config
   if old_pkg.hash(config) == new_pkg.hash(config)
   if not fs.exists(config)
   if fs.hash(config) == new_pkg.hash(config)

It would be even better if the /usr/lib/opkg/status somehow could be temporary saved between system upgrades to feed
old_pkg.hash(config) function. If config hashes lived outside status (like inside /usr/lib/opkg/info/pkg.conffiles), one
could simply add these files to backup. old_pkgs.hash will simply read /usr/lib/opkg/info/pkg.conffiles before it is overwritten
by the new version.

30.08.20181825KernelFeature RequestVery LowLowath79 cannot support any responsive partition table sch...TrunkUnconfirmed Task Description

Currently in ath79 the partition table are all defined as fixed partition table in device tree, instead of detecting it dynamically in the kernel.

This makes hardware modding not possible except with the firmware patched (which means that the firmware will thus receive no official support from OpenWRT).

In ar71xx, at least for TP-Link devices, we use some auto-detecting partition table driver to decide the partition table, and usually it can well suite modded hardware.

26.10.20181907Base systemFeature RequestVery LowLowPossibility of unlocking Gigabit speeds on the Netgear ...TrunkUnconfirmed Task Description

I was wondering if it would be possible to add Gigabit networking to the NETGEAR DM200 by modding the physical connectors, since from what I have seen, the chipset (Lantiq VRX220) supports Gigabit speeds, and there is a firmware which supports such speeds, however the DM200 officially supports only up to 100Mbts speeds.

When taking a look at my DM200’s board, I have noticed that the Ethernet connector only utilizes 4 out of the 8 pins, while the modem connector only utilizes 2 out of the pins, so I was thinking that it may be possible to solder the other pins (as required, of course), we may be able to “upgrade” the DM200 to Gigabit.

If the DM200 can boot properly with the Gigabit-enabled firmware, and this mod is undertaken, does anyone think that anything may come out of this?

27.10.20181910Base systemFeature RequestVery LowLowAdd Xiaomi Mi Router R3 support to base systemTrunkUnconfirmed Task Description

Please add this device. Files are implemented from Shibajee Roy.
ramips: add Xiaomi Mi Router R3 support

13.11.20181948Base systemFeature RequestVery LowLowlibubox and libubus in C++ codeAllUnconfirmed Task Description


we try to develop UBUS and UCI application in C++. For now we are not able to compile our applications without patching ubus and libubox in the following way.

[develict@DCompiler ~]$ tmux att -t 8
--- a/libubus.h
+++ b/libubus.h
@@ -14,6 +14,10 @@
 #ifndef __LIBUBUS_H
 #define __LIBUBUS_H

+#ifdef __cplusplus
+extern "C" {
 #include <libubox/avl.h>
 #include <libubox/list.h>
 #include <libubox/blobmsg.h>
@@ -414,4 +418,8 @@ static inline int ubus_unregister_event_
     return ubus_remove_object(ctx, &ev->obj);

+#ifdef __cplusplus

Is it possible to use this libraries without its patching?


17.11.20181955Base systemFeature RequestVery LowLowUbiquiti EdgeRouter X initramfs-factory.taropenwrt-18.06Unconfirmed Task Description

On there is an explanation of how to install OpenWRT on an EdgeRouter X using the tools that are standard installed on it and are used by Ubiquiti to upgrade the firmware. It seems as part of the build process a openwrt-ramips-mt7621-ubnt-erx-initramfs-factory.tar file is generated that can be used for that. But it seems you can not download it from the official site, you need to build it yourself. On the official site is an openwrt-18.06.1-ramips-mt7621-ubnt-erx-initramfs-kernel.bin file. I think that file can be used for installing using tftp, but it can’t be used with the Ubiquiti tools. Can the initramfs-factory.tar be made available to download?

08.12.20181988Base systemFeature RequestVery LowLowusbmode doesn't support HuaweiAltMode from USB_ModeSwit...TrunkUnconfirmed Task Description

USB_ModeSwitch v2.5.1 added a new option called HuaweiAltMode that isn’t present in usbmode yet. It would be great if this could be ported to usbmode as well, please.

27.12.20182028Base systemFeature RequestVery LowLowIGMP/MLD snooping on WRT3200ACM (88E6352 switch)TrunkUnconfirmed Task Description

Supply the following if possible:
- Device problem occurs on

Linksys WRT3200ACM

- Software versions of OpenWrt/LEDE release, packages, etc.

Latest OpenWRT trunk (as of 2018/12/27)

- Steps to reproduce

I’m askinf for you to add the function so I can enable switch level IGMP and MLD snooping (as the switch supports it )

Currently I have this setup:

    WAN (VLAN 12)
|  SWITCH  |--- LAN1 (VLAN 12)
    CPU (VLAN 12 and others)

In the mencioned LAN1 I have a STB, and my ISP uses IGMP for IPTV.
When the STB is running, the wan interface gets flooded with the stream, not requested by the router, only by the STB, so I’d like to enable IGMP snooping so I can stop this. This is the reason why I dont have the STB in my LAN.


27.12.20182029PackagesFeature RequestVery LowLowfw3, IPv6: create rules with hostnames instead of dest_...TrunkUnconfirmed Task Description

Currently, opening a port on fw3 to allow a local server to be reached from the Internet via IPv6, requires the hardcoding of the destination IPv6 address in the


option. Here's the example on the fw3 IPv6 Configuration Examples wiki page:

config rule
        option src       wan
        option proto     tcp
        option dest      lan
        option dest_ip   2001:db8:42::1337
        option dest_port 80
        option family    ipv6
        option target    ACCEPT

Having an hardcoded IPv6 address becomes troublesome when the public IPv6 prefix changes. This can happen regularly with some ISPs, forcing users to edit the rule.

It would much helpful if one could specify a destination hostname instead of an IP address. fw3 would then have to check the current leases and translate the hostname.

An hardcoded IP address in the firewall rules was no issue with IPv4, since on most scenarios all destination addresses were local and could be statically attributed on


. IPv6 public prefix delegation changes this and IMO requires more flexible rules on fw3.

This feature request follows the How to set up OpenWrt traffic rule for port forwarding IPv6 server on my LAN? question on SuperUser by James Johnston.

21.01.20192069PackagesFeature RequestVery LowLowAdd HSTS support to uhttpdopenwrt-18.06Unconfirmed Task Description

I’d like to be able to use HTTP Strict Transport Security (HSTS) on my uhttpd server.

21.02.20192138PackagesFeature RequestVery LowLowmwan3-luci: sort order of shown interfaces not like as ...TrunkUnconfirmed Task Description

on current trunk
it hurts, that the ORDER on the mwan3 graphs is different as ORDERED on configuration of mwan3.
is it possible to fix that ?
sorry, i don’T know how i could fix that by myself and to provide a fix for it.

root@router02.dreamteam:/root # opkg list-installed | grep mwan3
luci-app-mwan3 - git-19.043.27122-eda8f02-1
mwan3 - 2.7.10-1

cu Erwin


21.04.20192248PackagesFeature RequestVery LowLowuhttpd: implement ubus event listener via Server-Sent E...TrunkWaiting on reporter Task Description

As a web developer I would benefit from having the possibility to send events from the server to the browser so the browser can react to it dynamically.

The proposed implementation is the leanest possible.

A SSE (Server-Sent Event) is a simple protocol on top of basic http polling to send messages from the http server to the browser for the purpose of instant notifications.
It comes implemented in all major browsers, including mobile.

If paired with `ubus listen` or `ubus monitor`, a seamless integration with the ubus pipeline could be implemented.

We tried to implement it by adding an option in this line of code but got stuck in our lack of corutine mechanisms and how uhttpd works.

The difference with the call and list options is that this one should be long-lived and progressive, preventing the dreaded polling from the web (also, better us of resources, more elegant implementation, etc).

As an example, a very basic implementation of a SSE server in php:

header('Content-Type: text/event-stream');
header('Cache-Control: no-cache');

echo "data: \"hello world\"" . PHP_EOL;
echo PHP_EOL;
echo "data: \"goodbye world\"" . PHP_EOL;
echo PHP_EOL;

An example of a very basic implementation of a SSE client in HTML:

	var source = new EventSource("demo_sse.php");
	source.onmessage = function(event) {
		document.getElementById("result").innerHTML += + "<br>";
04.05.20192267WebsiteFeature RequestVery Upgrade from Debian 8 to 9, offe...TrunkUnconfirmed Task Description

The webserver on currently only offers AES, Camellia and 3DES ciphersuites for HTTPS connections, since the server is running Debian 8, nginx 1.6.2 and OpenSSL 1.0.1t.

An upgrade to Debian 9 with nginx 1.10.3 and OpenSSL 1.1.0j would be appreciated since this would enable the webserver to offer ChaCha20 ciphersuites, which offer a huge performance increase for embedded devices without AES-NI or similar hardware acceleration for AES.

24.05.20192292KernelFeature RequestVery LowLowSupport AWS ENA NICTrunkUnconfirmed Task Description


it’s possible to provide the ena kernel driver as separat module/package? The latest generation of EC2 requires the usage of ENA and this driver is inside the official linux long time ago.

Kernel Module:

ENA documentation:

19.06.20192331Base systemFeature RequestVery LowLowPackage request: libbpf packageTrunkUnconfirmed Task Description

Needed for many types of eBPF usage:

26.06.20192341Base systemFeature RequestVery LowLowFeature Request: nslookup - support SRV queriesAllUnconfirmed Task Description

Could support for SRV requests be added to the patch

Currently I am working on setting up a service for freifunk which uses SRV records. Unfortunately I have to install bind-host and all it’s dependencies to make the DNS query. It would be great if the built-in busybox nslookup supported this.

@jow- seems to have done a bit of work on nslookup in the past.

Any support would be appreciated.


29.06.20192344KernelFeature RequestVery LowLowadd VRF supportAllUnconfirmed Task Description

Virtual Routing and Forwarding (VRF) would appear to be a perfect companion for a router device, considering its benefits

* higher priority ip rules (Policy Based Routing, PBR)
* iproute2 supports the vrf
* unix socket routing
* impacts only Layer 3 and above so L2 tools (e.g., LLDP) are not affected
* VRF devices allow VRFs to be nested within namespaces

Unfortunately, support for VRF is currently absent from the OpenWRT repo in all version.


14.11.20192596Base systemFeature RequestVery LowLowSupport using environment variable CCACHE_DIR to determ...TrunkUnconfirmed Task Description

Right now, the CCACHE_DIR is set unconditionally to ${STAGING_DIR}/ccache.

This is great if you’re going to have a single build tree, but for large team that are working closely together on an OpenWRT based firmware, where multiple development branches might be in use simultaneously, this is wasteful.

At least in my environment, I want to set the ccache directory to be outside of the build tree, so that multiple build trees can share a cache.

Because OpenWRT sets this variable unconditionally, instead of respecting the external environment’s CCACHE_DIR, or even allowing for the path to be set in .config, I have to patch the build tree to set the CCACHE_DIR that I want to use.

25.11.20192630KernelFeature RequestVery LowLowconsider building netconsole into kernel (or as module)openwrt-18.06Unconfirmed Task Description

I have intermittent problems with my TP-Link (ipq806x) router locking up or rebooting. During these events, it’s rare to have anything in the logs (written to local persistent storage) or to the configured remote syslog server.

I looked into enabling netconsole in an effort to catch kernel messages during an event, but:

~/openwrt/openwrt-imagebuilder-18.06.4-ipq806x.Linux-x86_64$ find . -type f -exec grep -H NETCONSOLE {} \;
./build_dir/target-arm_cortex-a15+neon-vfpv4_musl_eabi/linux-ipq806x/linux-4.14.131/.config:# CONFIG_NETCONSOLE is not set
./target/linux/generic/config-4.9:# CONFIG_NETCONSOLE is not set
./target/linux/generic/config-4.14:# CONFIG_NETCONSOLE is not set

please consider building netconsole either into the kernel or as a loadable module.

09.05.2017772PackagesFeature RequestVery LowVery LowAllowing Snort to also block possibly using SnortSamTrunkUnconfirmed Task Description

I noticed that Snort is available from the packages. I wanted to inquire if it would be possible to intergrate dynamic blocking through software such as SnortSam (

pfSence implements a blocking feature with Snort, I’m curious if others may be likewise be interested in this feature being added in to a future release of LEDE.


07.03.20181415Base systemFeature RequestVery LowVery Low[Enhancement] Consider shorter interface-name prefixesTrunkUnconfirmed Task Description

Given that `IFNAMSIZ` is typically 16, there are 15 characters available for an interface name.

OpenWRT prepends a prefix that can be at least 6 characters `gre4t-` as an example.

If one then creates pseudo/virtual-interfaces using VLAN notation, there are only 4 characters available for configuration


As long as this limitation is known, there is no loss of functionality, only utility in the naming. I would have ideally been able to name my tunnels with a more readable indication of where the other endpoint was, for example `portal1` rather than `gt99`.

At some time in the future, shortening these generated prefixes would be welcome. I acknowledge that this likely impacts only a small fraction of advanced users and a change may impact scripts that rely on the generated name.


11.05.20192278Base systemFeature RequestVery LowVery LowRFE: Replace iptables(legacy) with iptables(nf_tables)TrunkUnconfirmed Task Description

Supported since iptables 1.8:

14.09.20192494Base systemFeature RequestVery LowVery LowImplement system to allow LuCI to display messages prio...AllUnconfirmed Task Description

Currently there is no system to alert users to possible issues they may encounter when flashing a new image. This has led to certain features being delayed or even withheld (the switch from swconfig → DSA is a good example). Simply put there is no way to alert the average user to configuration breaking changes a new image might make.

A short header that contains important information could be inserted into OpenWrt images. The header is parsed and displayed via LuCI if certain criteria are/aren’t met. This could be something as simple as a image version check or something more complex like configuration and package comparisons.

This is really more of a forward looking feature, but it would allow more drastic changes (changes that cannot be migrated) be made between OpenWrt versions.

Showing tasks 1101 - 1125 of 1125 Page 23 of 23<<First - 19 - 20 - 21 - 22 - 23

Available keyboard shortcuts


Task Details

Task Editing