Complex powerful SOHO router with throughput 2.5 Gb/s, 4G/5G support and added memory for operation of lxc containers with its own software is the ultimate CPE device or management interface for high VPN throughput, the combination of several independent connections or the application of your own software.
Main Advantages
- Integration of 3 sources of connectivity - Metallic, optical, 4G/5G
- Automatic firewall updates, firmware and OS
- Powerful 1.6 GHz CPU - high VPN throughput under load
- Distributed adaptive firewall - automatic response to attacks worldwide in real time, averaging 5,000 updates per day
- IoT integration through GPIO header
- 8 GB eMMC, mSATA option - additional memory for custom applications
- 4G/5G support
- Support operating own SW on Linux distribution
- The design of the device and its production takes place under the heading CZ.NIC in the Czech Republic
Hardware Specification
- CPU: Marvell Armada 385, dual-core 1.6 GHz
- Memory: 2 GB DDR3
- Storage: 8 GB eMMC
- LAN port: 5x 10/100/1000 Mbps (RJ-45)
- WAN port: 1x 10/100/1000 Mbps (RJ-45) + SFP up to 2.5 Gb
- External ports: 2x USB 3.0 (5 V, 1.5 A power output)
- Internal interfaces: 1x UART (4 pins header), 1x miniPCIe/mSATA, 1x miniPCIe (without USB and SIM lock), 1x miniPCIe (with USB and SIM lock), 1x 5-pin power connector (3 V, 5 V, 12 V) for SATA drives, 2x 10-pin GPIO connector (GPIO, SPI, I2C, UART), 1x 20-pin JTAG (CPU), 1x 10-pin Programming connector (MCU)
- Button and switch: Reset, LED intensity
Appearance
- Size (width x height x depth): 190 x 40 x 135 mm
- Weight: 1130 g
Power Supply
- AC input: 100–240 V/1.0 A
- Power frequency: 50/60 Hz, single phase
- DC output: 12 V/3.33 A
- Power consumption: 5–40 W max (depends on connected peripheries)
Temperature
- Operating temperature: 0°C to 40°C (40°F to 104°F)
- Storage temperature: -20°C to 60°C (-5°F to 140°F)
- Relative humidity: 10% to 90% RH
- Certification: CE
- Wi-Fi certification: CE, FCC
Network
- Internet connection: By default: Dynamic IP, Static IP, PPPoE; other via CLI
- Port forwarding: Setup via web UI or via SSH
- Maximum port forwarding rules: Unlimited
- Maximum UPnP rules: Unlimited
Port Triggering
- Maximum port triggering rules: Unlimited
- Minimum port triggering timeouts: Unlimited
- DMZ: Yes
- Network standards: IPv4, IPv6 (DHCPv6 client, server, prefix delegation and RA) by default, OSPF, BGP, NAT64 and DN64 by packages
- DHCP: Server/client mode, client list, MAC address reservation
- Maximum DHCP reservations: Unlimited
LAN/WLAN IGMP Snooping
- VPN: OpenVPN server/client directly in WebUI; Wireguard and IPSec via CLI/LuCI
Policy Route, Static Route, Network Address Translation (NAT), PPPoE Relay
- Maximum IPv4 static routes: Unlimited
- Maximum IPv6 static routes: Unlimited
- Diagnosis tools: Any Linux package
Management
- Operating system: Turris OS, open source, based on OpenWrt, endless SW extensibility by Linux packages
- Free OS upgrade: Frequent automatic security and feature updates
- Remote access: VPN, SSH
- Operation modes: Router, Wireless AP, Wireless Client, Standalone Server
- Maximum connected devices: Unlimited
- Notification: E-mail, WebUI
- SSH: Yes
- SNMP: By third party packages
- Configuration, backup & restore: Yes, simple Foris UI, advanced LuCI or SSH, UART serial bus accesible, easy reflash from USB drive or Internet; Optional backup to your own server via SFTP/Webdav
Parental Control
- Customized Internet schedule: Via advanced user interface LuCI
- DNS-based web-filter with built-in database, customized allow/block list: Via third party application installable into LuCI
- Maximum devices: Unlimited
- Maximum blocked URLs: Unlimited
- Maximum allowed URLs: Unlimited
Traffic Control
- Internet ban, device speed & priority: Yes
- Maximum device rules: Unlimited
- Maximum application rules per device: Unlimited
- Traffic monitoring with history: Yes, using deep packet inspection
Security
- Wi-Fi encryption: WEP, WPA/WPA2/WPA3-Personal, WPA/WPA2/WPA3-Enterprise
- Wi-Fi MAC address filter: Yes
- Firewall/SPI firewall: Yes, with unlimited settings
- Cybersecurity features: Yes, optional central-maintained, dynamic firewall, netflow monitoring and basic IDS integration
- Special security features: Honeypots and minipots that are getting informations about attacker and share them with other Turris routers
File Service
- File system: EXT2/3/4, Btrfs, FAT, NTFS, HFS+, exFAT (depending on installed packages)
- Access support: Web browser, SSH
- Protocol support: SMB, DLNA, FTP/FTPS/SFTP, WebDAV
- Apple Time Machine support: Via third party application installable into LuCI
- Shared folder privileges: Manageable by Linux permissions
- Storage hibernation: Yes
- DNS server: Based on high quality, secure and high performance Knot DNS resolver with DNSSEC
- Download protocols: Support depending on installed packages
- Maximum concurrent download tasks: Unlimited
- Maximum concurrent BT download tasks: Unlimited
- Media server (DLNA/UPnP): Yes
- RADIUS server: Via CLI
- Maximum connections: Unlimited