[PSA] Newer TP-Link Routers send ALL your web traffic to 3rd party servers

Oh well. Only people who have something to hide will worry about this.

This is maybe a stupid suggestion, but can you install openwrt/ddwrt on it? Probably it would remove that feature (unless it’s somehow baked in a chip), and would give you additional features.

After I heard about them doing this I decided to leave them in the first. Was about to redo the home network too

Wow. I have some decos set up as access points (not routers) so it shouldn’t impact me. They’re now on my shitlist and won’t be on the list when I upgrade

Does not seem to be the case with the AX3200 though

does this apply if I use their router in AP mode?

This submission has been deleted in protest against reddit’s API changes (June 2023) that kills 3rd party apps.

How does one buy a honest router these days? I am not looking for lights or fancy design, I just want a device that can run ddwrt and has a couple of nics.

btw the cloudflare gateway is called clouflare zero trust, search for that and you can get it setup for one location (e.g. home) for free, although you still have to put in a credit card for $0. In any case I got it setup and added the ipv4 and v6 DNSs to my archer, let’s see what happens.

Update: i’ve been running my archer A20 v3 firmware 1.0.3 Build 20191026 rel.16299(5553) through the cloudflare zero trust for several hours now, homecare is completely turned off, i’m not seeing requests to *avira.com in the cloudflare logs, this must be for really really new tp-link routers.

So that’s why my upload performance sucks… /s

What’s the easiest way to check if my tp-link router is doing this too?

I have a TP-Link range extender, are these affected too, or only routers?

For what it’s worth I just tried this on my AX1800 (Archer AX21) and didn’t see anything out of the ordinary

I opened a ticket with TP link a few days ago, and they at least manually asked for the information from me after the initial automated stuff.

Dang it. I just got one since it was on sale on Costco. Shame shame. I guess this will be returned soon enough.

If you want to easily check your own router, you can use any DNS Gateway (NextDNS, Cloudflare GatewayPi-Hole etc.) Just be sure to set the DNS servers under"Advanced->Network->Internet->Advanced Settings" because theDHCP DNS server setting will only apply to the devices inside thenetwork, not the router itself.

Hi, I tried this to my PiHole (192.168.1.1 for my router, 192.168.1.128 for my PiHole), but the router keeps telling me that :

To avoid IP conflict with the front-end device, your routers IP address has been changed to 192.168.0.1.

My PiHole is my DHCP server, and the one on the router is disabled, could it explain ?

I also tried to force the IP address of the router to 192.168.1.1 in the DHCP server of the PiHole.

Someone has a solution ?

Edit : For the moment I set a Cloudflare gateway, it seems I’m not affected by the issue, AX3000, Europe (Special firmware to avoid problems with GDPR here ?)

A noob question: others proposed using a DIY router like OpenWRT. Would these TP-Link routers still send data if you used a custom router and put those TP-Links as access points? Or they would still be making requests, but you can filter them because they’re being passed through your gateway? Thanks… and either way–doesn’t look good. :frowning:

I’m currently using NextDns cli on my pi400 and put my pi400 ip in dhcp in the deco app.
Do I need to do anything else?

Running an er605 vpn router seems unaffected

I might be missing this said somewhere, but is it actually sending any sensitive data in each DNS request? Like does the subdomain contain info on your private network traffic? Or is it just trying to repeatedly resolve a few of their own domains. If the latter, then that does not seem like much of a risk outside of increased resource usage.