Hardware

Rule: only routers with official OpenWrt support (an ImageBuilder profile in the current release). It is what lets us build our own image, keep the agent in the read-only part (survives factory reset) and get security updates.

Sold product (to decide)

What matters is CPU (WireGuard encryption) and 5 GHz Wi-Fi, not gigabit ports: hotel and mobile uplinks rarely exceed 100 Mbps.

Router	Price (approx., Oct 2026)	OpenWrt 25.12	CPU	Notes
Cudy TR1200	€25–30	✅ ramips/mt76x8 cudy_tr1200-v1	MT7628, 1× MIPS 580 MHz	128 MB RAM, 16 MB flash, 100 Mbps ports, dual band. In hand: the worst case to test.
GL.iNet Mango 2 (GL-MG1300)	$40–50	❌ not yet	MediaTek 2× 880 MHz (MT7621 family suspected)	128 MB RAM, 128 MB NAND, gigabit, dual band, new (Aug 2026), not sold in the US. Check chip and GL firmware base on a unit.
GL.iNet Slate Plus (GL-A1300)	€70–74	✅ ipq40xx	4× ARM 717 MHz	256 MB RAM, 128 MB NAND, gigabit
GL.iNet Beryl (GL-MT1300)	~€88	✅ ramips/mt7621	MT7621	Wholesale only, likely end of life
GL.iNet Beryl AX (GL-MT3000) / Cudy TR3000	$65–90	✅ mediatek/filogic	MT7981, 2× ARM 1.3 GHz	Best fit, too expensive for now
~~GL.iNet Opal (GL-SFT1200)~~		❌	Siflower SF19A2890	Vendor OpenWrt 18.06 / kernel 4.14 only: ruled out

Decision path: measure WireGuard throughput on the Cudy TR1200. If enough for video calls, the cheap class works; otherwise Slate Plus now, or Mango 2 once supported.

Test hardware

Device	Image	Role
x86 mini PCs (2)	x86/64 generic, squashfs	Home router on the bench; lab, CI runner (Proxmox) later
Cudy TR1200	ramips/mt76x8 cudy_tr1200-v1	Travel router
Yuncore AX835 APs (2)	mediatek/filogic yuncore_ax835	Home router as Wi-Fi client of the ISP box (check ubus call system board first)
OpenWrt arm64 VMs	armsr/armv8	Lab on a Mac (QEMU + HVF)

Footprint (agent 0.4)

	arm64	mipsle
Binary (stripped)	~8 MB	~9.5 MB
In flash (xz, squashfs)	~2.3 MB	~2.2 MB
RSS on OpenWrt	8.4 MB

Image sizes: Cudy TR1200 9.0 MB (16 MB flash), Yuncore AX835 12.1 MB (14.5 MB firmware partition).