With the other two posts about threats to routers, I thought I should recommend a router. I will only use one brand of router these days – Synology. I started using their routers because I liked the features, but then I saw how often they update the firmware (router operating system). I would hear about some vulnerability and then shortly thereafter I would receive a notification from my Synology routers that there was an update available. This was almost always for the vulnerability I just heard about.
One of the worst thing about some consumer routers is that they are rarely updated. Even the better brands may not receive updates frequently. Then there is the router owner. How often do normal people check if their router is up-to-date? Not often. Synology routers can be configured to check daily for updates and automatically install them. This way you don’t have to think about it.
In addition to updates, Synology routers do not appear to be affected by the various UPnP issues. I have tested both of my models (RT2600ac and RT1900ac) and neither failed, nor are these routers listed in the Akamai whitepaper UPnProxy: blackhat proxies via NAT injections. I am familiar with opening ports, but I actually allow UPnP with this router. I still check what ports are open and why. I don’t want some malware on one of my computers opening a port to allow more bad things in.
With all this praise, I am not saying these routers are perfect because no router is. I am also not saying these are the most secure routers made, however, I have owned many routers and these are my favorite so far and I am pleased with the security. I find they are suitable for both router novices and experts alike.
The more powerful of the two models is the RT2600ac and costs about $200: https://www.synology.com/en-us/products/RT2600ac
The previous model was the RT1900ac, which still available and costs about $120. The RT1900ac is not as powerful as the RT2600ac, but likely just fine for the average consumer: https://www.synology.com/en-us/products/RT1900ac
These is a significant cost difference between models. If you are a techy or want to ensure this router will be supported with updates for as long as possible, I would spend more and get the RT2600ac.
If you want further details on the features, use the links above to visit the relative pages on the Synology website.
There was a big update to the interface and web filtering options. I like that it is easier to filter the content by device, though I doubt my daughter likes this. I also use the filtering with many of my devices. I don’t want a NAS (network attached storage) accessing Facebook or any other type of website.
Another great feature that had been there the entire time, but never used by me, is the ability to deny access to the internet. I never thought of using this because why be connected the network and not have access to the internet? However, my individual surveillance cameras do not need access to the internet. They connect to a surveillance program that sends footage over the internet. I don’t trust things like cameras to be too secure. However, I have a little more faith in the computer running the surveillance software.