r/GlInet

Ive been getting moderate NAT on my Xbox ever since joining Youfibre, I was told this was due to CGNAT and to purchase a static IP address for £5 and this would solve the issue

Ive added the static IP to my package today, ive checked and its activated and working fine but im still getting moderate NAT on my Xbox, I get 'NAT type moderate UPnP not successful'

I use Flint 2 router and have made sure UpnP is activated. Does anybody have any idea what is stopping the NAT from going to open now please? Everything ive read suggests the static IP should have fixed this issue

I'm 100% WFH, so when Spectrum went down, and went down hard, I shuffled off to the local AT&T store to pick up a 5G router, an "All-Fi Hub". Got it home cabled up to WAN2 on the Flint, and...nothing. The Hub device is online and working properly, confirmed by connecting a laptop to its LAN port and getting an IP and excruciatingly slow speeds.

For whatever reason the Flint is just not seeing the link to the Hub. In Luci the secondwan interface shows "Error: Network device is not present". Sure would be nice if these things had friggin' link lights on the physical interfaces.

There's not much you can do in GLINet's interface WRT to configuring failover, it's pretty much a choice between Failover & Load Balance. Obviously I'm on failover.

Anyone out there have any idea what I'm missing?

Semi-related: AT&T has been down in my area for the past ~18 hours. You can't make this shit up.

Not sure if this is the right flair but did not find the one it fits.😄

my setup: GL-XE3000 with the nordvpn wireguard client. works great, except the server you pick in the panel is static. after a few weeks "your" server gets crowded (nordvpn shows the load %), speeds drop, and the fix is always the same: open the panel, pick another server, reconnect. the nordvpn apps do this automatically, but on the router you're on your own.

so i wrote nordvpn-rotate. one POSIX shell script, cron runs it every 30 minutes:

- asks nordvpn's public recommendations api for the best servers in your country. no login, no credentials — the wireguard private key on your router never changes

- if your current server is fine → does nothing. this is 95% of all runs

- if it's overloaded (default ≥60% load) or dropped out of the recommended list → rewrites the peer endpoint, bounces the tunnel, verifies the handshake + pings through the tunnel, and rolls back automatically if the new server turns out bad

safety was the main design goal, because it's a router, not a toy:

- ships in dry-run mode. it only logs what it *would* do until you explicitly turn it live

- only ever touches two uci fields (endpoint + public key). never your private key, dns, mtu or kill switch

- every failure path rolls back, and with the kill switch on, a bad switch blocks traffic instead of leaking it

- there's a read-only `check` command that verifies every assumption on your specific router before you install anything

there's also a small status dashboard and a test harness that runs the real script on your PC with fake uci/wg binaries, so you can watch it make decisions without touching your router at all.

built for GL.iNet 4.x firmware (tested on a GL-XE3000), but underneath it's plain openwrt stuff (uci/ubus/jsonfilter), so it should adapt to other setups. install is either a simple install script or a normal opkg .ipk package.

code is fully open source: https://github.com/odaialfadel/nordvpn-rotator

would love feedback, especially from people on other GL models or plain openwrt.

Here is a screenshot:

https://preview.redd.it/d61oapz4nckh1.png?width=960&format=png&auto=webp&s=5b5a4d4b9325f5563757f72c8a7787e3502b1a88

Hi everyone,

I’m looking to set up a dedicated NetBird VPN gateway for my home network. I specifically want to avoid using a Raspberry Pi for this setup.

I'm currently deciding between the GL.iNet GL-MT3000 (Beryl AX) and the GL-AXT1800 (Slate AX).

• Which of these two would you recommend for running NetBird smoothly via OpenWrt?
• Do you have experience with running NetBird on GL.iNet devices?
• Are there any other specific devices/mini-routers you would recommend instead?

Any advice or experiences would be greatly appreciated! Thanks

Just wanted to let you guys know that the long-waited two-way video feature is now supported as of firmware ver 1.10.0. This means you can now join a video call on the remote device, with both camera and mic active.

We've been chipping away at this for a while and ran into a few unexpected walls along the way. But it's live now, and we're glad to finally get it in your hands :）

We are working on pushing the resolution higher and rolling out to other models as they move onto firmware ver 1.10 (Note: Comet and Comet Q are not supported).

Thanks for sticking with us through the wait.

Check out the release notes here if youre interested: https://dl.gl-inet.com/release/kvm/release/RM10/1.10.0

Initially i thought that Flint 3 is only affected but yesterday i installed Flint 2 and the wifi performance sucks so much. Before i had ASUS RT-AC2600 and Cudy AX-3000 in the same apartment, they covered the all rooms with maximum signal strength.

Flint 2 going through 2 and half walls results in 1 of 3 phone signal bars.

It's literally the worst performing router i've had wifi signal wise. Even the cheaper and older router beats it

The only thing that fixes it is changing the wifi country code in luci to US so the signal strength is increased.

Why did Gl.INET destroy the default wifi performance for EU users ? Something is certainly wrong here

It can't be regulations because other vendors like Asus ship routers that have way better radio and adjusted limits.

It seems that gl.inet applied the most rigoristics and conservative radio power limit ever, making the router way worse choice than much cheaper and older products. Honestly i don't get it

As title says. I have some IP cameras and also my home synology nas. I've tried on both flint 3 and flint 3z different firmwares.

The glinet constantly shows most IP cameras and my synology nas go offline for a few seconds and then online again this cycle repeats non stop.

Note that the devices are not actually going offline and maintain network connectivity.

It seems to be a glinet gui thing and I would like to figure out what causes this.

I've tried everything from disability hardware acceleration, adguard and also a whole bunch of Openwrt stuff from chatgpt etc but the issue persists

Does anyone else see this with any of their devices.

I bought one and haven't had any issues everything seems to be work as is. As a home user it is great but maybe as a business its not as good as other routers. I am not sure why. Is it justified?

I've been living on the other side of the globe from my home network since this time last year, and my brother was kind enough to get me this device to keep me connected. Unfortunately it hasn't been stable in the slightest. I'm a programmer and ran an IT department for almost a decade, and I've learned to mostly just leave things alone/stock, they either work or they don't. The comet has been *just* on the edge of "it works" or "it doesn't" the whole time.

The most recent issue is thus: It fell off tailscale three days ago. I remoted into another PC on that network [having two ways in has unfortunately become mandatory with this kvm], ssh'd into the kvm, and found its system clock was stuck in July. Well no wonder tailscale won't connect. I managed to update the clock via pinging google with date -s, which makes me wonder, why the hell couldn't it update its own clock? I want to say this thing's convenience features outweigh having to troubleshoot it every other month, but it truly has been one thing after another. I've never had *any* internet connected device just fail to update its clock before.

Maybe this kind of bad review will just get removed from the sub, but I hope that 1. people will read this and know what they're getting into and 2. the team behind the device will have another data point to convince their leadership to figure this shit out a little better.

Can I buy a replacement power adapter for the Flint 2? A lightning strike took out the original but it protected the router. I only see a 5v/4a one in the glinet store.

I'm currently using a 12v/3a but the orig was 12v/4a. With no external disks I suspect 3a is enough but I may change that in the future.

When I look at Amazon, all the brand names look like someone mashed their fingers on a keyboard and I don't trust them to protect anything.

Purchased the mudi 7 so I could clone my MAC address for cruise ship and use it as a hotspot while at home. Got it today, set it up and it worked great. Then is asked for a software update and now I no longer have the clone option, just factory, random and manual. Also when testing it on my home WiFi as a repeater, it fails all speed tests but it is repeating some signal as I am getting internet on my phone. Can I downgrade back to the old software? Tips for a new user? Thanks in advance.

How can you test that the kill switch works?

If you disconnect the client that is not the same as a VPN endpoint fail.

Is there a way to have an icon or symbol in the menu bar on iPad or iMac that you are connected thru VPN?

If I set up the Flint 2 as the AmneziaWG 2.0 server, will my Slate AX able to connect as client on the road?

Trying to achieve: VLAN behind UniFi gateway routed through slate 7 and out its isp(cgnat).

The reason I chose a gl.inet device was because I have heard nothing but fantastic things about them and their products and wanted to see for myself.

I have my current residence with UniFi gateway and a second residence with slate7 behind cgnat but I want traffic on a vlan behind the UniFi gateway to come out the isp of the slate 7.

I have tried multiple things including vlan>unifi wgs>slate7 wgc>isp which resulted in I couldn’t get routing correct on either end they both want to route the opposite direction.

I have tried vlan>unifi wgc>remote wgs>slate7 wgc>isp but again started running into problems with being able to add the ip rules, iptables to slate 7 wg client config.

Unless im missing something please shed some light I have been banging my head against a wall for days now. If there is not light to be shed what would my options be to get this working?

I figured this would be a easy cost effective way to handle this but I’m regretfully thinking I should have just setup a minipc instead of using the slate 7 to accomplish this.

Gl.Inet routers are capable of using SSH or their config page using GlInet cloud. Is there a way to attach a mini computer and use the Gl.Inet cloud as a makeshift KVM or Desktop connection?

Certainly there is the option of SSH hopping, connecting to the router then how to the target computer and using its console. But is there some way to route Desktop?

This will be my first international trip using the Flint 2/Beryl AX VPN via Wireguard to hide my location. Did not see any issues testing with my phone's hotspot and in another city. Main concern is my work laptop cannot have location services turned off. It is also managed by Microsoft Intune.

Would appreciate any tips, comments, anything I might have overlooked. I'll be gone 2 months, wish me luck.

My setup:

Work laptop -> Beryl (ethernet only) -> Wireguard VPN -> Flint 2 -> ISP

1. Server router - Flint 2
   • DDNS, UDP port forwarding to ISP router
2. Travel router - Beryl AX
   • Killswitch ON
   • DNS requests go through VPN (Cloudfare)
   • IPv6 disabled
3. Work laptop
   • Managed by Microsoft Intune with Company Portal
   • Uses Global Protect VPN
   • Location Services ON (cannot disable)
     • Will this be a problem?
   • WIFI/Bluetooth disabled in Device Mgr
   • No GPS found in BIOS/Device Mgr
   • Timezone set to manual
   • Logged out of all personal accts in browser, cleared cache, browsing data
4. Work Phone
   • Separate BYOD work phone only connected to Beryl WIFI
   • Only used for MS Outlook, Teams (location disabled)
   • MS Authenticator (offline codes only)
     • If connected to Beryl WIFI and auth-ing with push notification instead of using offline codes, would I risk leaking sign-in location?
   • No personal use
5. Backup in case Beryl fails
   • Personal laptop with separate Wireguard profile installed
   • No backup for Flint. Installed at home with family.
   • Should I have WireGuard installed on my phone or is personal laptop enough?