a50f3eb589## v1.0.27 **Base Image Features** - Configure better PQ support for sshd - Updated debian install configuration, interface naming - Rebuilt raspbian kernel with kernel hardening enabled - Add experimental AP/VLAN support for brcmfmac **SPR Features* - Shrunk CoreDNS build by disabling extras - Added support to hostapd for dynamic vlan assignment on fullmac |
||
|---|---|---|
| .github/workflows | ||
| api | ||
| api_sample_plugin | ||
| base | ||
| db | ||
| dhcp | ||
| dns | ||
| dyndns | ||
| experiments | ||
| flowgather | ||
| frontend | ||
| installer | ||
| multicast_udp_proxy | ||
| packet_logs | ||
| plugin-lookup | ||
| ppp | ||
| superd | ||
| tests | ||
| watchdog | ||
| wifi_uplink | ||
| wifid | ||
| wifid-setup | ||
| wireguard | ||
| .gitattributes | ||
| .gitignore | ||
| build_docker_compose.sh | ||
| CONTRIBUTING.md | ||
| docker-compose-kvm.yml | ||
| docker-compose-test.yml | ||
| docker-compose-virt.yml | ||
| docker-compose.yml | ||
| LICENSE | ||
| pull_containers.sh | ||
| README.md | ||
| RELEASE-NOTES.md | ||
| setup.sh | ||
| virtual_install.sh | ||
📡 SPR: Open Source, secure, user friendly and fast wifi routers for your home.
Overview
Create an adaptive, micro-segmented network for managing WiFi devices, remote VPN access, and wired systems.
- One Password Per WiFi Device
- Policy Based / Zero Trust Network Access
- Per-Device DNS Rules & Ad Block Lists
Get Involved
💬 Have questions? Join the conversation in our Discussions page.
- Join the Discord chat
- Stay in the loop with our newsletter
How it Works
An unspoofable device identity is established with a MAC address and Per-Device Passphrase for WiFi (or a VPN Public Key for Remote Devices). From there, each device gets its own /30 subnet to exist on. Hardening and strict firewall rules block network spoofing and impersonation, and routing rules redefine connectivity between devices and to the internet.
Features
Security
- Multi-PSK including with WPA3, a SPR first
- Secure Router Chaining
- Almost no unmanaged code, minimized attack surfaces
Firewall:
- One-way connectivity to service resources
- Device Groups & Isolation
- Port Forwarding
- Custom Interface rules for integrations
- Scheduling, Event-Based Triggers *
- DNAT Rewriting *
WiFi
- WPA3/2
- WPA1 backwards compatibility
- WiFi 6 Support
Advanced Networking
- Wireguard™ VPN
- Multi WAN with Load Balancing
- Wireless Uplink
- Multicast Traffic Support
- Mesh with Wired Backhaul *
- Policy Based Site Forwarding *
Advanced DNS Capabilities
- Remote DNS Queries with DNS over HTTPs
- DNS Ad Block lists
- Per-Device DNS Rules and Overrides
User Friendly
- React UX
- iOS App Available *
Observability
- IP Traffic
- DNS Logs
- Event System & DB
- API
Interoperability:
- Runs on a wide variety of Linux systems with Docker
- API Plugin System
* Some features are part of SPR PLUS, a paid subscription to support the project
Our Goals
- Be the best Security & Privacy choice
- Programmable with an API
- Easy to use
Frequently Asked Questions
Check out our FAQ on our website
Why SPR Over Alternatives
SPR is built to support an adapative, microsegmented network that unifies WiFi, DNS, Routing, and Policy. It's not easy to bolt on the concepts onto exising router stacks while also achieving high assurance security that blocks network spoofing attacks and other network flaws.
UI Demo Page
https://demo.supernetworks.org/
SPR Bus Events
https://github.com/spr-networks/sprbus
Updating
Building from scratch
./build_docker_compose.sh --load
docker-compose up -d
For performance and to minimize wear on SD cards, the build uses a memory-backed filesystem. On memory-limited devices, this can cause build failures if memory is exhausted. In this case, you can provide the build argument --set "*.args.USE_TMPFS=false".
Using prebuilt containers
docker-compose pull
./setup.sh # (optional)
docker-compose up -d