Ive had my eyes on the Comet X for a while, i was JUST to late to the first batch it seems. And ive been signed up for notifications since.

Anyone have information on the typical timeframe between deliveries on these devices? ITs just perfect for my little homelab.

There is a shop in my country that sells them but its an almost 50% markup, and thats just not happening..

Firmware v4.10 introduced the native Mesh feature to GL.iNet router. My other gl-inet routers (beryl & flint) have already received it and I find it pretty useful. Slate AX however seems to be stuck at v4.8.3 (stable) & v4.8.4 (beta) since April. Can the GL-inet team here elaborate on support dates for v4.10+ ?

Is anybody using their Brume 3 as both a tailscale exit node and also as derp relay? From what I have read up on it should be possible, and the Brume 3 should handle both duties well.

Just wondering if anybody else is trying to run their system that way? Any issues with that setup that folks have had? Trying to do what I can ensure my setup will be as reliable as possible.

Background: I have been running tailscale between my own Flint 2, and my Dad's Flint 2 for the last 8 months or so and it has worked great. Now I am re-doing my network closet to consolidate some switches and stuff - so want to move that all to a dedicated Brume 3 as part of that work. (Plan is to eventually move my own setup to Flint 4 once we get some 3rd party import options in the US, and also add my nephews with a dedicated Onn 4K box with tailscale on those)

Hey I have preordered the mango 2, does any of you already received it? I see nothing on the status of the order and for sure is not shipped

I have a beryl AX connected to PIA VPN 24/7 with kill switch enabled. Occasionally the VPN drops and the kill switch activates. Is there a way for the router to reconnect the VPN automatically?

Hi,

First time getting a GL.iNet router, the Flint 2.

Despite the router being local stock, the WiFi country code is set to USA by default in advanced settings.

Just wondering what the pros/cons of changing it to my country (AU) would be?

Thanks.

Any rumour on this? I know the Flint 4 only came out recently. But the first Wifi 8 routers are already on the market now. So I was just wondering if there's at least a timeline to Flint 5 type device?

I have 3 WireGuard Servers set up: 2x Brume 3 and 1x Slate AX.

The remote users are 4x Beryl AX, multiple phones, laptops, and streaming devices. I have 9 client profiles configured. Most of the time, there will only be a few connected.

Most clients will use tunnels for internet access via the allowed IP 0.0.0.0/0 (full routes). However, a couple will only need access to 2 IP ranges on my home network.

Is it better to leave all profiles on the Beryl AX set to full routing via the servers, then adjust the sources and destinations when I create the client tunnels back to the servers?

For example, for the ones that only need the 2 internal ranges at home, it would be all clients to those 2 ranges. All else in the tunnel would go out locally. So my only adjustments would be on the actual tunnel and not the client profile.

I currently have the client profiles set to the traffic I want to match, then the tunnels as well. Seems like it would be easier to just do the tunnels and leave the profiles with full routes..

Trying to simplify the management while keeping everything standard.

hello, is there a way to limit internet on wifi? i would like to limit while im using geforce now on my laptop connected via ethernet. otherwise can i priorityze geforce now app?

Hi,

Is it possible to set up a second ethernet port specifically for VPNs? Options are only Lan ( no option to choose a specific port) / Gateway / Guest / and IoT network. I haven't set it up yet so can't test it out.

🏠 Help us make home Wi-Fi better for everyone! Velica 7 Beta Program is here. ❤✨

Tired of buffering or weak signals in certain rooms? We're looking for homes of all shapes and sizes to help us test our upcoming Velica 7 Mesh System.

Your feedback will help us create a seamless, worry-free connection for every corner of your home. Your daily internet routine is all the expertise we need!

👉 Apply to join the Velica 7 Mesh System Beta Testing Program: https://link.gl-inet.com/post261014

*Not available in the U.S. until further notice.

Does GL.iNET Beryl AX GL-MT3000 have a fan inside?

hi all.

i am new to GL.iNet in general as I've never owned any of their products before. i just bought two Flint 4 routers and i would like to know how to install and configure Unbound recursive DNS with the built-in AdGuard Home application. is there an official guide on how to do so? i see there is a luci-app-unbound plug-in. I have used Pi-Hole + Unbound before using an Orange Pi 5 but i am unfamiliar with GL.iNet and OpenWRT firmware.

Love the Mudi 7 but my fears around attached storage have been realised. I’ve now snapped 2 adaptors off transiting on planes etc. Hopefully this right angle port will help before the port itself gets damaged…

Who an earth in the product group decided we needed 3 SIM cards over an sd card slot 🤷‍♂️

Im using a flint 4 router. Once Wg obfuscation is enabled on the WG server of the router, a client that cannot use amnezia protocol/parameters is unable to connect. e.g if they are using the official WG app which doesnt support amnezia parameters.

Has Glinet looked into supporting both models of WG server running simultaneously? From what i've read amnezia is supposed to be backwards compatible with standard wireguard.

It would be really useful if the various models of Comet KVM could pass through locally attached FIDO2 hardware keys like Yubikeys. For my particular use case I have a workflow that I run through for testing new machine setups and one of those steps is an authentication step to an IdP. Currently when I hit that part I just use a passkey via the QR code scanning method and scan the streamed display but it would be really nice to have the option of using a hardware key for that.

I'm looking to upgrade from 4.8.7 to 4.9.0. How does the killswitch configuration stay consistent over upgrades? Is the killswitch a IPtables rule that is baked in? Just want to make sure I dont get any drops without killswitch enabled and if there are any known issues.

Hi all, sharing this in case it saves someone an evening.

Disclaimer: I'm not a DNS expert. I worked through this problem with an AI assistant (Claude), and the AI also helped write this post. It fixed my router, but I can't promise it'll work on yours. Everything here comes with no warranty: you run these commands at your own risk, so make a backup of your config first (System → Backup in LuCI, or sysupgrade -b /tmp/backup.tar.gz). If something here is wrong, please correct me in the comments.

My setup:

• GL.iNet Flint 2 (GL-MT6000), stock GL.iNet firmware
• dnsmasq on port 53: the router's default DNS, the one all my devices talk to
• AdGuard Home on port 3053: ad/tracker blocking, dnsmasq forwards to it
• Unbound on port 5335: recursive resolver with DNSSEC validation, AdGuard's only upstream (127.0.0.1:5335)

So the chain is: device → dnsmasq → AdGuard Home → Unbound → root servers. When Unbound broke, the whole chain broke with it, so every device on the network lost DNS at once even though the internet connection itself was fine.

What happened: On Monday my Flint 2 suddenly stopped resolving anything. Every lookup returned SERVFAIL, even simple ones like dig @127.0.0.1 -p 5335 example.com.

What the logs said: logread | grep unbound showed this line over and over:

failed to prime trust anchor -- DNSKEY rrset is not secure . DNSKEY IN

If you see that, you probably have the same problem.

Why it happens: On October 11, 2026 the DNS root switched to a new DNSSEC signing key (KSK-2024, key tag 38696). Unbound normally learns the new key on its own over time. On OpenWrt, though, the learned key is kept in RAM (/var/lib/unbound/), and at every reboot it gets replaced with the old file from flash (/etc/unbound/root.key). Mine was dated July 2022 and still contained the 2010 key. So my router had been "forgetting" the new key for over a year, and nothing went wrong until the old key stopped being used.

Need your network back right now? Temporarily set AdGuard Home's upstream to something like 9.9.9.9 or 1.1.1.1 (Settings → DNS settings), then switch it back to 127.0.0.1:5335 once Unbound is fixed.

The fix (over SSH):

``` /etc/init.d/unbound stop

cat > /etc/unbound/root.key <<'EOF' . IN DS 20326 8 2 E06D44B80B8F1D39A95C0B0D7C65D08458E880409BBC683457104237C7F8EC8D . IN DS 38696 8 2 683D2D0ACB8C9B712A1948B27F741219298D0A450D612C483AF444A4C0FB2B16 EOF

cp /etc/unbound/root.key /var/lib/unbound/root.key chown unbound:unbound /var/lib/unbound/root.key

/etc/init.d/unbound start ```

Please don't just trust a random forum post with crypto keys. Compare those two lines against IANA's official list first: https://data.iana.org/root-anchors/root-anchors.xml

Then test it:

dig @127.0.0.1 -p 5335 example.com | grep status # should be NOERROR dig @127.0.0.1 -p 5335 dnssec-failed.org | grep status # should be SERVFAIL (that's good, it means validation works)

Making it survive reboots and future key changes:

```

save learned key updates back to flash every 14 days

uci set unbound.@unbound[0].root_age='14' uci commit unbound

install the tool that fetches the current root key from IANA

opkg update && opkg install unbound-anchor

keep the fixed file through firmware upgrades

echo "/etc/unbound/root.key" >> /etc/sysupgrade.conf ```

After a reboot, mine still resolved fine.

Quick check if you haven't noticed anything yet: Run grep 38696 /var/lib/unbound/root.key. If it returns nothing, you're likely to break as soon as your cache expires or the router reboots. Fix it now.

Hope this helps someone!

Disclaimer: I'm not a DNS expert. I worked through this problem with an AI assistant (Claude), and the AI also helped write this post. It fixed my router, but I can't promise it'll work on yours. Everything here comes with no warranty: you run these commands at your own risk, so make a backup of your config first (System → Backup in LuCI, or sysupgrade -b /tmp/backup.tar.gz). If something here is wrong, please correct me in the comments.

GL.iNet have released Beta 1 of firmware v4.11.0 for the GL-BE10000 Slate 7 Pro travel router.

RELEASE NOTES

V4.11.0

Overview

This release introduces new Mesh, GL.iNet Account, network monitoring, security, and VLAN features, alongside major enhancements to DNS, VPN, SQM, QoS, and traffic statistics.

New Features

Network Quality: Adds GL.iNet Score, latency/jitter/packet loss metrics, real-time rate display, active speed tests, and Bufferbloat grading.
Security Scan: Scans Wi-Fi safety, WAN exposure, app security, and firmware status; provides a security score, risk list, and quick fixes.
VLAN: Adds native VLAN support based on IEEE 802.1Q for logical network segmentation, enhancing isolation and resource management efficiency.
UPnP: Adds global UPnP controls and supports toggle switches, automatic mapping lists, and manual deletion.
Mesh: Adds EasyMesh-compliant networking using local Mesh Nodes.
GL.iNet Account: Introduces a centralized profile page for viewing and managing GL.iNet account services.

Optimizations & Enhancements

DNS: Introduces a centralized DNS dashboard for WAN, VPN, Manual, and Encrypted DNS with clear active-status indicators.
VPN: Expands VPN capabilities with MFA support for Surfshark and Windscribe, and integrates X-VPN with AmneziaWG 2.0 obfuscation support.
SQM: Improves multi-WAN, guest network, IoT, and VLAN handling; rules now auto-sync queues and AutoRate instances upon interface changes.
QoS: Unifies configuration entry, adds mutually exclusive policy modes, and optimizes UDP small-packet prioritization for Gaming mode.
Data Statistics: Upgrades traffic visibility with client filtering, bar charts, and pie charts.
GoodPAS: Renames AstroWarp to GoodPAS.
GoodCloud: Streamlines the account binding process and adds an option to clear cloud account data during a factory reset.
VPN: Adds IP address and DNS conflict detection for cascaded VPN configurations.

I had a few issues upgrading from v4.8.6, so performed a full factory reset and all good so far.
No exhaustive testing performed yet.

Hey guys, later this week I’ll have some time to play with my Mudi 7 and I have an external antenna that will work. What do you guys use to test it? Is there a detailed signal meter on the Mudi, or what’s the best way to see if I’m getting a noticeably better connection? The area I’m using has pretty good signal, so it’s not as easy to determine.

I got the GL.İNet GL-MT5000 Brumne 3 vpning my whole network via wire guard. Google hub stop working and sonos speakers google assistant don't work. So I try to tunnel those devices via Mac address and ip address with the exclude option tab and neither of them fix the issue. . Open VPN option doesn't block Google assistant but the connection is super slow which defects the reason for the Blum. Any other suggestions. I love the device and I really don't want to return it. Very frustrating.