# API security question **URL:** \ **Category:** Router\ **Created:** [June 10, 2024, 12:09pm UTC](https://forum.gl-inet.com/t/api-security-question/43408 "2024-06-10T12:09:51Z")\ **Posts on this page:** 9\ **Page:** 2
**Author:** ![whereismyanimewaifu](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/w/85f322/32.png) [@whereismyanimewaifu](https://forum.gl-inet.com/u/whereismyanimewaifu)\ **Post date:** [June 10, 2024, 8:53pm UTC](https://forum.gl-inet.com/t/api-security-question/43408/21 "2024-06-10T20:53:18Z")
> [@admon](#): > > I would not currently use a GL.iNet router for very critical areas Is there some problems with this? Gl is highly recommended as secure ones… > [@admon](#): > > At least not without switching to plain OpenWrt As I know this process can brick device so hard that even Uboot will not help. ---
**Author:** ![admon](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/admon/32/32880_2.png) [@admon](https://forum.gl-inet.com/u/admon)\ **Post date:** [June 10, 2024, 8:58pm UTC](https://forum.gl-inet.com/t/api-security-question/43408/22 "2024-06-10T20:58:07Z")
> [@whereismyanimewaifu](#): > > Is there some problems with this? Gl is highly recommended as secure ones… I would say that depends on what you classify as a secure system. Do I trust GL.iNet more than Cisco? Yes - but that's more due to Cisco's bad reputation. GL.iNet has been struggling with poor software quality for several months (some will even say years). I think I can see that it is slowly getting better - but overall, it will take some time. I would therefore switch to plain OpenWrt in “protected areas”. And then do everything there via SSH or only use HTTP via the SSH proxy. > [@whereismyanimewaifu](#): > > As I know this process can brick device so hard that even Uboot will not help. It's pretty safe if you use only sysupgrade images. ---
**Author:** ![whereismyanimewaifu](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/w/85f322/32.png) [@whereismyanimewaifu](https://forum.gl-inet.com/u/whereismyanimewaifu)\ **Post date:** [June 10, 2024, 9:01pm UTC](https://forum.gl-inet.com/t/api-security-question/43408/23 "2024-06-10T21:01:14Z")
> [@admon](#): > > poor software quality for several months Buggy? Or vulnerable? > [@admon](#): > > only use HTTP via the SSH proxy This is interesting. Is there any guidance? ---
**Author:** ![LupusE](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/lupuse/32/6737_2.png) [@LupusE](https://forum.gl-inet.com/u/LupusE)\ **Post date:** [June 11, 2024, 7:03am UTC](https://forum.gl-inet.com/t/api-security-question/43408/24 "2024-06-11T07:03:59Z")
> [@whereismyanimewaifu](#): > > Can you share arguments? No. As I repeatedly wrote, without situation everything is guesswork. Buy a GL.iNet router, add it to your network via WAN and put your devices in LAN, and this is secure. Put it in a public WLAN or Network, and activate a VPN to your home or a trusted provider, that is secure. If you have done all this above and answer a phishing mail, answer a 'support call from Microsoft' or ignore a SSL certificate security warning, everything is useless. But in this case all your above described countermeasures are as well. If you don't publish any service outside, the attack surface is low. And GL.iNet is not publishing services on WAN. The respond to ICMP, what is good, because then the network can see it and build routes above the reply timings... If any of my GL.iNet routers don't work, I set them to factory reset, add the WLAN and upload the WireGuard config. Done. I am secure as needed from anywhere. The provider where I stand is not able to MITM my connection. At home I run a PiHole, that I will change to a AdGuard Home for testing some day. And I will switch to Plain OpenWRT, to split Main Network, Guest Network and IOT/multimedia Network. For historical reasons I run a snort to analyze my traffic, but I rarely look at this anymore. 1. Just don't install shady plugins/programs/packages\* 2. Just don't open services to WAN\* 3. Just don't test in production - You don't know. I also would appreciate if GL.iNet would provide 2FA, with RFID (NFC) or Yubikey for login, if I could change the default usernames or a voucher system for GuestWLAN. But we are not using enterprise environment. And if there is a known vulnerability, GL-iNet is motivated to Backport the fix, even to the older base OpenWRT setups. If you install a GL.iNet firmware, based in OpenWRT 21.06, it is more secure than a plain OpenWRT 21.06... except they are rebuild their images as well, I am not familiar with the OpenWRT releases, yet. ---
**Author:** ![admon](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/admon/32/32880_2.png) [@admon](https://forum.gl-inet.com/u/admon)\ **Post date:** [June 11, 2024, 7:04am UTC](https://forum.gl-inet.com/t/api-security-question/43408/25 "2024-06-11T07:04:49Z")
> [@whereismyanimewaifu](#): > > Buggy? Or vulnerable? Mostly buggy. They patch pretty fast, mostly - so this isn't the problem. So basically what @LupusE said. ---
**Author:** ![whereismyanimewaifu](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/w/85f322/32.png) [@whereismyanimewaifu](https://forum.gl-inet.com/u/whereismyanimewaifu)\ **Post date:** [June 11, 2024, 7:46am UTC](https://forum.gl-inet.com/t/api-security-question/43408/26 "2024-06-11T07:46:03Z")
> [@admon](#): > > Mostly buggy This is not an issue. I tried many routersn, and Gl is one of the best. I even had MicroTik (rare crap!)n. So I just looking for advanced security measures as if you breach my LAN you will be able to disable alarm for example. So it is critical to block everything that isn’t used for now to increase security ---
**Author:** ![admon](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/admon/32/32880_2.png) [@admon](https://forum.gl-inet.com/u/admon)\ **Post date:** [June 11, 2024, 7:54am UTC](https://forum.gl-inet.com/t/api-security-question/43408/27 "2024-06-11T07:54:13Z")
> [@whereismyanimewaifu](#): > > I even had MicroTik (rare crap!) Uhm. Are you sure you know what you are doing? MikroTik is one of the most stable, secure and reliable routers on the market. But a steep learning curve. ---
**Author:** ![whereismyanimewaifu](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/w/85f322/32.png) [@whereismyanimewaifu](https://forum.gl-inet.com/u/whereismyanimewaifu)\ **Post date:** [June 11, 2024, 8:11am UTC](https://forum.gl-inet.com/t/api-security-question/43408/28 "2024-06-11T08:11:36Z")
> [@admon](#): > > Are you sure you know what you are doing? Yes. > [@admon](#): > > most stable, secure and reliable routers on the market It seems you never had “bricked” MicroTik because of update. I had so much headache with MicroTik… So searched for routers. And got Gl recommended. Gl is one of the most suitable for me + uses openwrt interface ---
**Author:** ![bruce](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/bruce/32/35649_2.png) [@bruce](https://forum.gl-inet.com/u/bruce)\ **Post date:** [October 29, 2025, 11:39am UTC](https://forum.gl-inet.com/t/api-security-question/43408/29 "2025-10-29T11:39:36Z")
[Previous page](https://forum.gl-inet.com/t/api-security-question/43408.md?page=1)