๐ Last updated: 2026-09-25
๐ท๏ธ Category: Networking
๐งญ Introduction #
A soft router (่ป่ทฏ็ฑ), short for software router, uses general-purpose computer hardware (PC, server, mini PC) with software to handle routing.
| Item | Description |
|---|---|
| Essence | Runs router functionality as software on general-purpose hardware |
| Common platforms | Linux OS (OpenWrt, iKuai, PfSense, etc.) |
| Hardware | Old PCs, mini PCs, industrial PCs, dedicated soft-router devices |
| Key technology | DPDK (Data Plane Development Kit) significantly boosts forwarding performance |
๐ก In short: instead of buying a fixed-function traditional router (hardware router), install a routing OS on a regular PC and build your own router.
Soft Router vs Hardware Router
| Item | Soft Router | Hardware Router |
|---|---|---|
| Hardware | General-purpose PC / server | Dedicated routing chip |
| Functionality | Software-defined, freely extendable | Fixed at factory, limited upgrades |
| Performance | Scales with CPU | Efficient dedicated chip |
| Cost | Cheap hardware, flexible features | Mid/high-end models pricey |
๐ฏ When / Why You Need One #
โ When a soft router is worth it
| Need | Description |
|---|---|
| ๐ Stronger firewall/security | Fine-grained packet filtering, traffic inspection, intrusion prevention |
| ๐ VPN server | Self-host WireGuard/OpenVPN to connect back home from outside |
| ๐ Fine-grained traffic control | Multi-WAN aggregation, load balancing, per-app QoS |
| ๐ซ Ad blocking / DNS anti-pollution | Block ads and prevent DNS hijacking for every device |
| ๐จโ๐ฉโ๐ง Many users & devices | Lots of household devices online at once, stable routing without drops |
| ๐งฐ All-in-one | Router + NAS + Docker containers running together |
| โป๏ธ Reuse old hardware | Repurpose old PCs / cheap mini PCs at low cost |
| ๐๏ธ Full network control | Enjoy DIY and advanced setups; control every packet |
โ When you don’t need one (just buy a hardware router)
| Situation | Reason |
|---|---|
| Basic single-device browsing | Simple needs; a hardware router is enough |
| Want plug-and-play, zero maintenance | Don’t want to learn networking or tinker |
| Sensitive to power/space | Soft routers draw more power and are bulkier |
๐ก Rule of thumb: if “just getting online” is enough, a hardware router works. If you want to control how you go online โ VPN, ad blocking, all-in-one โ a soft router is worth it.
โ๏ธ Function #
A soft router implements many advanced features in software, far beyond a typical home router:
- Routing / NAT: basic traffic routing, multi-WAN (broadband) aggregation and load balancing
- Firewall: fine-grained packet filtering, traffic behaviour detection
- VPN: set up WireGuard, OpenVPN, IPsec servers/clients
- QoS / Traffic Shaping: automatically allocate bandwidth per application (Layer-7 flow control)
- Ad Blocking: block ads and trackers via AdGuard Home, Pi-hole, etc.
- DNS service: self-hosted DNS, prevent DNS pollution/hijacking
- Bypass router (transparent proxy): add a side router for advanced features without replacing the main router
- Virtualisation: run multiple systems and Docker containers at once (e.g. NAS services)
๐ Advantage #
| Advantage | Description |
|---|---|
| ๐ฐ Low hardware cost | Use an old PC or cheap mini PC; one device for many jobs |
| ๐งฉ Unlimited extensibility | Install plugins/packages for whatever features you want |
| ๐ง Easy hardware upgrades | Swap CPU / add RAM to improve performance; no full replacement |
| โก Stackable performance | With a strong CPU, forwarding can beat premium hardware routers |
| ๐ Software/hardware separation | Routing logic is independent; the system can be reflashed anytime |
| ๐ Rich open-source ecosystem | OpenWrt community is active, fast updates, self-compile to avoid backdoors |
Drawbacks to keep in mind
| Drawback | Description |
|---|---|
| ๐ ๏ธ Steep setup curve | Requires some networking knowledge; higher learning cost for beginners |
| ๐ Higher power draw | More power-hungry than dedicated-chip hardware routers |
| โ ๏ธ Stability depends on config | Misconfiguration or wrong firmware can drop connectivity |
| ๐ Closed-source risks | Some domestic closed-source systems had mining-backdoor scandals (e.g. iKuai) |
๐ฝ Software (Router OS) #
The core of a soft router is the router OS. The common options:
OpenWrt (open-source, most extensible) #
- The lightest router OS; the base can be as small as 5MB, fitting low-end hardware
- Fully open-source; can self-compile, no backdoor concerns
- Richest plugin ecosystem (luci); a package exists for nearly any feature
- Configuration needs some experience; beginners must tinker
iKuai / Gocloud (domestic, strong flow control) #
- Domestic commercial system with a free home edition
- 7-layer flow control is its signature: per-app QoS, best localisation
- User-friendly and works out of the box; great for beginners
- Closed-source; iKuai had a mining-backdoor controversy
- No IPv6 support; flow control is CPU-heavy
PfSense / OPNsense (enterprise-grade, security-focused) #
- Open-source enterprise firewall systems sharing the same roots
- Security-first: traffic behaviour detection, antivirus, fine-grained firewall rules
- Full IPv6 support and very stable; for advanced users
- Much more complex to configure than OpenWrt; steep learning curve
RouterOS (MikroTik) (rock-solid) #
- MikroTik’s OS, also installable on a PC
- Extremely stable; in practice can run for years without a reboot
- Powerful and performant, but unique UI logic and hard to pick up
๐ฅ๏ธ Hardware #
Core hardware specs #
| Component | Recommendation | Notes |
|---|---|---|
| CPU | Intel N100 / N305 / J4125 / N5105 | Mainstream x86 performance; N100 is the current value pick |
| RAM | 1โ4GB (home) / 8GB+ (virtualisation) | 1โ2GB is enough for pure routing; more for Docker/VMs |
| NIC | Intel i225 / i226 (2.5G) multi-port | NIC chip compatibility is key; Intel is the most reliable |
| Storage | mSATA / M.2 SSD or USB stick | The system is tiny; 16GB is enough |
| Chassis | Mini PC / industrial PC (2/4/6 ports) | Fanless passive cooling, runs 24/7 |
Common hardware platforms #
- x86 mini PC / industrial PC: the mainstream choice, e.g. Intel N100, J4125 series; multi-port design made for soft routing
- ARM off-the-shelf devices: Phicomm N1, R2S/R5S (Rockchip), cheap and power-efficient, good for entry or bypass
- Old PC / server: repurpose idle hardware, zero cost, but higher power draw
- Virtual machine: run as a VM on ESXi/PVE, for users who already have a server
Recommended configurations #
| Use case | Suggested config |
|---|---|
| Entry / bypass | ARM device (N1/R2S) or J4125 dual-port |
| Main home router | Intel N100 + 4ร 2.5G ports + 4GB RAM |
| Enthusiast / AIO | N305 or stronger + 8GB+ RAM + 6 ports; run NAS + routing + VMs |
๐ Alternative #
1๏ธโฃ Choosing among soft-router systems #
| System | Stability | Security | Resource use | Learning curve | Extensibility | Highlight |
|---|---|---|---|---|---|---|
| OpenWrt | Medium | Med-high | Low | Medium | High | Open-source, lightweight, richest plugins |
| iKuai / Gocloud | Medium | Average | High | Low | Low | Domestic, strong flow control, out-of-box, no IPv6 |
| PfSense / OPNsense | High | High | Medium | High | Medium | Enterprise firewall, very stable |
| RouterOS (MikroTik) | High | Med-high | Low | High | Medium | Rock-solid, powerful |
2๏ธโฃ Just buy a hardware router (no tinkering) #
- For: users who want plug-and-play, low power, zero maintenance
- Examples: ASUS, TP-Link, Xiaomi, Netgear, Ubiquiti (UniFi)
- Trade-off: limited features and upgrade room, but stable and hassle-free
3๏ธโฃ Hybrid (soft router + hardware router) #
- The hardware router handles dial-up as the main router; the soft router acts as a bypass router for VPN, ad blocking, etc.
- Balances stability and extensibility; a common setup for home enthusiasts
โ ๏ธ Notes #
| Note | Description |
|---|---|
| System choice | Beginners: OpenWrt or iKuai; for security/stability pick PfSense/OPNsense |
| IPv6 needs | iKuai/Gocloud don’t support IPv6; choose OpenWrt or PfSense if you need it |
| Flow control is CPU-heavy | 7-layer flow control is quite CPU-intensive; mind the hardware |
| Closed-source risk | iKuai had a mining-backdoor scandal; evaluate closed-source systems yourself |
| NIC compatibility | Confirm the NIC chipset (Intel is safest) before buying to avoid driver issues |
๐ References #
| Source | Link |
|---|---|
| Soft Router – Baidu Baike | https://baike.baidu.com/item/่ป่ทฏ็ฑ/4824918 |
| Choosing a soft-router system | https://bigppwong.github.io/cnblog/linux/็ถฒ็ตก/่ป่ทฏ็ฑ็ณป็ตฑ็้ธๆ/ |
| Soft router vs hardware router – CSDN | https://blog.csdn.net/movingcomm/article/details/160269439 |
Sources: official sites and public information (Sep 2026).