---
title: 🌐 Soft Router Guide (en)
description: "A complete guide to soft routers: what they are, when you need one, functions, advantages, router OS options (OpenWrt, iKuai, PfSense, RouterOS), hardware, and alternatives."
url: "https://aaronchan.com/kb/soft-router/"
updated: "2026-09-25"
category: Networking (en)
tags:
  - Networking
---

# 🌐 Soft Router Guide (en)

> 📅 Last updated: 2026-09-25
> 🏷️ Category: Networking

---

## 🧭 Introduction

A **soft router (軟路由)**, short for software router, uses general-purpose computer hardware (PC, server, mini PC) with software to handle routing.

| Item | Description |
| --- | --- |
| Essence | Runs router functionality as software on general-purpose hardware |
| Common platforms | Linux OS (OpenWrt, iKuai, PfSense, etc.) |
| Hardware | Old PCs, mini PCs, industrial PCs, dedicated soft-router devices |
| Key technology | DPDK (Data Plane Development Kit) significantly boosts forwarding performance |

> 💡 In short: instead of buying a fixed-function traditional router (hardware router), install a routing OS on a regular PC and build your own router.

**Soft Router vs Hardware Router**

| Item | Soft Router | Hardware Router |
| --- | --- | --- |
| Hardware | General-purpose PC / server | Dedicated routing chip |
| Functionality | Software-defined, freely extendable | Fixed at factory, limited upgrades |
| Performance | Scales with CPU | Efficient dedicated chip |
| Cost | Cheap hardware, flexible features | Mid/high-end models pricey |

---

## 🎯 When / Why You Need One

**✅ When a soft router is worth it**

| Need | Description |
| --- | --- |
| 🔒 Stronger firewall/security | Fine-grained packet filtering, traffic inspection, intrusion prevention |
| 🌍 VPN server | Self-host WireGuard/OpenVPN to connect back home from outside |
| 📊 Fine-grained traffic control | Multi-WAN aggregation, load balancing, per-app QoS |
| 🚫 Ad blocking / DNS anti-pollution | Block ads and prevent DNS hijacking for every device |
| 👨‍👩‍👧 Many users & devices | Lots of household devices online at once, stable routing without drops |
| 🧰 All-in-one | Router + NAS + Docker containers running together |
| ♻️ Reuse old hardware | Repurpose old PCs / cheap mini PCs at low cost |
| 🎛️ Full network control | Enjoy DIY and advanced setups; control every packet |

**❌ When you don't need one (just buy a hardware router)**

| Situation | Reason |
| --- | --- |
| Basic single-device browsing | Simple needs; a hardware router is enough |
| Want plug-and-play, zero maintenance | Don't want to learn networking or tinker |
| Sensitive to power/space | Soft routers draw more power and are bulkier |

> 💡 Rule of thumb: if "just getting online" is enough, a hardware router works. If you want to control how you go online — VPN, ad blocking, all-in-one — a soft router is worth it.

---

## ⚙️ Function

A soft router implements many advanced features in software, far beyond a typical home router:

- **Routing / NAT**: basic traffic routing, multi-WAN (broadband) aggregation and load balancing
- **Firewall**: fine-grained packet filtering, traffic behaviour detection
- **VPN**: set up WireGuard, OpenVPN, IPsec servers/clients
- **QoS / Traffic Shaping**: automatically allocate bandwidth per application (Layer-7 flow control)
- **Ad Blocking**: block ads and trackers via AdGuard Home, Pi-hole, etc.
- **DNS service**: self-hosted DNS, prevent DNS pollution/hijacking
- **Bypass router (transparent proxy)**: add a side router for advanced features without replacing the main router
- **Virtualisation**: run multiple systems and Docker containers at once (e.g. NAS services)

---

## 🚀 Advantage

| Advantage | Description |
| --- | --- |
| 💰 Low hardware cost | Use an old PC or cheap mini PC; one device for many jobs |
| 🧩 Unlimited extensibility | Install plugins/packages for whatever features you want |
| 🔧 Easy hardware upgrades | Swap CPU / add RAM to improve performance; no full replacement |
| ⚡ Stackable performance | With a strong CPU, forwarding can beat premium hardware routers |
| 🔄 Software/hardware separation | Routing logic is independent; the system can be reflashed anytime |
| 🌍 Rich open-source ecosystem | OpenWrt community is active, fast updates, self-compile to avoid backdoors |

**Drawbacks to keep in mind**

| Drawback | Description |
| --- | --- |
| 🛠️ Steep setup curve | Requires some networking knowledge; higher learning cost for beginners |
| 🔌 Higher power draw | More power-hungry than dedicated-chip hardware routers |
| ⚠️ Stability depends on config | Misconfiguration or wrong firmware can drop connectivity |
| 🔐 Closed-source risks | Some domestic closed-source systems had mining-backdoor scandals (e.g. iKuai) |

---

## 💽 Software (Router OS)

The core of a soft router is the **router OS**. The common options:

### OpenWrt (open-source, most extensible)

- The lightest router OS; the base can be as small as 5MB, fitting low-end hardware
- Fully open-source; can self-compile, no backdoor concerns
- Richest plugin ecosystem (luci); a package exists for nearly any feature
- Configuration needs some experience; beginners must tinker

### iKuai / Gocloud (domestic, strong flow control)

- Domestic commercial system with a free home edition
- **7-layer flow control** is its signature: per-app QoS, best localisation
- User-friendly and works out of the box; great for beginners
- Closed-source; iKuai had a **mining-backdoor** controversy
- **No IPv6 support**; flow control is CPU-heavy

### PfSense / OPNsense (enterprise-grade, security-focused)

- Open-source enterprise firewall systems sharing the same roots
- Security-first: traffic behaviour detection, antivirus, fine-grained firewall rules
- Full IPv6 support and very stable; for advanced users
- Much more complex to configure than OpenWrt; steep learning curve

### RouterOS (MikroTik) (rock-solid)

- MikroTik's OS, also installable on a PC
- Extremely stable; in practice can run for years without a reboot
- Powerful and performant, but unique UI logic and hard to pick up

---

## 🖥️ Hardware

### Core hardware specs

| Component | Recommendation | Notes |
| --- | --- | --- |
| CPU | Intel N100 / N305 / J4125 / N5105 | Mainstream x86 performance; N100 is the current value pick |
| RAM | 1–4GB (home) / 8GB+ (virtualisation) | 1–2GB is enough for pure routing; more for Docker/VMs |
| NIC | Intel i225 / i226 (2.5G) multi-port | NIC chip compatibility is key; Intel is the most reliable |
| Storage | mSATA / M.2 SSD or USB stick | The system is tiny; 16GB is enough |
| Chassis | Mini PC / industrial PC (2/4/6 ports) | Fanless passive cooling, runs 24/7 |

### Common hardware platforms

- **x86 mini PC / industrial PC**: the mainstream choice, e.g. Intel N100, J4125 series; multi-port design made for soft routing
- **ARM off-the-shelf devices**: Phicomm N1, R2S/R5S (Rockchip), cheap and power-efficient, good for entry or bypass
- **Old PC / server**: repurpose idle hardware, zero cost, but higher power draw
- **Virtual machine**: run as a VM on ESXi/PVE, for users who already have a server

### Recommended configurations

| Use case | Suggested config |
| --- | --- |
| Entry / bypass | ARM device (N1/R2S) or J4125 dual-port |
| Main home router | Intel N100 + 4× 2.5G ports + 4GB RAM |
| Enthusiast / AIO | N305 or stronger + 8GB+ RAM + 6 ports; run NAS + routing + VMs |

---

## 🔀 Alternative

### 1️⃣ Choosing among soft-router systems

| System | Stability | Security | Resource use | Learning curve | Extensibility | Highlight |
| --- | --- | --- | --- | --- | --- | --- |
| OpenWrt | Medium | Med-high | Low | Medium | High | Open-source, lightweight, richest plugins |
| iKuai / Gocloud | Medium | Average | High | Low | Low | Domestic, strong flow control, out-of-box, no IPv6 |
| PfSense / OPNsense | High | High | Medium | High | Medium | Enterprise firewall, very stable |
| RouterOS (MikroTik) | High | Med-high | Low | High | Medium | Rock-solid, powerful |

### 2️⃣ Just buy a hardware router (no tinkering)

- **For**: users who want plug-and-play, low power, zero maintenance
- **Examples**: ASUS, TP-Link, Xiaomi, Netgear, Ubiquiti (UniFi)
- **Trade-off**: limited features and upgrade room, but stable and hassle-free

### 3️⃣ Hybrid (soft router + hardware router)

- The hardware router handles dial-up as the main router; the soft router acts as a **bypass router** for VPN, ad blocking, etc.
- Balances stability and extensibility; a common setup for home enthusiasts

---

## ⚠️ Notes

| Note | Description |
| --- | --- |
| System choice | Beginners: OpenWrt or iKuai; for security/stability pick PfSense/OPNsense |
| IPv6 needs | iKuai/Gocloud don't support IPv6; choose OpenWrt or PfSense if you need it |
| Flow control is CPU-heavy | 7-layer flow control is quite CPU-intensive; mind the hardware |
| Closed-source risk | iKuai had a mining-backdoor scandal; evaluate closed-source systems yourself |
| NIC compatibility | Confirm the NIC chipset (Intel is safest) before buying to avoid driver issues |

---

## 🔗 References

| Source | Link |
| --- | --- |
| Soft Router - Baidu Baike | [https://baike.baidu.com/item/軟路由/4824918](https://baike.baidu.com/item/%E8%BD%AF%E8%B7%AF%E7%94%B1/4824918) |
| Choosing a soft-router system | [https://bigppwong.github.io/cnblog/linux/網絡/軟路由系統的選擇/](https://bigppwong.github.io/cnblog/linux/%E7%BD%91%E7%BB%9C/%E8%BD%AF%E8%B7%AF%E7%94%B1%E7%B3%BB%E7%BB%9F%E7%9A%84%E9%80%89%E6%8B%A9/) |
| Soft router vs hardware router - CSDN | [https://blog.csdn.net/movingcomm/article/details/160269439](https://blog.csdn.net/movingcomm/article/details/160269439) |

*Sources: official sites and public information (Sep 2026).*