ICYMI, Joe Menn had a good scoop this week about how the US govt is getting set to ban TP-Link devices from being sold in the United States. If that happens, a whole lot of small businesses will probably need to find new networking gear. I have never trusted TP-Link devices and have repeatedly warned readers away from them. They have a history of flooding the market with massively underpriced hardware, and this is a market where generally speaking the cheapest means the most hackable. Here's one reply I sent to a reader in 2023 who inquired about finding what appeared to be an undocumented cloud login page.
"I realize that NYT and others constantly recommend TPLink b/c of the features vs price point, but I would stay away from this brand, and any that force you to register "in the cloud" before you can use them as local networking devices. You do not want your router to do anything except when you tell it do so, and to my mind all this cloud business being attached to network storage and local network things is troubling."
"If you are at all confident around computers, I'd recommend getting something like a high-end ASUS router and then installing an open source firmware on it, like Tomato or something. Because the default software that is on most routers is complete garbage, and often turns on a lot of stuff you really don't want turned on, or has other stupid default settings. If updating your new $160 router w/ third party firmware that could brick it if you screw it up is too much, then just stick with a Netgear router and make sure you check for firmware updates periodically."
@briankrebs
I could not in good conscience recommend Netgear at this point, both in terms of hardware longevity and security track record. #OpenWRT is a good pick on devices that support it or come natively with it like @turris. If open source is not a priority but networking flexibility is, then
@mikrotik are fairly impossible to beat in terms of features-per-pricepoint (and support old hardware with #RouterOS for basically forever). None of these require cloud registration, of course.