openwrt/docs/flint1-firmware-options.md

# GL-AX1800 (Flint1) Firmware Options Research

**Date:** 2026-01-12  
**Device:** GL-AX1800 (Flint 1)  
**Current Firmware:** ApNos-3c11d1c4-devel, OpenWrt 23.05-SNAPSHOT  
**Architecture:** ARMv7 rev 4 (v7l), IPQ6000 SoC

---

## Executive Summary

The GL-AX1800 has **three main firmware options** available in 2025-2026:

1. **GL.iNet Official Firmware** (v4.6-4.8) - Custom OpenWrt with proprietary features
2. **Vanilla OpenWrt** (23.05.x stable, master snapshots) - Official community builds
3. **Alternative Firmware** (DD-WRT potential, NO Tomato support)

**Key Finding:** GL-AX1800 was officially merged into OpenWrt master in March 2025, now under the `qualcommax/ipq60xx` target (NOT `ipq40xx` as in older 23.05 releases).

---

## Option 1: GL.iNet Official Firmware

### Latest Versions

| Version | Status | Release Date | Notes |
|---------|--------|--------------|-------|
| **4.8.x** | Beta/Upcoming | Q3 2025 (planned) | Major VPN & UI improvements |
| **4.7.0** | **Pulled/Problematic** | March 2025 | Wi-Fi instability reported |
| **4.6.11** | **Stable (Current)** | 2024-2025 | Most stable production version |

### Version 4.8.x Features (Upcoming)

**Major Improvements:**
- **Multiple VPN instances** - Run multiple VPN clients simultaneously in policy mode
- **OpenVPN DCO** (Data Plane Offload) - Hardware-accelerated OpenVPN on AX1800
- **Rebuilt cellular interface** - Better support for LTE/5G modems
- **Redesigned toggle switch** - Control Repeater, Wi-Fi, VPN, or LED
- **One-click log submission** - Improved troubleshooting
- **IPv6 VPN optimization**
- **Categorized log search**

**Status:** Beta testing started April 2025, stable Q3 2025  
**AX1800 Support:** ✅ Confirmed

**Concerns:**
- Early 4.8.0 beta had VPN traffic leak issues (expected fix in 4.8.1)
- Beta firmware may have stability issues

---

### Version 4.7.0 (NOT RECOMMENDED)

**Features:**
- New device setup wizard
- Enhanced WireGuard + AzireVPN integration
- Control D DNS support
- Improved repeater privacy (random MAC)

**Problems:**
- ❌ **Wi-Fi instability** - Users reported connection drops
- ❌ Appears to have been **pulled/withdrawn** from download center
- ❌ Users downgraded to 4.6.8 for stability
- ❌ Missing package repositories (4.7.x)

**Status:** **Avoid** - Known issues, likely discontinued

---

### Version 4.6.x (STABLE - RECOMMENDED)

**Latest:** 4.6.11

**Features:**
- Stable repeater mode enhancements
- Proven reliability
- Full package repository support

**Security Note:**
- CVE-2025-67091 (moderate severity) in 4.6.4 and 4.6.8
- Vulnerability in custom opkg wrapper script
- Fixed in later versions

**Download:** https://dl.gl-inet.com/?model=ax1800

**Recommendation:** Use 4.6.11 until 4.8.x is proven stable

---

## Option 2: Vanilla OpenWrt

### Target Architecture Change

**IMPORTANT:** The GL-AX1800 target changed between OpenWrt versions:

| OpenWrt Version | Target | Architecture |
|-----------------|--------|--------------|
| **21.02** | `ipq40xx/generic` | ARMv7 (legacy support) |
| **23.05** | `ipq40xx/generic` | ARMv7 (transitional) |
| **Master/Snapshots** | **`qualcommax/ipq60xx`** | ARMv7 (proper IPQ6000 support) |

**Explanation:** Earlier versions used the `ipq40xx` target as a workaround. Official IPQ6000 support was merged into OpenWrt master in **March 2025** under the new `qualcommax/ipq60xx` target.

---

### 23.05.x Stable (What You're Running)

**Latest:** 23.05.5 (September 2024)

**Specs:**
- GCC 12.3.0
- Target: `ipq40xx/generic`
- SDK Downloaded: ✅ `/flint1-armv7/sdk/openwrt-23.05-sdk/`

**Download Paths:**
- Images: `https://downloads.openwrt.org/releases/23.05.5/targets/ipq40xx/generic/`
- SDK: ✅ Already downloaded

**Pros:**
- ✅ Stable, tested release
- ✅ SDK/toolchain available
- ✅ Matches your current firmware base

**Cons:**
- ⚠️ Uses legacy `ipq40xx` target (not native IPQ6000)
- ⚠️ Older kernel/packages vs snapshots

---

### Master Snapshots (Latest Development)

**Target:** `qualcommax/ipq60xx` (NEW as of March 2025)

**Specs:**
- **GCC:** 14.3.0 (latest)
- **Kernel:** Linux 6.x (newest)
- **Features:** Bleeding-edge OpenWrt
- **SDK:** Available with GCC 14.3.0

**Download Paths:**
- **Images:** `https://downloads.openwrt.org/snapshots/targets/qualcommax/ipq60xx/`
- **SDK:** `https://downloads.openwrt.org/snapshots/targets/qualcommax/ipq60xx/openwrt-sdk-qualcommax-ipq60xx_gcc-14.3.0_musl.Linux-x86_64.tar.zst`

**Available Images:**
```
openwrt-qualcommax-ipq60xx-glinet_gl-ax1800-squashfs-factory.bin
openwrt-qualcommax-ipq60xx-glinet_gl-ax1800-squashfs-sysupgrade.bin
```

**Firmware Selector:** https://firmware-selector.openwrt.org/  
(Search: "GL-AX1800", select "SNAPSHOT")

**Pros:**
- ✅ **Native IPQ6000 support** (`qualcommax/ipq60xx`)
- ✅ **GCC 14.3.0** - Best C++23 support
- ✅ Latest kernel, drivers, features
- ✅ Active development, frequent updates
- ✅ Newer `ath11k` Wi-Fi driver

**Cons:**
- ⚠️ **No LuCI web interface** by default (install via SSH)
- ⚠️ Development builds - less stable than releases
- ⚠️ `ath11k` open-source driver uses more RAM (~380MB free vs 512MB total)
- ⚠️ Doesn't include all Qualcomm proprietary SDK components
- ⚠️ Daily builds - version changes constantly

**RAM Consideration:**
- GL.iNet firmware: Proprietary drivers, more free RAM
- Vanilla OpenWrt: Open-source `ath11k`, ~130MB used by driver firmware

---

### Installation Methods

**For Factory/Stock:**
```
openwrt-qualcommax-ipq60xx-glinet_gl-ax1800-squashfs-factory.bin
```

**For OpenWrt→OpenWrt:**
```
openwrt-qualcommax-ipq60xx-glinet_gl-ax1800-squashfs-sysupgrade.bin
```

**Via U-Boot:** Flash at router boot (advanced users)

---

## Option 3: Alternative Firmware

### DD-WRT

**Status:** **Potentially Supported** (unconfirmed)

**Evidence:**
- DD-WRT database lists: `glinet-gl-ax1800 build 61557 20250531`
- Build number suggests May 31, 2025 release
- **NOT verified** - check DD-WRT forums for actual availability

**Download (if available):** https://dd-wrt.com/support/router-database/

**Pros:**
- Different feature set than OpenWrt
- May have better QoS/VPN features

**Cons:**
- ⚠️ **Unverified support** - database may be outdated
- ⚠️ DD-WRT warns their database can have inaccurate entries
- ⚠️ Less community support for this device
- ⚠️ Risk of bricking if not officially supported

**Recommendation:** **Wait for confirmation** from DD-WRT community before attempting

---

### Tomato / Tomato64

**Status:** ❌ **NO SUPPORT**

- Tomato64 lists support for ARM64 devices like GL-MT6000
- **GL-AX1800 is NOT listed**
- No indication of IPQ6000 support in Tomato ecosystem

**Recommendation:** Not an option for this device

---

### Other Firmware Options

- **ImmortalWrt** - OpenWrt fork with Chinese focus, likely has GL-AX1800 support
- **OpenWISP** - Network management platform (not firmware replacement)
- **LEDE** - Merged back into OpenWrt in 2018 (no longer separate)

---

## Comparison Matrix

| Feature | GL.iNet 4.6.11 | GL.iNet 4.8 (Beta) | OpenWrt 23.05.5 | OpenWrt Master | DD-WRT |
|---------|----------------|--------------------|-----------------|--------------------|--------|
| **Stability** | ⭐⭐⭐⭐⭐ | ⭐⭐⚠️ Beta | ⭐⭐⭐⭐ | ⭐⭐⭐ Snapshots | ❓ Unknown |
| **Features** | ⭐⭐⭐⭐ | ⭐⭐⭐⭐⭐ | ⭐⭐⭐ | ⭐⭐⭐⭐⭐ | ❓ |
| **GCC Version** | ~8.x-12.x | ~12.x | 12.3.0 | **14.3.0** | N/A |
| **Target** | Custom | Custom | `ipq40xx` | **`qualcommax/ipq60xx`** | Custom |
| **RAM Usage** | Better (proprietary) | Better | Higher (ath11k) | Higher (ath11k) | ❓ |
| **Updates** | Quarterly | TBD | Periodic | **Daily** | Rare |
| **LuCI Web UI** | Custom | Custom | ✅ Included | ❌ Install manually | ✅ |
| **Support** | GL.iNet + Community | GL.iNet + Community | Official OpenWrt | Official OpenWrt | DD-WRT forums |

---

## Recommendations

### For Stability & Features
**Use GL.iNet 4.6.11**
- Most stable current option
- All GL.iNet features (VPN, AdGuard, etc.)
- Good for production use

### For Latest OpenWrt Features  
**Use OpenWrt Master Snapshots**
- Native `qualcommax/ipq60xx` support
- GCC 14.3.0 for building packages
- Latest kernel & drivers
- **BUT:** Requires SSH comfort, less stable

### For SDK Development
**You Already Have:**
- ✅ OpenWrt 23.05.5 SDK (GCC 12.3.0) - Downloaded
- ✅ musl.cc ARMv7 toolchain (GCC 11.2.1) - Downloaded

**To Add:**
```bash
# Download latest snapshot SDK
cd flint1-armv7/sdk
wget https://downloads.openwrt.org/snapshots/targets/qualcommax/ipq60xx/openwrt-sdk-qualcommax-ipq60xx_gcc-14.3.0_musl.Linux-x86_64.tar.zst
```

**GCC 14.3.0 = Best C++23 support for btop compilation**

---

## When to Upgrade

### Stick with Current (23.05-SNAPSHOT) If:
- ✅ Everything works
- ✅ You value stability
- ✅ You already have SDK for development

### Upgrade to GL.iNet 4.6.11 If:
- ✅ Want GL.iNet features (VPN, AdGuard, GUI)
- ✅ Need stable production firmware
- ✅ Want long-term support

### Upgrade to OpenWrt Master If:
- ✅ Want bleeding-edge features
- ✅ Comfortable with SSH/command line
- ✅ Don't mind installing LuCI manually
- ✅ Want native `qualcommax/ipq60xx` support

### Wait for GL.iNet 4.8.x If:
- ✅ Want multiple VPN instances
- ✅ Need OpenVPN DCO performance
- ✅ Can wait for stable release (Q3 2025)

---

## Summary

**You have excellent options:**

1. **Stay Current** - Your 23.05-SNAPSHOT works, SDK available
2. **GL.iNet 4.6.11** - Most stable GL.iNet firmware
3. **OpenWrt Snapshots** - Latest qualcommax/ipq60xx with GCC 14.3.0
4. **GL.iNet 4.8.x** - Wait for stable release (Q3 2025)

**For development:** You're well-equipped with 23.05.5 SDK (GCC 12.3.0). Consider adding snapshot SDK (GCC 14.3.0) for maximum C++23 compatibility.

**DD-WRT:** Unverified - wait for community confirmation  
**Tomato:** Not supported for this device