Supported OpenWrt
The device must run a current OpenWrt release appropriate for that hardware. TaraSec does not replace or install the router firmware itself.
OPENWRT RESEARCH — NOT YET INSTALLED
Review a possible future OpenWrt design.
TaraSec has not yet completed an installation on OpenWrt hardware. The repository and this page preserve an early OpenWrt/openNDS design for future contributors; they are not a supported installation path and should not be presented as tested instructions.
PROVISIONAL REQUIREMENTS
What a future test router may need.
Enough storage and memory
There must be enough free flash storage and RAM for openNDS, CA certificates and the TaraSec configuration. Requirements vary with OpenWrt release and router architecture, so we are not publishing a minimum RAM/flash figure until testing establishes a reliable one.
Working Wi-Fi and WAN
The router needs a functioning Internet uplink and an enabled Wi-Fi radio capable of hosting an additional TaraSec SSID.
Package installation
The router must be able to install the opennds and ca-bundle packages from its configured OpenWrt repositories.
HTTPS access
The router and hotspot clients need access to TaraSec's central service. The experimental design uses HTTPS and openNDS FAS security level 4.
Test before production
Do not depend on the current implementation for commercial hotspot service until your particular hardware and access/payment flow have been tested end to end.
FUTURE VALIDATION
Source exists, but the procedure is unverified.
The taraSec_openWRT repository contains an early installer intended eventually to add a separate TaraSec network rather than replace the owner's existing LAN. It attempts package installation, radio selection, guest-network isolation, DHCP/firewall configuration, openNDS setup and TaraSec registration.
Do not treat its commands as published installation instructions yet. The first controlled hardware test must record router model, OpenWrt release, flash/RAM, interfaces, complete output, network recovery method and end-to-end captive access results. Only after that validation should this page publish copyable installation commands.
WHAT IT CURRENTLY DOES
Keep the router thin.
The OpenWrt device provides Wi-Fi, network isolation and openNDS captive-access enforcement. Pricing and payment-provider logic should remain central rather than being embedded in every router.
This makes it possible for payment choices to vary by hotspot and country without reflashing the router. That architecture is implemented only in part today; provider integrations and owner configuration are still being developed.
STATUS
No successful OpenWrt installation has been completed yet.
The requirements, installer and architecture may change substantially after the first hardware test. TaraSec's current practical hotspot direction uses Linux-computer gateways such as Ubuntu systems.