Original author(s) | Jonathan Zarate |
---|---|
Developer(s) | Tomato Project |
Initial release | December 2006 |
Final release | 1.28 / 28 June 2010 |
Written in | C++ |
Operating system | Linux |
Platform | MIPS, ARM |
Type | Routing software |
License | Freeware Backend: GNU General Public License Frontend: proprietary [1] |
Website | https://www.polarcloud.com/tomato |
Stable release | |
---|---|
Repository | https://bitbucket.org/pedro311/workspace/repositories/ |
Platform | ARM, MIPS |
Website | https://freshtomato.org |
Tomato is a family of community-developed, custom firmware for consumer-grade computer networking routers and gateways powered by Broadcom chipsets. The firmware has been continually forked and modded by multiple individuals and organizations, with the most up-to-date fork provided by the FreshTomato project.
Tomato was originally released by Jonathan Zarate in 2006, using the Linux kernel and drawing extensively on the code of HyperWRT. It was targeted at many popular routers of the time, most notably the older Linksys WRT54G series, Buffalo AirStation, Asus routers and Netgear WNR3500L. [2] His final release of the original Tomato firmware came in June 2010, by which point its popularity had grown large enough that development and support continued through the user community, resulting in a series of releases (dubbed "mods") by individual users or teams of them that continues to the present day.
Fedor Kozhevnikov created a notable early mod he called TomatoUSB, which ceased development in November 2010. [3] It was then forked by other developers [4] and remains the nearest common ancestor to all of the forks with any recent activity. The project saw a boost in recognition when Tomato was chosen by Asus as the base used to build the firmware currently preinstalled on their entire line of home routers, ASUSWRT. [5] [6]
Currently, FreshTomato appears to be the only project that has seen active development and new releases. [7]
Several notable features have been part of Tomato long enough to be common to all forks, among them are:
Mod name | Base version | Mod version | Latest release | 5 GHz (802.11 a/n/ac/ax) | IPv6 | USB support | Memory card support | VPN protocols [a] | SFTP | Virtual LANs |
---|---|---|---|---|---|---|---|---|---|---|
TomatoVPN (SgtPepperKSU) [8] | 1.27 [b] | 1.27vpn3.6 | Jan 2010 | No | No | No | No | OpenVPN | No | No |
Tomato | 1.28 [c] | 1.28 | Jun 2010 | No | No | No | No | No | No | No |
Tomato ND | 1.28 [d] | No | No | No | No | No | No | No | ||
SpeedMod (hardc0re) | 1.28 [b] | 120 | Jul 2010 | No | No | No | No | No | No | No |
TomatoUSB (Teddy Bear) [9] | 1.28 [d] | Build 54 | Nov 2010 | Yes | Yes | Printer sharing, NAS (CIFS/FTP), DLNA server | No | OpenVPN | Via Optware | Yes |
slodki | 1.28 [d] | 1.28.02 | Feb 2011 | No | No | Printer sharing, NAS (CIFS/FTP) | SD, SDHC, MMC | OpenVPN | Via Optware | No |
DualWAN [10] | 1.28 [b] | 1.28.0542 | Jan 2012 | No | Yes | Printer sharing, NAS (CIFS/FTP), DLNA server, 3G Modem | No | OpenVPN, PPTP | Via Optware | Yes |
Teaman [11] | 1.28 [d] | v0025 | Jun 2012 | Yes | Yes | Printer sharing, NAS (CIFS/FTP), 3G Modem | SD, SDHC, MMC | OpenVPN, PPTP (server) | Via Optware | With GUI |
EasyTomato [12] | 1.28 [b] | 0.8 | Jun 2013 | Yes | Yes | Printer sharing, NAS (CIFS/NFSv3/FTP), DLNA server, 3G Modem | SD, SDHC, MMC | OpenVPN, PPTP | Via Optware | With GUI |
Victek RAF [13] | 1.28 [b] | 1.28.9013 R1.3 | Jul 2014 | Yes | Yes | Printer sharing, NAS (CIFS/NFSv3/FTP), DLNA server, 3G Modem | SD, SDHC, MMC | OpenVPN, PPTP | Via Optware | With GUI |
Toastman [14] | 1.28 [b] | RT: 1.28.7511.5 RT‑N: 1.28.0511.5 ARM: 1.28.9008.8 | Jan 2017 | Yes | Yes | Printer sharing, NAS (CIFS/NFSv3/FTP), DLNA server, 3G Modem | SD, SDHC, MMC | OpenVPN, PPTP | Via Entware-ng or Optware-ng | With GUI |
Shibby | 1.28 [b] | v140‑MultiWAN | May 2017 | Yes | Yes | Printer sharing, NAS (CIFS/NFSv3/FTP), DLNA server, 3G/LTE Modem, UPS monitoring | SD, SDHC, SDXC, MMC | OpenVPN, PPTP, L2TP (client), tinc (server) | Via Entware or Optware-ng | With GUI |
AdvancedTomato V2 | 1.28 [b] | 3.5-140 | Nov 2017 | Yes | Yes | Printer sharing, NAS (CIFS/NFSv3/FTP), DLNA server, 3G/LTE Modem and UPS monitoring | SD, SDHC, SDXC, MMC | OpenVPN, PPTP, L2TP (client), tinc (server) | Via Entware or Optware-ng | With GUI |
FreshTomato‑ARM and FreshTomato‑MIPS | 1.28 [b] | 2024.3 [15] | Aug 2024 | Yes | Yes | Printer sharing, NAS (SMB2/NFSv4/FTP), DLNA server, 3G/LTE Modem and UPS monitoring | SD, SDHC, SDXC, MMC | OpenVPN, PPTP, L2TP (client), tinc (server) | Via Entware or Optware-ng | With GUI |
Mod name | Base version | Mod version | Latest release | 5 GHz (802.11 a/n/ac/ax) | IPv6 | USB support | Memory card support | VPN protocols | SFTP | Virtual LANs |
Name | Static ARP | Bandwidth limiter | NFS server | BitTorrent client | Guest WiFi | PPPoE server | CPU overclocking | Tor client | Multi-WAN | Siproxd VoIP | LED control | Theming [16] | Per-IP traffic stats | ||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
TomatoVPN (SgtPepperKSU) | No | No | No | No | No | No | No | No | No | No | No | No | No | No | No | No | No | No | No |
Tomato | No | No | No | No | No | No | No | No | No | No | No | No | No | No | No | No | No | No | No |
Tomato ND | No | No | No | No | No | No | No | No | No | No | No | No | No | No | No | No | No | No | No |
SpeedMod (hardc0re) | No | No | No | No | No | No | No | No | No | No | No | No | No | No | No | No | No | No | No |
TomatoUSB (Teddy Bear) | No | No | No | No | No | No | No | No | No | No | No | No | No | No | No | No | No | Yes | No |
slodki | No | No | No | No | No | No | No | No | No | No | No | No | No | No | No | No | No | No | No |
DualWAN | Yes | Yes | No | Yes | No | Yes | No | No | No | No | Yes | No | No | No | No | No | Yes | Yes | Yes |
Teaman | Yes | Yes | No | No | With GUI | No | No | No | No | No | No | No | No | No | No | No | Yes | Yes | Yes |
EasyTomato | Yes | Yes | Version 3 | No | With GUI | No | No | No | No | No | No | No | No | No | No | No | Yes | Yes | Yes |
Victek RAF | Yes | VLAN | Version 3 | No | With GUI | No | With GUI | With GUI | No | No | No | With GUI | With GUI | by script | No | No | Yes | Yes | Yes |
Toastman | Yes | Yes | Version 3 | No | With GUI | No | No | With GUI | No | No | No | No | No | No | No | No | Yes | Yes | Yes |
Shibby | Yes | VLAN | Version 3 (with GUI) | With GUI | With GUI | No | With GUI | Yes | With GUI | Yes | Yes | No | Yes | Yes | Yes | by script | Yes | Yes | Yes |
AdvancedTomato V2 | Yes | VLAN | Version 3 (with GUI) | With GUI | With GUI | No | With GUI | Yes | With GUI | Yes | Yes | No | Yes | Yes | Yes | by script | Yes | Yes | Yes |
FreshTomato‑ARM and FreshTomato‑MIPS | Yes | VLAN | Version 4 (with GUI) | With GUI | With GUI | No | With GUI | Yes | With GUI | Yes | Yes | No | Yes | Yes | Yes | by script | Yes | Yes | Yes |
Name | Static ARP | Bandwidth limiter | NFS server | BitTorrent client | Guest WiFi | PPPoE server | CPU overclocking | Tor client | Multi-WAN | Siproxd VoIP | LED control | Theming [16] | Per-IP traffic stats |
In computing, a denial-of-service attack is a cyber-attack in which the perpetrator seeks to make a machine or network resource unavailable to its intended users by temporarily or indefinitely disrupting services of a host connected to a network. Denial of service is typically accomplished by flooding the targeted machine or resource with superfluous requests in an attempt to overload systems and prevent some or all legitimate requests from being fulfilled. The range of attacks varies widely, spanning from inundating a server with millions of requests to slow its performance, overwhelming a server with a substantial amount of invalid data, to submitting requests with an illegitimate IP address.
Dynamic DNS (DDNS) is a method of automatically updating a name server in the Domain Name System (DNS), often in real time, with the active DDNS configuration of its configured hostnames, addresses or other information.
Internet Connection Sharing (ICS) is a Windows service that enables one Internet-connected computer to share its Internet connection with other computers on a local area network (LAN). The computer that shares its Internet connection serves as a gateway device, meaning that all traffic between other computers and the Internet go through this computer. ICS provides Dynamic Host Configuration Protocol (DHCP) and network address translation (NAT) services for the LAN computers.
OpenVPN is a virtual private network (VPN) system that implements techniques to create secure point-to-point or site-to-site connections in routed or bridged configurations and remote access facilities. It implements both client and server applications.
Pharming is a cyberattack intended to redirect a website's traffic to another, fake site by installing a malicious program on the victim's computer in order to gain access to it. Pharming can be conducted either by changing the hosts file on a victim's computer or by exploitation of a vulnerability in DNS server software. DNS servers are computers responsible for resolving Internet names into their real IP addresses. Compromised DNS servers are sometimes referred to as "poisoned". Pharming requires unprotected access to target a computer, such as altering a customer's home computer, rather than a corporate business server.
A wireless router or Wi-Fi router is a device that performs the functions of a router and also includes the functions of a wireless access point. It is used to provide access to the Internet or a private computer network. Depending on the manufacturer and model, it can function in a wired local area network, in a wireless-only LAN, or in a mixed wired and wireless network.
A VoIP phone or IP phone uses voice over IP technologies for placing and transmitting telephone calls over an IP network, such as the Internet. This is in contrast to a standard phone which uses the traditional public switched telephone network (PSTN).
Wireless security is the prevention of unauthorized access or damage to computers or data using wireless networks, which include Wi-Fi networks. The term may also refer to the protection of the wireless network itself from adversaries seeking to damage the confidentiality, integrity, or availability of the network. The most common type is Wi-Fi security, which includes Wired Equivalent Privacy (WEP) and Wi-Fi Protected Access (WPA). WEP is an old IEEE 802.11 standard from 1997. It is a notoriously weak security standard: the password it uses can often be cracked in a few minutes with a basic laptop computer and widely available software tools. WEP was superseded in 2003 by WPA, a quick alternative at the time to improve security over WEP. The current standard is WPA2; some hardware cannot support WPA2 without firmware upgrade or replacement. WPA2 uses an encryption device that encrypts the network with a 256-bit key; the longer key length improves security over WEP. Enterprises often enforce security using a certificate-based system to authenticate the connecting device, following the standard 802.11X.
SpeedTouch is a line of customer-premises equipment that was initially produced by Alcatel and later by Thomson Multimedia. It includes ADSL and ADSL2+ modems, residential gateways, wireless access equipment, VoIP handsets and SHDSL interconnect equipment. They are a major brand in home and business networking products.
Split tunneling is a computer networking concept which allows a user to access dissimilar security domains like a public network and a local area network or wide area network at the same time, using the same or different network connections. This connection state is usually facilitated through the simultaneous use of a LAN network interface controller (NIC), radio NIC, Wireless LAN (WLAN) NIC, and VPN client software application without the benefit of an access control.
In computing, Microsoft's Windows Vista and Windows Server 2008 introduced in 2007/2008 a new networking stack named Next Generation TCP/IP stack, to improve on the previous stack in several ways. The stack includes native implementation of IPv6, as well as a complete overhaul of IPv4. The new TCP/IP stack uses a new method to store configuration settings that enables more dynamic control and does not require a computer restart after a change in settings. The new stack, implemented as a dual-stack model, depends on a strong host-model and features an infrastructure to enable more modular components that one can dynamically insert and remove.
Windows Rally is a set of technologies from Microsoft intended to simplify the setup and maintenance of wired and wireless network-connected devices. They aim to increase reliability and security of connectivity for users who connect the devices to the Internet or to computers running Microsoft Windows. These technologies provide control of network quality of service (QoS) and diagnostics for data sharing, communications, and entertainment. Windows Rally technologies provide provisioning for the following devices:
mod_qos is a quality of service (QoS) module for the Apache HTTP server implementing control mechanisms that can provide different priority to different requests.
Zeroshell is a small open-source Linux distribution for servers and embedded systems which aims to provide network services. Its administration relies on a web-based graphical interface; no shell is needed to administer and configure it. Zeroshell is available as Live CD and CompactFlash images, and VMware virtual machines.
Linksys manufactures a series of network routers. Many models are shipped with Linux-based firmware and can run third-party firmware. The first model to support third-party firmware was the very popular Linksys WRT54G series.
OpenWrt is an open-source project for embedded operating systems based on Linux, primarily used on embedded devices to route network traffic. The main components are Linux, util-linux, musl, and BusyBox. All components have been optimized to be small enough to fit into the limited storage and memory available in home routers.
The 1100-series IP phones are 6 different desktop IP clients manufactured by Avaya for Unified communications which can operate on the SIP or UNIStim protocols. The SIP Firmware supports presence selection and notification along with secure instant messaging.
Gargoyle is a free OpenWrt-based Linux distribution for a range of wireless routers based on Broadcom, Atheros, MediaTek and others chipsets, Asus Routers, Netgear, Linksys and TP-Link routers. Among notable features is the ability to limit and monitor bandwidth and set bandwidth caps per specific IP address.
Copyright 2006-2010 Jonathan Zarate For use with Tomato Firmware only. No part of this file may be used without permission.