Tomato (firmware)

Last updated
Tomato Firmware
Original author(s) Jonathan Zarate
Developer(s) Tomato Project
Initial releaseDecember 2006;17 years ago (2006-12)
Final release
1.28 / 28 June 2010
Written inC++
Operating system Linux
Platform MIPS, ARM
Type Routing software
License Freeware
Backend: GNU General Public License
Frontend: proprietary [1]
Website https://www.polarcloud.com/tomato   OOjs UI icon edit-ltr-progressive.svg
FreshTomato
Stable release
2024.3  OOjs UI icon edit-ltr-progressive.svg / 4 August 2024  OOjs UI icon edit-ltr-progressive.svg
Repository https://bitbucket.org/pedro311/workspace/repositories/   OOjs UI icon edit-ltr-progressive.svg
Platform ARM, MIPS
Website https://freshtomato.org   OOjs UI icon edit-ltr-progressive.svg

Tomato is a family of community-developed, custom firmware for consumer-grade computer networking routers and gateways powered by Broadcom chipsets. The firmware has been continually forked and modded by multiple individuals and organizations, with the most up-to-date fork provided by the FreshTomato project.

Contents

History

Tomato was originally released by Jonathan Zarate in 2006, using the Linux kernel and drawing extensively on the code of HyperWRT. It was targeted at many popular routers of the time, most notably the older Linksys WRT54G series, Buffalo AirStation, Asus routers and Netgear WNR3500L. [2] His final release of the original Tomato firmware came in June 2010, by which point its popularity had grown large enough that development and support continued through the user community, resulting in a series of releases (dubbed "mods") by individual users or teams of them that continues to the present day.

Fedor Kozhevnikov created a notable early mod he called TomatoUSB, which ceased development in November 2010. [3] It was then forked by other developers [4] and remains the nearest common ancestor to all of the forks with any recent activity. The project saw a boost in recognition when Tomato was chosen by Asus as the base used to build the firmware currently preinstalled on their entire line of home routers, ASUSWRT. [5] [6]

Currently, FreshTomato appears to be the only project that has seen active development and new releases. [7]

Features

Several notable features have been part of Tomato long enough to be common to all forks, among them are:

Feature comparison

Mod nameBase
version
Mod
version
Latest
release
5 GHz
(802.11
a/n/ac/ax)
IPv6 USB
support
Memory card
support
VPN
protocols [a]
SFTP Virtual LANs
TomatoVPN
(SgtPepperKSU) [8]
1.27 [b] 1.27vpn3.6Jan 2010NoNoNoNo OpenVPN NoNo
Tomato1.28 [c] 1.28Jun 2010NoNoNoNoNoNoNo
Tomato ND1.28 [d] NoNoNoNoNoNoNo
SpeedMod
(hardc0re)
1.28 [b] 120Jul 2010NoNoNoNoNoNoNo
TomatoUSB
(Teddy Bear) [9]
1.28 [d] Build 54Nov 2010YesYes Printer sharing,
NAS (CIFS/FTP),
DLNA server
No OpenVPN Via
Optware
Yes
slodki1.28 [d] 1.28.02Feb 2011NoNo Printer sharing,
NAS (CIFS/FTP)
SD,
SDHC,
MMC
OpenVPN Via
Optware
No
DualWAN [10] 1.28 [b] 1.28.0542Jan 2012NoYes Printer sharing,
NAS (CIFS/FTP),
DLNA server,
3G Modem
No OpenVPN,
PPTP
Via
Optware
Yes
Teaman [11] 1.28 [d] v0025Jun 2012YesYes Printer sharing,
NAS (CIFS/FTP),
3G Modem
SD,
SDHC,
MMC
OpenVPN,
PPTP (server)
Via
Optware
With GUI
EasyTomato [12] 1.28 [b] 0.8Jun 2013YesYes Printer sharing,
NAS (CIFS/NFSv3/FTP),
DLNA server,
3G Modem
SD,
SDHC,
MMC
OpenVPN,
PPTP
Via
Optware
With GUI
Victek RAF [13] 1.28 [b] 1.28.9013 R1.3Jul 2014YesYes Printer sharing,
NAS (CIFS/NFSv3/FTP),
DLNA server,
3G Modem
SD,
SDHC,
MMC
OpenVPN,
PPTP
Via
Optware
With GUI
Toastman [14] 1.28 [b] RT: 1.28.7511.5
RT‑N: 1.28.0511.5
ARM: 1.28.9008.8
Jan 2017YesYes Printer sharing,
NAS (CIFS/NFSv3/FTP),
DLNA server,
3G Modem
SD,
SDHC,
MMC
OpenVPN,
PPTP
Via Entware-ng
or
Optware-ng
With GUI
Shibby1.28 [b] v140‑MultiWANMay 2017YesYes Printer sharing,
NAS (CIFS/NFSv3/FTP),
DLNA server,
3G/LTE Modem,
UPS monitoring
SD,
SDHC,
SDXC,
MMC
OpenVPN, PPTP,
L2TP (client),
tinc (server)
Via Entware
or
Optware-ng
With GUI
AdvancedTomato V21.28 [b] 3.5-140Nov 2017YesYes Printer sharing,
NAS (CIFS/NFSv3/FTP),
DLNA server,
3G/LTE Modem
and UPS monitoring
SD,
SDHC,
SDXC,
MMC
OpenVPN, PPTP,
L2TP (client),
tinc (server)
Via Entware
or
Optware-ng
With GUI
FreshTomato‑ARM
and
FreshTomato‑MIPS
1.28 [b] 2024.3  OOjs UI icon edit-ltr-progressive.svg [15] Aug 2024YesYes Printer sharing,
NAS (SMB2/NFSv4/FTP),
DLNA server,
3G/LTE Modem
and UPS monitoring
SD,
SDHC,
SDXC,
MMC
OpenVPN, PPTP,
L2TP (client),
tinc (server)
Via Entware
or
Optware-ng
With GUI
Mod nameBase
version
Mod
version
Latest
release
5 GHz
(802.11
a/n/ac/ax)
IPv6 USB
support
Memory card
support
VPN
protocols
SFTP Virtual LANs

Feature comparison (cont.)

Name
Static ARP
Bandwidth limiter
NFS server
BitTorrent client
Guest WiFi
PPPoE server
Tor client
Multi-WAN
Siproxd VoIP
LED control
Theming  [16]
Per-IP traffic stats
TomatoVPN
(SgtPepperKSU)
NoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNo
TomatoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNo
Tomato NDNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNo
SpeedMod
(hardc0re)
NoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNo
TomatoUSB
(Teddy Bear)
NoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoYesNo
slodkiNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNoNo
DualWANYesYesNoYesNoYesNoNoNoNoYesNoNoNoNoNoYesYesYes
TeamanYesYesNoNoWith
GUI
NoNoNoNoNoNoNoNoNoNoNoYesYesYes
EasyTomatoYesYes Version 3 NoWith
GUI
NoNoNoNoNoNoNoNoNoNoNoYesYesYes
Victek RAFYesVLAN Version 3 NoWith
GUI
NoWith
GUI
With
GUI
NoNoNoWith
GUI
With
GUI
by scriptNoNoYesYesYes
ToastmanYesYes Version 3 NoWith
GUI
NoNoWith
GUI
NoNoNoNoNoNoNoNoYesYesYes
ShibbyYesVLAN Version 3
(with GUI)
With
GUI
With
GUI
NoWith
GUI
YesWith
GUI
YesYesNoYesYesYesby scriptYesYesYes
AdvancedTomato V2YesVLAN Version 3
(with GUI)
With
GUI
With
GUI
NoWith
GUI
YesWith
GUI
YesYesNoYesYesYesby scriptYesYesYes
FreshTomato‑ARM
and
FreshTomato‑MIPS
YesVLAN Version 4
(with GUI)
With
GUI
With
GUI
NoWith
GUI
YesWith
GUI
YesYesNoYesYesYesby scriptYesYesYes
Name
Static ARP
Bandwidth limiter
NFS server
BitTorrent client
Guest WiFi
PPPoE server
Tor client
Multi-WAN
Siproxd VoIP
LED control
Theming  [16]
Per-IP traffic stats
  1. Firmware supports listed protocols in client and server modes unless specified
  2. 1 2 3 4 5 6 7 8 9 Tomato standard and ND
  3. Tomato standard only
  4. 1 2 3 4 Tomato ND (New Driver) only

See also

Related Research Articles

<span class="mw-page-title-main">Denial-of-service attack</span> Type of cyber-attack

In computing, a denial-of-service attack is a cyber-attack in which the perpetrator seeks to make a machine or network resource unavailable to its intended users by temporarily or indefinitely disrupting services of a host connected to a network. Denial of service is typically accomplished by flooding the targeted machine or resource with superfluous requests in an attempt to overload systems and prevent some or all legitimate requests from being fulfilled. The range of attacks varies widely, spanning from inundating a server with millions of requests to slow its performance, overwhelming a server with a substantial amount of invalid data, to submitting requests with an illegitimate IP address.

Dynamic DNS (DDNS) is a method of automatically updating a name server in the Domain Name System (DNS), often in real time, with the active DDNS configuration of its configured hostnames, addresses or other information.

Internet Connection Sharing (ICS) is a Windows service that enables one Internet-connected computer to share its Internet connection with other computers on a local area network (LAN). The computer that shares its Internet connection serves as a gateway device, meaning that all traffic between other computers and the Internet go through this computer. ICS provides Dynamic Host Configuration Protocol (DHCP) and network address translation (NAT) services for the LAN computers.

OpenVPN is a virtual private network (VPN) system that implements techniques to create secure point-to-point or site-to-site connections in routed or bridged configurations and remote access facilities. It implements both client and server applications.

Pharming is a cyberattack intended to redirect a website's traffic to another, fake site by installing a malicious program on the victim's computer in order to gain access to it. Pharming can be conducted either by changing the hosts file on a victim's computer or by exploitation of a vulnerability in DNS server software. DNS servers are computers responsible for resolving Internet names into their real IP addresses. Compromised DNS servers are sometimes referred to as "poisoned". Pharming requires unprotected access to target a computer, such as altering a customer's home computer, rather than a corporate business server.

<span class="mw-page-title-main">Wireless router</span> Computer networking device

A wireless router or Wi-Fi router is a device that performs the functions of a router and also includes the functions of a wireless access point. It is used to provide access to the Internet or a private computer network. Depending on the manufacturer and model, it can function in a wired local area network, in a wireless-only LAN, or in a mixed wired and wireless network.

<span class="mw-page-title-main">VoIP phone</span> Phone using one or more VoIP technologies

A VoIP phone or IP phone uses voice over IP technologies for placing and transmitting telephone calls over an IP network, such as the Internet. This is in contrast to a standard phone which uses the traditional public switched telephone network (PSTN).

<span class="mw-page-title-main">Wireless security</span> Aspect of wireless networks

Wireless security is the prevention of unauthorized access or damage to computers or data using wireless networks, which include Wi-Fi networks. The term may also refer to the protection of the wireless network itself from adversaries seeking to damage the confidentiality, integrity, or availability of the network. The most common type is Wi-Fi security, which includes Wired Equivalent Privacy (WEP) and Wi-Fi Protected Access (WPA). WEP is an old IEEE 802.11 standard from 1997. It is a notoriously weak security standard: the password it uses can often be cracked in a few minutes with a basic laptop computer and widely available software tools. WEP was superseded in 2003 by WPA, a quick alternative at the time to improve security over WEP. The current standard is WPA2; some hardware cannot support WPA2 without firmware upgrade or replacement. WPA2 uses an encryption device that encrypts the network with a 256-bit key; the longer key length improves security over WEP. Enterprises often enforce security using a certificate-based system to authenticate the connecting device, following the standard 802.11X.

<span class="mw-page-title-main">SpeedTouch</span> Brand name of a line of networking equipment

SpeedTouch is a line of customer-premises equipment that was initially produced by Alcatel and later by Thomson Multimedia. It includes ADSL and ADSL2+ modems, residential gateways, wireless access equipment, VoIP handsets and SHDSL interconnect equipment. They are a major brand in home and business networking products.

Split tunneling is a computer networking concept which allows a user to access dissimilar security domains like a public network and a local area network or wide area network at the same time, using the same or different network connections. This connection state is usually facilitated through the simultaneous use of a LAN network interface controller (NIC), radio NIC, Wireless LAN (WLAN) NIC, and VPN client software application without the benefit of an access control.

In computing, Microsoft's Windows Vista and Windows Server 2008 introduced in 2007/2008 a new networking stack named Next Generation TCP/IP stack, to improve on the previous stack in several ways. The stack includes native implementation of IPv6, as well as a complete overhaul of IPv4. The new TCP/IP stack uses a new method to store configuration settings that enables more dynamic control and does not require a computer restart after a change in settings. The new stack, implemented as a dual-stack model, depends on a strong host-model and features an infrastructure to enable more modular components that one can dynamically insert and remove.

Windows Rally is a set of technologies from Microsoft intended to simplify the setup and maintenance of wired and wireless network-connected devices. They aim to increase reliability and security of connectivity for users who connect the devices to the Internet or to computers running Microsoft Windows. These technologies provide control of network quality of service (QoS) and diagnostics for data sharing, communications, and entertainment. Windows Rally technologies provide provisioning for the following devices:

mod_qos is a quality of service (QoS) module for the Apache HTTP server implementing control mechanisms that can provide different priority to different requests.

<span class="mw-page-title-main">Zeroshell</span> Linux distribution

Zeroshell is a small open-source Linux distribution for servers and embedded systems which aims to provide network services. Its administration relies on a web-based graphical interface; no shell is needed to administer and configure it. Zeroshell is available as Live CD and CompactFlash images, and VMware virtual machines.

Linksys manufactures a series of network routers. Many models are shipped with Linux-based firmware and can run third-party firmware. The first model to support third-party firmware was the very popular Linksys WRT54G series.

OpenWrt is an open-source project for embedded operating systems based on Linux, primarily used on embedded devices to route network traffic. The main components are Linux, util-linux, musl, and BusyBox. All components have been optimized to be small enough to fit into the limited storage and memory available in home routers.

The 1100-series IP phones are 6 different desktop IP clients manufactured by Avaya for Unified communications which can operate on the SIP or UNIStim protocols. The SIP Firmware supports presence selection and notification along with secure instant messaging.

<span class="mw-page-title-main">Gargoyle (router firmware)</span> Linux distribution

Gargoyle is a free OpenWrt-based Linux distribution for a range of wireless routers based on Broadcom, Atheros, MediaTek and others chipsets, Asus Routers, Netgear, Linksys and TP-Link routers. Among notable features is the ability to limit and monitor bandwidth and set bandwidth caps per specific IP address.

References

  1. Zarate, Jonathan. "Tomato Firmware, tomato/release/src/router/www/tomato.js source file". Sourceforge.net. Retrieved 23 September 2014. Copyright 2006-2010 Jonathan Zarate For use with Tomato Firmware only. No part of this file may be used without permission.
  2. "Tomato Firmware | polarcloud.com". www.polarcloud.com. Retrieved 2016-10-05.
  3. "Tomato by Shibby » About Tomato (ang.)". tomato.groov.pl. Retrieved 2016-10-05.
  4. List of Tomato Mods on the TomatoUSB website
  5. "Asus ASUSWRT" . Retrieved 2018-01-03.
  6. "Asuswrt-Merlin » About" . Retrieved 2018-01-03.
  7. "FreshTomato source code" . Retrieved 2020-10-01.
  8. TomatoVPN official website
  9. TomatoUSB Mod (Teddy Bear) Home page.
  10. DualWAN Mod Home page.
  11. Teaman Mod Home page. Augusto Bott is the author of the VLANs GUI, Per-IP Traffic Stats (author of cstats, which keeps per-IP data/track/history), Client Monitor Graphs (author of IPTraffic) and author of the Guest SSID GUI.
  12. "EasyTomato Home Page" . Retrieved 2019-03-11.
  13. Victek RAF Mod Home page
  14. Toastman Mod Home page. Tomato builds with many useful added features. Lean, stable, and fast with minimal bells and whistles, with a focus on QoS and Administration. Based on TomatoUSB and RT (selected features included from other firmware, plus new mods).
  15. "FreshTomato - Alternative open source firmware for Broadcom-based routers".
  16. 1 2 "About Tomato Theme Base" . Retrieved 2019-05-09.