BLU Discuss list archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Discuss] iGuardian "enterprise-grade" home router
- Subject: [Discuss] iGuardian "enterprise-grade" home router
- From: tmetro+blu at gmail.com (Tom Metro)
- Date: Sat, 13 Sep 2014 16:46:04 -0400
- In-reply-to: <541381E7.4000402@gmail.com>
- References: <54128C30.70609@gmail.com> <541306B9.5020509@gmail.com> <54137737.8080204@gmail.com> <541381E7.4000402@gmail.com>
Richard Pieri wrote: > How do you go about updating the OS? > > With an embedded OS you back up your settings, restart the device in a > special run mode, write out an image to local storage, restart in the > normal run mode, and restore your settings. Some update mechanisms > perform the settings backup and restore automatically; some don't. If > something goes wrong then you have a brick. > > With a "live" OS you run a tool to install updated programs, typically > using some kind of package management system. Restarting is rarely > required. I guess maybe you need to update your notion of how a modern embedded system works. There are still embedded devices being produced that work the way you describe, but more commonly now, thanks to inexpensive flash storage, they operate more like a regular system with a hard drive. OpenWRT supports optware package management, for example. You should be able to update packages on the fly, without a device reboot. (I've installed packages this way on my routers running Tomato USB.) I run Ubuntu systems off of small thumb drives, which go through identical updating procedures as full systems, and there is no technical reason why a router appliance can't follow this model. Devices like Ubiquiti Networks' EdgeMAX, that runs a Debian derivative, from a software perspective probably behave closer to full systems than embedded devices, even though they are built on low power appliance hardware. Even in the case where the device firmware is treated as one big blob, lots of devices now feature a small bootloader partition that never gets overwritten by updates, making them virtually "unbrickable." An update gets downloaded to and written to a separate partition, then sets a flag and schedules or triggers a reboot. On reboot the bootloader sees the flag and runs the OS from the new partition. If that fails to start you can manually reboot and interact with the bootloader to switch back to the old firmware, which is still present. (There are dozens of variations on the protected bootloader concept, and not all work as described above. For example, it's quite common for Android devices to have a boot loader, a recovery partition (minimal OS for doing backups and reloading OS images), and an OS partition. Each can be separately reflashed.) Personally, I'd rather have a router/firewall appliance in which the firmware can't be altered without a physical switch being flipped on the device. That way you have full control over when the firmware gets altered, and you know with certainty that you return to a known state after reboots. (For this to be most effective, your router should also have no local storage and settings storage that is similarly hardware protected from modification.) -Tom -- Tom Metro The Perl Shop, Newton, MA, USA "Predictable On-demand Perl Consulting." http://www.theperlshop.com/
- Follow-Ups:
- [Discuss] iGuardian "enterprise-grade" home router
- From: richard.pieri at gmail.com (Richard Pieri)
- [Discuss] iGuardian "enterprise-grade" home router
- References:
- [Discuss] Dan Geer's Blackhat talk, iGuardian "enterprise-grade" home router
- From: tmetro+blu at gmail.com (Tom Metro)
- [Discuss] Dan Geer's Blackhat talk, iGuardian "enterprise-grade" home router
- From: richard.pieri at gmail.com (Richard Pieri)
- [Discuss] iGuardian "enterprise-grade" home router
- From: tmetro+blu at gmail.com (Tom Metro)
- [Discuss] iGuardian "enterprise-grade" home router
- From: richard.pieri at gmail.com (Richard Pieri)
- [Discuss] Dan Geer's Blackhat talk, iGuardian "enterprise-grade" home router
- Prev by Date: [Discuss] Dan Geer's Blackhat talk, iGuardian "enterprise-grade" home router
- Next by Date: [Discuss] iGuardian "enterprise-grade" home router
- Previous by thread: [Discuss] iGuardian "enterprise-grade" home router
- Next by thread: [Discuss] iGuardian "enterprise-grade" home router
- Index(es):