Trump FCC prohibits import and sale of new Wi-Fi routers made outside US

ktmglen

Ars Tribunus Militum
1,695
So here in the good ol' US of A, we will not only have the dinosaur fossil fuel Goliaths, but routers a decade behind everyone else's. Just too much winning. Although, to be fair, once we pay the 10% Trump tax (the direct bribe) and the 50% tariff, we will be able to get the latest stuff, at double the cost.
And ancient drones.
 
Upvote
5 (5 / 0)

sd70mac

Ars Tribunus Militum
2,655
Subscriptor
The most ridiculous part of this is that "manufacturing" them in the US doesn't remove any vulnerability at all. Do really think the mostly automated assembly line is physically sneaking in backdoors by hand? Like some guy is just sitting on the assembly line dropping bad bits into the bit bucket?

No seriously, I'm legitimately asking how do these people think software is made?

Putting all the made in China parts into the made in China case on some assembly line in the US doesn't change a god damn thing.

I want more secure networking hardware. This isn't that.
At least the way it’s phrased now, the default is that the only new routers allowed going forward without special permission are ones fully designed, developed, and built in the USA, basically on-shoring production from the drawing board to the product leaving the factory. Nice idea, but expensive and difficult to achieve.
 
Upvote
5 (5 / 0)

Thorzdad

Ars Tribunus Militum
1,689
Just skim over the news' sane washing sections. It's not healthy to listen to it. Literally any and all statements from anyone in this government now flagrant hate speech/gibberish/trolling/lies/market manipulation but it still makes up half of all news reporting for some damn reason instead of just telling us what they've done done did and why they did it.

There is no reason to repeat or report on what anyone in the Trump admin says unless it's 1. funny or 2. was their last words.
The government’s taking control of CBS was a freaking nuke shot over the bow of american journalism. The message was glaringly clear…Do as we say or face the consequences.

CBS is in a death spiral now, as viewers walk away from FoxNewsLite. The administration doesn’t care, as long as their message is broadcast.
 
Upvote
20 (21 / -1)

Thegs

Ars Scholae Palatinae
911
Subscriptor++
Requiring security support to be cut off for for every router in the country will make the problem much worse. Someone that just replaced their router isn’t going to buy another one in two years because the government cut off support for the old one. There will be a 5 year window when the vast majority of routers will not be patched.
But also like, how is the government going to enforce that? I checked Asus' site and the firmware for an RT-BE86U (just picking one) router has the same SHA256 hash regardless of whether it's coming from the UK or the US version of the website. So what would the US government expect Asus to do, globally stop all updates to their product? I doubt that's going to happen. It may come as a shock to this administration but the US is not the only country where products are sold.
 
Upvote
17 (17 / 0)
The thing about this is that the security problems lay in the software, which isn't affected by this order. You can make a modem in the US and hire Chinese programmers to make and update the OS, and that's fine. The FCC doesn't certify the OS, it only certifies that it complies with US spectrum and power regulations, so it only goes as far as an SDR.

My Ubiquiti router may have been assembled in Vietnam, but the silicon was designed by Broadcom and the software written in the US.
 
Upvote
18 (18 / 0)

alxx

Ars Praefectus
5,026
Subscriptor++
I went the other way. I had a sprawling suburban house in the USA built with a UDMP, ethernet in the walls, APs in the ceiling and all that jazz... now I have a city apartment back in my home country and a UDR7. It works every bit as good as the UDMP did. Probably faster. It was definitely cheaper than the old kit. Hard to recommend the old discrete setups over the UDR7 now that it exists, unless you have BIG requirements for home networking lol.

I also only have one camera now looking out our street windows, really just for fun tho... In the USA I had several as a domewhat "teenager detterent" that was more necessary. I think the UDM7 is more limited on cameras since it has only an SD card.
udr7 is nice but the wifi range isn't as good as a stand alone ap like u7 pro.
Depends how large an area you need to cover and what your internal walls are made of.
Could add another ap to the udr7

I ended up going with a cloud gateway fiber , a u7 pro , a ux7 express as an ap for living room and backup router and a couple of flex 2.5 Gb switches. All internal walls are double brick.

Can add a ssd to the cloud gateway fiber if you are using cameras with it.
The newer u7 xgs and xgs pro ap's run cooler than u7 pro and have 10 Gbps instead of 2.5 Gb.
 
Upvote
3 (3 / 0)
One has to love the logic of banning consumer equipment while simultaneously eliminating any requirement that telecom providers secure their networks. And of omitting the enterprise grade devices that will be involved in any significant infrastructure attack. (The last time I checked, my home network, no matter how compromised, was not in a position to disrupt the power grid, but heaven forfend we inconvenience the shining moral exemplar that is the telecommunications industry in any way.)

When it comes to equipment that doesn't spy on me, I trust the Chinese more than I do America's current crypto-fascist regime. In the current climate, bringing anything under U.S. control means giving it to the dissonant fart-powered bagpipe and his thugs, and I doubt the Chinese can be bothered to keep a list of Americans who hate their own government like cancer.

We have the corruption we deserve: the worst we'll tolerate. Ultimately, this is my fault, for sitting here typing away, imagining that ranting is any kind of action. My fault and yours.
 
Upvote
31 (31 / 0)
As a Canadian, I can safely say that under the current circumstances, a US-made router is the last thing I would consider buying for at least 2 reasons:
  • Boycotting all US-made items due to Trump financial idiocy
  • Probability that they will now include a backdoor to meet this new requirement
 
Upvote
41 (42 / -1)

mcswell

Ars Scholae Palatinae
1,024
From the article: "...yesterday’s FCC action only affects consumer-grade routers mainly used in homes. In November 2025, the Carr FCC rescinded a Biden-era ruling that required telecom providers to secure their networks, alleging that the previous administration’s action was illegal and did not effectively address the threat."

Do I understand this correctly: Trump/Carr opened the back door to the barn, while closing the front door?
 
Upvote
32 (32 / 0)

justin150

Ars Tribunus Militum
1,704
I am guessing if this comes into force various entrepreneurial Mexican businessmen will be setting up retail outlets just south of the border selling consumer grade routers for 20% of the price of US made routers. I am sure absolutely no US citizen will be picking one up when doing their regular trip to Mexico
 
Upvote
10 (10 / 0)
Made in the US in the same way my PC was built in my office.
Well, yes. It is the same legal arbitrage tactic used in manufacturing everywhere.

Being a cyclist...my favorite example of legal arbitrage and "MADE IN" origin labeling is the bicycle maker Colnago. For a long while after going to carbon fiber, they claimed to be "made in Italy". Which all the CF expertise in bicycle manufacture is in Taiwan and China. How could they claim to be "made in Italy" when the drive train is either from Romania (Campagnolo) or Japan (Shimano), NVM all the other bits?

Well to meet the "made in" origin labeling requirement--a majority of the final-value of the product had to be added in ______.

So...their claim was based on that because the frames were molded in Taiwan, and painted in Italy, and all the parts were bolted on in Italy...it was therefore "made in Italy".
 
Upvote
15 (15 / 0)

NDHolmes

Smack-Fu Master, in training
73
Yup. When I got FTTH at 2Gbps last fall, I had to find something that could actually handle that kind of bandwidth. BPI-R4 + OpenWRT has been excellent, although I did add a fan and a couple heatsinks to deal with the fact that SFP+ 10G RJ45 adapters run bloody hot. Didn't put on the optional (and apparently problematic) wifi card - it's just a straight router/firewall.

I saw the FCC announcement come out yesterday just as I was getting ready to junk some older router/AP hardware. Decided maybe not quite yet and put it back in the closet.
 
Upvote
15 (15 / 0)

murty

Ars Centurion
352
Subscriptor++
Why not seperate your routing from your wireless and use real APs from the likes of Omada (TP-Link) or Ubiquiti? Also, if you want more coverage you want more APs, not bigger/faster/more powerful/louder APs.
That’s exactly what I am talking about with Firewalla. It’s a dedicated firewall, similar class as UniFi stuff. They sell their own WAPs, but also can support other brands, such as Ubiquiti.

My boss loves them. Only reason I hadn’t pulled the trigger yet was it’s a bit of a cost jump up once you go all in.

At this point though, probably worth it.

https://firewalla.com/
 
Last edited:
Upvote
4 (4 / 0)

murty

Ars Centurion
352
Subscriptor++
Personally, I would highly recommend going modular. Because wireless APs don't usually need replacing unless you absolutely need the new WIFI features, and offloading it from an all-in-one box is better. Bonus that you can place the AP in a much better spot, and they usually look nice hanging from a ceiling (Ubiquiti APs are white, round and don't look out of place anymore than a smoke detector does).
Due to our condo layout and lack of in wall Ethernet, I’m more looking any free standing WAPs than mounted ones.

Can’t remember if Ubiquiti makes free standing or not, but Firewalla just launched the recently and they check all the boxes. For me, other than a tad pricey once you include cost of the Firewalla itself.

https://firewalla.com/collections/firewalla-ap7/products/firewalla-ap7
 
Upvote
1 (2 / -1)

murty

Ars Centurion
352
Subscriptor++
Rolling your own is increasingly the best option. It's not a terribly difficult proposition, either, if you have some know how. As you're on this site, I presume you've got a fair amount of skill here. pfSense or OPNsense on an older x86 machine gives you an incredible amount of power and customizablility, at the cost of size and power requirements. There's also less intense stuff, like OpenWrt. You can then get the WAPs that meet your needs.
Been tempted, but my wife works from home and it’s got to be something that is mostly set it and forget it, so I don’t have to fiddle too much.

Firewalla has a nice app, and technically is remotely manageable, but I am always very leery of enabling that on any edge hardware.
 
Upvote
4 (5 / -1)
But also like, how is the government going to enforce that? I checked Asus' site and the firmware for an RT-BE86U (just picking one) router has the same SHA256 hash regardless of whether it's coming from the UK or the US version of the website. So what would the US government expect Asus to do, globally stop all updates to their product? I doubt that's going to happen. It may come as a shock to this administration but the US is not the only country where products are sold.
They could region block access to the download site to us IP addresses, but that would be messy if the site has non-router related content. Technical people could use a non-US vpn to get illicit security patches. It’s incredibly stupid to limit updates when the FCC should be requiring routers to have 10 years of security updates.
 
Upvote
7 (7 / 0)

trashcanman

Ars Praetorian
479
Subscriptor++
Aside from being another obvious shakedown, I have a feeling the only true security threat in play here is coming from inside the house.

And if they are pushing for back door access as part of any deal to get a waiver, you can bet that the major ISPs will be the first ones to cave (if they haven’t already), followed by any American company that wants to sell a router in the US.
 
Upvote
20 (20 / 0)
It depends how you define "backdoor". If you're talking just about the ability to bypass or break the security, then yes, plenty of evidence.

If you're talking about intentionally inserting ways to bypass or break the security, then afaik nothing in recent history outside of the few times the FBI/NSA/CIA were caught opening up new routers (or worse) and switches in order to manually install their backdoors.

There is not a single software defined product without "back doors" if that's the definition of being able to get around it....

What would do a LOT more good would be if the government stepped in and mandated that all router manufacturers supported their products for a minimum of 5 years at no cost for security patches and that all identified security issues must also be patched within a reasonable time frame after being identified, along with requiring the manufacturers to have a process to identify security vulnerabilities both internally and to partner with organizations that do the same. If CISA hadn't been gutted, I would say make them the authority who tells manufacturers about security flaws that must legally be patched under this scheme.

Man... from my limited exposure to the "easy" set up consumer mesh routers, TP link (Chinese company that's US based for their US products) has far better software updates than american companies... still getting occasional updates on the now 9 year old Deco M5s I got... sure they're limited to periphery connections of the house, but still works.
 
Last edited:
Upvote
10 (10 / 0)

GFKBill

Ars Praefectus
3,026
Subscriptor
At least the way it’s phrased now, the default is that the only new routers allowed going forward without special permission are ones fully designed, developed, and built in the USA, basically on-shoring production from the drawing board to the product leaving the factory. Nice idea, but expensive and difficult to achieve.
In what way is it a "Nice idea"?

That this only targets "consumer routers" is a such an illogical and blatantly flawed concept in the context of "National Security" that it's difficult to see it as anything on than a first step toward government controlled firmware.
 
Upvote
19 (19 / 0)

ERIFNOMI

Ars Legatus Legionis
18,135
Aside from being another obvious shakedown, I have a feeling the only true security threat in play here is coming from inside the house.

And if they are pushing for back door access as part of any deal to get a waiver, you can bet that the major ISPs will be the first ones to cave (if they haven’t already), followed by any American company that wants to sell a router in the US.
SOHO routers are pretty notorious for being full of vulnerabilities, rarely getting updates/losing support long before they're taken out of service, and by their nature they're pretty much always sitting right on the internet. They are legitimately a security nightmare.
 
Upvote
10 (10 / 0)