Tomato (firmware)

Tomato was originally released by Jonathan Zarate in 2006, using the Linux kernel and drawing extensively on the code of HyperWRT. It was targeted at many popular routers of the time, most notably the older Linksys WRT54G series, Buffalo AirStation, Asus routers and Netgear WNR3500L.^[2] His final release of the original Tomato firmware came in June 2010, by which point its popularity had grown large enough that development and support continued through the user community, resulting in a series of releases (dubbed "mods") by individual users or teams of them that continues to the present day.

Fedor Kozhevnikov created a notable early mod he called TomatoUSB, which ceased development in November 2010.^[3] It was then forked by other developers^[4] and remains the nearest common ancestor to all of the forks with any recent activity. The project saw a boost in recognition when Tomato was chosen by Asus as the base used to build the firmware currently preinstalled on their entire line of home routers, ASUSWRT.^[5][6]

Currently, FreshTomato appears to be the only project that has seen active development and new releases.^[7]

Several notable features have been part of Tomato long enough to be common to all forks, among them are:

• The graphical user interface (accessed via web browser), including:
  • Access to almost the entirety of the features provided by the hardware (manufacturers typically omit many of these from their firmware to prevent misuse and reduce support costs)
  • Extensive use of Ajax to display only the settings that are germane to the device's current setup, reducing confusion and keeping related options near each other using fewer pages/tabs
  • A CSS-based custom interface theming
  • SVG-based graphical bandwidth monitoring, showing total network inbound/outbound activity and that of each connected device through pie charts and line graphs that update in real-time

    

• A personal web server (Nginx) that uses the device's "always on, always connected" design to allow users to host their own websites from home for free
• Access and bandwidth restriction configurable for each device or the network as a whole, providing control over the speed and amount of traffic available at any time to any device
• Unrestricted access to the internal system logs and the ability to store them for easier troubleshooting and security audits
• CLI access (BusyBox) via the web-based interface, as well as via Telnet or SSH (using Dropbear)
• Wake-on-LAN
• Advanced QoS: 10 unique QoS classes defined, real-time graphs display prioritized traffic with traffic class details
• Client bandwidth control via QoS classes
• The Dnsmasq software built-in, which provides:
  • DHCP server (with static allocation of IP addresses)
  • Local DNS server (usually forwarding requests to the DNS provider of choice)
• Wireless modes:
  • Access point (AP)
  • Wireless client station (STA)
  • Wireless Ethernet (WET) bridge
  • Wireless distribution system (WDS also known as wireless bridging)
  • Simultaneous AP and WDS (also known as wireless repeating)
• Dynamic DNS service with ezUpdate and services extended for more providers
• SES button control
• JFFS2
• SMB client
• Wireless LAN Adjustment of radio transmit power, antenna selection, and 14 wireless channels
• 'Boot wait' protection (increase the time slot for uploading firmware via the boot loader)
• Advanced port forwarding, redirection, and triggering with UPnP and NAT-PMP
• Init, shutdown, firewall, and WAN Up scripts
• Uptime, load average, and free memory status
• Minimal reboots – Very few configuration changes require a reboot
• Wireless survey page to view other networks in your neighborhood
• More comprehensive dashboard than stock firmware: displays signal strengths of wireless client devices, reveals UPnP mappings
• Configuration persistence during a firmware upgrade

Feature comparison

More information Mod name, Base version ...

Mod name	Base version	Mod version	Latest release	5 GHz (802.11 a/n/ac/ax)	IPv6	USB support	Memory card support	VPN protocols[a]	SFTP	Virtual LANs
TomatoVPN (SgtPepperKSU)[8]	1.27[b]	1.27vpn3.6	Jan 2010	No	No	No	No	OpenVPN	No	No
Tomato	1.28[c]	1.28	Jun 2010	No	No	No	No	No	No	No
Tomato ND	1.28[d]			No	No	No	No	No	No	No
SpeedMod (hardc0re)	1.28[b]	120	Jul 2010	No	No	No	No	No	No	No
TomatoUSB (Teddy Bear)[9]	1.28[d]	Build 54	Nov 2010	Yes	Yes	[[Network-attached storage|NAS]] ([[Server Message Block|CIFS]]/[[File Transfer Protocol|FTP]]), [[Digital Living Network Alliance|DLNA]] server"}},"i":0}}]}">Printer sharing, NAS (CIFS/FTP), DLNA server	No	OpenVPN	[[Optware]]"}},"i":0}}]}">Via Optware	Yes
slodki	1.28[d]	1.28.02	Feb 2011	No	No	[[Network-attached storage|NAS]] ([[Server Message Block|CIFS]]/[[File Transfer Protocol|FTP]])"}},"i":0}}]}">Printer sharing, NAS (CIFS/FTP)	SDHC, MMC"}},"i":0}}]}">SD, SDHC, MMC	OpenVPN	Optware"}},"i":0}}]}">Via Optware	No
DualWAN[10]	1.28[b]	1.28.0542	Jan 2012	No	Yes	[[Network-attached storage|NAS]] ([[Server Message Block|CIFS]]/[[File Transfer Protocol|FTP]]), [[Digital Living Network Alliance|DLNA]] server, [[Mobile broadband modem|3G Modem]]"}},"i":0}}]}">Printer sharing, NAS (CIFS/FTP), DLNA server, 3G Modem	No	[[Point-to-Point Tunneling Protocol|PPTP]]"}},"i":0}}]}">OpenVPN, PPTP	Optware"}},"i":0}}]}">Via Optware	Yes
Teaman[11]	1.28[d]	v0025	Jun 2012	Yes	Yes	[[Network-attached storage|NAS]] ([[Server Message Block|CIFS]]/[[File Transfer Protocol|FTP]]), [[Mobile broadband modem|3G Modem]]"}},"i":0}}]}">Printer sharing, NAS (CIFS/FTP), 3G Modem	SDHC, MMC"}},"i":0}}]}">SD, SDHC, MMC	[[Point-to-Point Tunneling Protocol|PPTP]] (server)"}},"i":0}}]}">OpenVPN, PPTP (server)	Optware"}},"i":0}}]}">Via Optware	With GUI
EasyTomato[12]	1.28[b]	0.8	Jun 2013	Yes	Yes	[[Network-attached storage|NAS]] ([[Server Message Block|CIFS]]/[[Network File System#NFSv3|NFSv3]]/[[File Transfer Protocol|FTP]]), [[Digital Living Network Alliance|DLNA]] server, [[Mobile broadband modem|3G Modem]]"}},"i":0}}]}">Printer sharing, NAS (CIFS/NFSv3/FTP), DLNA server, 3G Modem	SDHC, MMC"}},"i":0}}]}">SD, SDHC, MMC	[[Point-to-Point Tunneling Protocol|PPTP]]"}},"i":0}}]}">OpenVPN, PPTP	Optware"}},"i":0}}]}">Via Optware	With GUI
Victek RAF[13]	1.28[b]	1.28.9013 R1.3	Jul 2014	Yes	Yes	[[Network-attached storage|NAS]] ([[Server Message Block|CIFS]]/[[Network File System#NFSv3|NFSv3]]/[[File Transfer Protocol|FTP]]), [[Digital Living Network Alliance|DLNA]] server, [[Mobile broadband modem|3G Modem]]"}},"i":0}}]}">Printer sharing, NAS (CIFS/NFSv3/FTP), DLNA server, 3G Modem	SDHC, MMC"}},"i":0}}]}">SD, SDHC, MMC	[[Point-to-Point Tunneling Protocol|PPTP]]"}},"i":0}}]}">OpenVPN, PPTP	Optware"}},"i":0}}]}">Via Optware	With GUI
Toastman[14]	1.28[b]	RT: 1.28.7511.5 RT‑N: 1.28.0511.5 ARM: 1.28.9008.8	Jan 2017	Yes	Yes	[[Network-attached storage|NAS]] ([[Server Message Block|CIFS]]/[[Network File System#NFSv3|NFSv3]]/[[File Transfer Protocol|FTP]]), [[Digital Living Network Alliance|DLNA]] server, [[Mobile broadband modem|3G Modem]]"}},"i":0}}]}">Printer sharing, NAS (CIFS/NFSv3/FTP), DLNA server, 3G Modem	SDHC, MMC"}},"i":0}}]}">SD, SDHC, MMC	[[Point-to-Point Tunneling Protocol|PPTP]]"}},"i":0}}]}">OpenVPN, PPTP	or Optware-ng"}},"i":0}}]}">Via Entware-ng or Optware-ng	With GUI
Shibby	1.28[b]	v140‑MultiWAN	May 2017	Yes	Yes	[[Network-attached storage|NAS]] ([[Server Message Block|CIFS]]/[[Network File System#NFSv3|NFSv3]]/[[File Transfer Protocol|FTP]]), [[Digital Living Network Alliance|DLNA]] server, [[Mobile broadband modem|3G/LTE Modem]], [[Uninterruptible Power Supply|UPS]] monitoring"}},"i":0}}]}">Printer sharing, NAS (CIFS/NFSv3/FTP), DLNA server, 3G/LTE Modem, UPS monitoring	[[SD card#SDHC|SDHC]], [[SD card#SDXC|SDXC]], [[MultiMediaCard|MMC]]"}},"i":0}}]}">SD, SDHC, SDXC, MMC	[[Layer 2 Tunneling Protocol|L2TP]] (client), [[Tinc (protocol)|tinc]] (server)"}},"i":0}}]}">OpenVPN, PPTP, L2TP (client), tinc (server)	or Optware-ng"}},"i":0}}]}">Via Entware or Optware-ng	With GUI
AdvancedTomato V2	1.28[b]	3.5-140	Nov 2017	Yes	Yes	[[Network-attached storage|NAS]] ([[Server Message Block|CIFS]]/[[Network File System#NFSv3|NFSv3]]/[[File Transfer Protocol|FTP]]), [[Digital Living Network Alliance|DLNA]] server, [[Mobile broadband modem|3G/LTE Modem]] and [[Uninterruptible Power Supply|UPS]] monitoring"}},"i":0}}]}">Printer sharing, NAS (CIFS/NFSv3/FTP), DLNA server, 3G/LTE Modem and UPS monitoring	[[SD card#SDHC|SDHC]], [[SD card#SDXC|SDXC]], [[MultiMediaCard|MMC]]"}},"i":0}}]}">SD, SDHC, SDXC, MMC	[[Layer 2 Tunneling Protocol|L2TP]] (client), [[Tinc (protocol)|tinc]] (server)"}},"i":0}}]}">OpenVPN, PPTP, L2TP (client), tinc (server)	or Optware-ng"}},"i":0}}]}">Via Entware or Optware-ng	With GUI
FreshTomato‑ARM and FreshTomato‑MIPS	1.28[b]	2025.1 [15]	Feb 2025	Yes	Yes	[[Network-attached storage|NAS]] ([[Server Message Block#SMB 2.0|SMB2]]/[[Network File System#NFSv4|NFSv4]]/[[File Transfer Protocol|FTP]]), [[Digital Living Network Alliance|DLNA]] server, [[Mobile broadband modem|3G/LTE Modem]] and [[Uninterruptible Power Supply|UPS]] monitoring"}},"i":0}}]}">Printer sharing, NAS (SMB2/NFSv4/FTP), DLNA server, 3G/LTE Modem and UPS monitoring	[[SD card#SDHC|SDHC]], [[SD card#SDXC|SDXC]], [[MultiMediaCard|MMC]]"}},"i":0}}]}">SD, SDHC, SDXC, MMC	[[Layer 2 Tunneling Protocol|L2TP]] (client), [[Tinc (protocol)|tinc]] (server)"}},"i":0}}]}">OpenVPN, PPTP, L2TP (client), tinc (server)	or Optware-ng"}},"i":0}}]}">Via Entware or Optware-ng	With GUI
Mod name	Base version	Mod version	Latest release	5 GHz (802.11 a/n/ac/ax)	IPv6	USB support	Memory card support	VPN protocols	SFTP	Virtual LANs

Close

Feature comparison (cont.)

More information Name, Static ARP ...

Name	Static ARP	Bandwidth limiter	NFS server	BitTorrent client	Guest WiFi	PPPoE server	DNSCrypt	CPU overclocking	Tor client	IPsec	Multi-WAN	Siproxd VoIP	Web server	LED control	{{Cite web|url=http://tomatothemebase.eu/?page_id=2|title=About Tomato Theme Base|language=en-US|access-date=2019-05-09}}"}},"i":0}}]}"> Theming [16]	P2Partisan	SNMP	Captive portal	Per-IP traffic stats
TomatoVPN (SgtPepperKSU)	No	No	No	No	No	No	No	No	No	No	No	No	No	No	No	No	No	No	No
Tomato	No	No	No	No	No	No	No	No	No	No	No	No	No	No	No	No	No	No	No
Tomato ND	No	No	No	No	No	No	No	No	No	No	No	No	No	No	No	No	No	No	No
SpeedMod (hardc0re)	No	No	No	No	No	No	No	No	No	No	No	No	No	No	No	No	No	No	No
TomatoUSB (Teddy Bear)	No	No	No	No	No	No	No	No	No	No	No	No	No	No	No	No	No	Yes	No
slodki	No	No	No	No	No	No	No	No	No	No	No	No	No	No	No	No	No	No	No
DualWAN	Yes	Yes	No	Yes	No	Yes	No	No	No	No	Yes	No	No	No	No	No	Yes	Yes	Yes
Teaman	Yes	Yes	No	No	GUI"}},"i":0}}]}">With GUI	No	No	No	No	No	No	No	No	No	No	No	Yes	Yes	Yes
EasyTomato	Yes	Yes	Version 3	No	GUI"}},"i":0}}]}">With GUI	No	No	No	No	No	No	No	No	No	No	No	Yes	Yes	Yes
Victek RAF	Yes	VLAN	Version 3	No	GUI"}},"i":0}}]}">With GUI	No	GUI"}},"i":0}}]}">With GUI	GUI"}},"i":0}}]}">With GUI	No	No	No	GUI"}},"i":0}}]}">With GUI	GUI"}},"i":0}}]}">With GUI	by script	No	No	Yes	Yes	Yes
Toastman	Yes	Yes	Version 3	No	GUI"}},"i":0}}]}">With GUI	No	No	GUI"}},"i":0}}]}">With GUI	No	No	No	No	No	No	No	No	Yes	Yes	Yes
Shibby	Yes	VLAN	(with GUI)"}},"i":0}}]}">Version 3 (with GUI)	GUI"}},"i":0}}]}">With GUI	GUI"}},"i":0}}]}">With GUI	No	GUI"}},"i":0}}]}">With GUI	Yes	GUI"}},"i":0}}]}">With GUI	Yes	Yes	No	Yes	Yes	Yes	by script	Yes	Yes	Yes
AdvancedTomato V2	Yes	VLAN	(with GUI)"}},"i":0}}]}">Version 3 (with GUI)	GUI"}},"i":0}}]}">With GUI	GUI"}},"i":0}}]}">With GUI	No	GUI"}},"i":0}}]}">With GUI	Yes	GUI"}},"i":0}}]}">With GUI	Yes	Yes	No	Yes	Yes	Yes	by script	Yes	Yes	Yes
FreshTomato‑ARM and FreshTomato‑MIPS	Yes	VLAN	(with GUI)"}},"i":0}}]}">Version 4 (with GUI)	GUI"}},"i":0}}]}">With GUI	GUI"}},"i":0}}]}">With GUI	No	GUI"}},"i":0}}]}">With GUI	Yes	GUI"}},"i":0}}]}">With GUI	Yes	Yes	No	Yes	Yes	Yes	by script	Yes	Yes	Yes
Name	Static ARP	Bandwidth limiter	NFS server	BitTorrent client	Guest WiFi	PPPoE server	DNSCrypt	CPU overclocking	Tor client	IPsec	Multi-WAN	Siproxd VoIP	Web server	LED control	"}},"i":0}}]}"> Theming [16]	P2Partisan	SNMP	Captive portal	Per-IP traffic stats

Close

1. Firmware supports listed protocols in client and server modes unless specified
2. Tomato standard and ND
3. Tomato standard only
4. Tomato ND (New Driver) only

• List of wireless router firmware projects