简体中文
EnglishWhat Is FreshTomato?
Updated
FreshTomato is an alternative open-source firmware for routers built on Broadcom chipsets. It is a Linux-based system distributed under the GPL license, and it replaces the stock firmware that ships with a compatible router. The point of installing it is to unlock features the factory firmware usually hides or omits — WireGuard, OpenVPN, QoS, bandwidth monitoring, and more — through a web interface that the project describes as friendly enough for inexperienced users. The catch is hardware: it is not a universal firmware, so it only runs on routers with the right Broadcom chipset.
What FreshTomato actually is
FreshTomato is a firmware project, not a router brand and not a general-purpose operating system. The official site describes it as "a system based on Linux, dedicated for routers with Broadcom chipset and distributed on the GPL license."
Two things follow from that description:
- It is a replacement, not an add-on. You flash it onto a supported router in place of the manufacturer's firmware.
- It is scoped to specific hardware. Broadcom chipset is the entry condition. A router with a different chipset is not a candidate, regardless of how capable it otherwise is.
The project maintains its own release cycle. The current release listed on the site is 2026.4 (2026.09.14), which tells you the project is actively maintained rather than abandoned.
What you get after installing it
The site lists the most important functions directly. These are the practical reasons someone would bother replacing stock firmware:
| Feature | What it does for you |
|---|---|
| Full WireGuard support with PBR (ARM) | VPN tunneling, with policy-based routing on ARM builds |
| Built-in OpenVPN server/client | Run the router as a VPN endpoint in either direction |
| Advanced QoS | Prioritize traffic by type or device |
| Bandwidth monitoring | See who is using how much |
| IP/MAC BW Limiter | Cap throughput per address |
| Access control | Restrict what devices can reach |
| ARP Binding | Pin IP-to-MAC mappings |
| SNMP protocol | Feed router stats into monitoring tools |
| Enabled SSH/Telnet protocols | Command-line access |
| Configurable buttons and LEDs | Repurpose physical controls and indicator lights |
| Support for many wireless modes | Operate the radio in different roles |
The site also links to a full feature list, a wiki, screenshots, and a supported routers page — the last of which is the one you check before buying or flashing anything.
Who it is for
FreshTomato suits you if all three of these hold:
- You own a router with a Broadcom chipset that appears on the project's supported routers list.
- You want capabilities the stock firmware does not offer — most commonly VPN server/client, granular QoS, or per-device bandwidth limits.
- You are willing to flash firmware. The interface is designed to be approachable, but flashing is still a firmware replacement, and the project's own framing of "even inexperienced users can easily work with it" refers to using the interface, not to the installation step.
It is not for you if your router uses a non-Broadcom chipset, if you are not prepared to risk a failed flash, or if the stock firmware already does everything you need.
How to check whether your router qualifies
- Go to the FreshTomato site and open the Supported Routers page.
- Find your exact router model — not just the brand or series.
- If it is listed, continue to the Download page and get the build matching your model and hardware revision.
- Read the Wiki for installation notes specific to your model before flashing.
- If your model is not listed, stop. There is no supported path.
The site also offers a TomatoAnon Database, which collects anonymized data from installed routers — useful for seeing what hardware and builds other people are actually running.
Where to go next
The official site organizes everything you need into a small set of pages: Wiki, Features, Screenshots, Supported Routers, Download, Useful snippets, Source Code, and Themes (TTB). For a first-time user, the useful order is Supported Routers → Download → Wiki. The source code is available if you want to build or audit it yourself, consistent with the GPL license it is distributed under.