Hi BPI Team and community,
I’m happy to share that I have successfully optimized and compiled Nexwall Firewall (v26.1.1) natively for the OpenWrt One board (MediaTek MT7981B / Filogic 830).
When building this firmware distribution, my main focus was to respect the precise hardware architecture and layout guidelines designed by the Banana Pi and OpenWrt teams:
Hardware & Partition Integrity
- Safe Recovery Layout: The stock layout remains completely untouched. The image respect the 16 MiB SPI NOR flash recovery partition. We strongly recommend making full backups of both flashes before your first deployment, ensuring you can always fall back to the recovery image securely.
- NVMe Storage Integration: Designed to leverage the built-in M.2 slot. Heavier system operations—such as comprehensive threat intelligence logs, web proxy caching, performance charts, and deep application list updates—are entirely directed to the mounted NVMe disk, protecting the onboard flash storage from wear.
- SoC Optimization: The core processing elements, tracking engines, and the unified UI are tailored to maximize the 1 GiB RAM and the Cortex-A53 cores efficiently.
Features Included
Nexwall shifts the board into a highly visual Next-Gen Firewall (NGFW) layout, offering:
- Deep traffic monitoring and live connection tracking.
- Natively integrated WireGuard, OpenVPN, and IPsec implementations.
- Domain-level DNS filtering and active Application Control layers.
- Simplified zone-based configuration matrices.
The image assets (snand-factory.bin, nor-factory.bin and sysupgrade.itb) are publicly accessible, along with our build environment scripts:
Get the Files (GitHub Release): Release Nexwall Firewall v26.1.1 for OpenWrt One · nexwall/nexwall-openwrt-one-fw · GitHub
Administrative Docs: https://docs.nexwall.com.br
If you are running the OpenWrt One on your testbench, please give it a try! We would highly appreciate your hardware benchmarks, thermals, and feedback regarding operational stability.