Best Wi-Fi 7 router for a homelab

Your NAS can have fast drives, your mini PC can have 2.5GbE, and your laptop can wear a shiny Wi-Fi 7 sticker—and a single gigabit link can still hold up the party. Buy the wired connections first. Then pick the wireless features your devices can use.

Choose GL.iNet Flint 3 for tinkering, TP-Link Archer BE230 for a straightforward 2.5GbE upgrade, or ASUS RT-BE88U for a 10G backbone and VLAN controls. The surprising bit: the ASUS is the wired heavyweight here, but the Flint is the one with 6GHz.

Specs and setup guidance come from the makers and Home Assistant docs; this is a research-based buying guide.

Quick picks: three routers, four useful jobs

Best for tinkerers / OpenWrt-based setup: GL.iNet Flint 3 (GL-BE9300). Five 2.5GbE ports, tri-band Wi-Fi 7, built-in AdGuard Home and access to LuCI give you plenty to configure without starting from an empty firmware image.
Best for a simple 2.5GbE setup: TP-Link Archer BE230. Choose it for a 2.5GbE WAN connection and a 2.5GbE LAN uplink to your switch. Its other LAN ports are gigabit; it skips 6GHz.
Best 10G-ready: ASUS RT-BE88U. A 10G copper port, a separate 10G SFP+ port, four 2.5GbE ports and documented VLAN access/trunk modes make it the strongest fit for a growing wired lab.
Best plug-and-play: Archer BE230 again. Use the local browser setup, connect your switch and get on with your projects. Pick the ASUS instead when separate wired networks are part of those projects.

The parts lists are alternatives: you need one router, plus the switch or adapters your layout calls for.

Compare the connections, not the number on the box

Router	Wi-Fi bands / MLO	Wired connections	USB	Best fit
GL.iNet Flint 3	2.4 / 5 / 6GHz; MLO	Five 2.5GbE: one WAN, one switchable WAN/LAN, three LAN	USB 3.0	AdGuard, VPN and OpenWrt-based tinkering
TP-Link Archer BE230	2.4 / 5GHz; MLO; no 6GHz	One 2.5GbE WAN, one 2.5GbE LAN, three 1GbE LAN	USB 3.0	Simple router plus a 2.5GbE switch
ASUS RT-BE88U	2.4 / 5GHz; MLO; no 6GHz	One 10G RJ45 WAN/LAN, one 10G SFP+, one 2.5GbE WAN/LAN, three 2.5GbE LAN, four 1GbE LAN	USB 3.2 Gen 1	10G uplinks and wired VLANs

These are interface specifications. A WAN/LAN port does one assigned job at a time; count what remains after connecting the internet. A 10G socket also needs a matching endpoint and suitable cable or SFP+ connection.

The Flint 3 manual, BE230 specifications and RT-BE88U specifications supply the port and radio details.

Build the wired backbone first

Picture the useful upgrade: your NAS and editing PC both connect to a 2.5GbE switch, with the router handling internet access and Wi-Fi. Traffic between those wired devices can stay on the switch. You don’t need to replace every port on the router to build that path.

That makes the BE230’s single 2.5GbE LAN port a sensible switch uplink. The Flint gives you more multigig connections directly on the router. The ASUS earns its place when you have a 10G destination or want a 10G switch uplink alongside other fast connections.

Start with our switch and NIC buying guide to match both ends. Our mini-PC guide and UGREEN vs Synology NAS comparison help you choose hosts with the connections you intend to use.

Already have a firewall you like? Keep it. Compare access-point mode and a separate switch before replacing the gateway just to upgrade Wi-Fi. Router-mode VPN, filtering and segmentation features need their own mode-specific plan.

When Wi-Fi 7 actually helps

A Wi-Fi 7 router still serves older clients, but the new features need compatible clients. TP-Link explicitly ties MLO and other Wi-Fi 7 features to client support. Multi-Link Operation lets compatible devices use multiple links; it doesn’t turn an older Wi-Fi adapter into a new one.

Also, Wi-Fi 7 doesn’t automatically mean 6GHz. Both the BE230 and RT-BE88U are dual-band models. Choose the Flint when you specifically want a 6GHz radio for compatible laptops and phones. Choose the ASUS when wired expansion matters more than adding that band.

Ignore the temptation to read a combined wireless marketing class as one laptop’s download speed. Your client radio, channel settings, interference and wired destination all shape the result. Pick the feature you can name—6GHz access, another multigig port or network separation—and the upgrade becomes much easier to judge.

Flint 3: the tinker’s pick with the useful tools included

The Flint puts the fun switches within reach: AdGuard Home, WireGuard and OpenVPN client/server support, and the advanced LuCI interface. Want DNS filtering and a VPN route back to your lab? You can work through the maker’s interface instead of assembling every feature yourself.

GL.iNet describes the launch firmware as built on OpenWrt 23.05 in its Flint 3 datasheet. Treat this as GL.iNet’s OpenWrt-based firmware. Follow its model-specific upgrade path; buying the router doesn’t make arbitrary upstream OpenWrt images suitable for it.

The advanced-settings guide explains the LuCI route. The maker’s IoT network guide documents a dedicated Wi-Fi network isolated from the primary network, introduced in firmware 4.9. For tagged wired VLANs, match your configuration to the installed firmware and its documentation; the simple IoT toggle and a managed-switch trunk are different jobs.

Buy the Flint for configurable networking and 6GHz. If you want documented access/trunk port controls in the stock interface to drive a managed switch, the ASUS is the clearer pick below.

BE230: the uncomplicated upgrade

The BE230 gets the important starting layout right: fast WAN, fast LAN uplink and ordinary gigabit ports for devices that don’t need more. It also lists WireGuard and OpenVPN server/client support, an IoT network and a USB port for supported storage sharing.

Its practical limit is segmentation. TP-Link lists Tag VLAN under IPTV, alongside IGMP and bridge features. Those ISP television settings answer a different question from assigning an IoT SSID and wired switch ports to your own VLANs. For that buying requirement, choose the ASUS’s documented VLAN controls.

The BE230 is also the straightforward-setup pick because you can manage it with the router password in a browser. The BE230 setup and installation guide documents local-password login as an alternative to a TP-Link ID. Use that route if you don’t want app-based management; The Tether setup instructions use a TP-Link ID.

Buy it when you want a router, a switch uplink and a finished evening. Skip the firmware project and spend the time on the service you wanted to run.

RT-BE88U: put the ports to work

The ASUS is the pick for a lab with somewhere useful to send 10G traffic. Its separate copper and SFP+ interfaces give you options that the other two routers don’t offer. Decide which connection handles WAN before designing the LAN around the remaining ports.

The other selling point is network separation. ASUS explicitly includes RT-BE88U in its VLAN configuration guide: create profiles, assign an access port to one network, or use a trunk to a managed switch. Guest Network Pro ties additional wireless networks to VLANs. Update the firmware and follow the supported interface for your version; ASUS documents the feature on its 3.0.0.6.102 firmware branch and above.

For remote access, its spec sheet lists WireGuard and OpenVPN servers, plus VPN Fusion client features. For DNS, it lists DNS-over-TLS. Choose Flint if built-in AdGuard Home is your priority; choose ASUS for the wired layout and VLAN controls. Keep ASUSWRT for this recommendation—the listed features don’t depend on flashing third-party firmware.

IoT VLANs: give Home Assistant a route to its devices

Separating gadgets can be useful, but a network name alone doesn’t define what devices can reach. Plan the switch VLANs, router rules and discovery traffic together. Our Home Assistant hub gives you projects worth building once the network is ready.

For a first Matter setup, keep Home Assistant, Wi-Fi Matter devices and the Thread border router on the same VLAN. Home Assistant’s Matter networking guidance explains the need for local IPv6 and mDNS multicast and the problems filtering or VLAN boundaries can introduce.

Then separate other devices deliberately, allowing the specific traffic your integrations need. Test control and discovery after each change. “Everything isolated” feels tidy right up until your phone can no longer find the thing you’re trying to pair.

Local management, VPN and DNS: the account question

All three picks have a local browser administration route. None requires an app or vendor cloud login for basic local management. The account-based extras are separate:

Flint 3: follow local first-time setup with an admin password. A GL.iNet Account enables services such as GoodCloud and app access.
BE230: use the router password locally; choose the TP-Link ID route for account-based management and services.
RT-BE88U: ASUS’s Web GUI instructions use the router’s own username and password. Basic browser setup doesn’t require the app.

Choose remote-access and security services separately from basic routing. Local administration gives you control of the box; enabling a cloud feature still connects that feature to its provider.

Set it up, then enjoy the network

Draw the connections. Label WAN, switch uplink, NAS and PC. Assign switchable ports before plugging everything in.
Use local setup and update the firmware. Save the admin credentials and a configuration backup.
Start with a working main network. Add compatible Wi-Fi clients, then enable the features they support.
Add segmentation one network at a time. Test Home Assistant discovery and control as well as ordinary internet access.
Configure the VPN for its actual job. Reaching a NAS remotely and routing all internet traffic through a VPN are different choices. Our travel-router guide explains the other end of that connection.

Flint 3 for tinkering and 6GHz. BE230 for the simple 2.5GbE route. RT-BE88U for 10G and VLANs. Buy the connections you’ll use, and let the Wi-Fi badge be the bonus.

To bring an older laptop onto that wired backbone, use the 2.5GbE USB adapter guide. It covers the host USB port and driver checks as well as the Ethernet link.

Putting Wi-Fi somewhere else on the wired network? Our PoE access-point guide compares Omada and UniFi radios, local controllers, power budgets and IoT VLAN mapping.

Give the wired side room to grow too. Our 2.5GbE switch picks cover simple five/eight-port connections, VLAN controls and PoE for access points.