firmware icon indicating copy to clipboard operation
firmware copied to clipboard

[Feature Request]: Make mandatory-rebroadcast roles only possible to enable via remote admin

Open thebentern opened this issue 2 months ago • 5 comments

Making this an issue again

Discussed in https://github.com/meshtastic/firmware/discussions/6367

Originally posted by erayd January 13, 2025

Platform

Cross-Platform

Description

I would like to see mandatory-rebroadcast roles only be possible to enable via remote admin.

Users deploying infrastructure roles in inappropriate locations is a well known problem, leading to significant congestion and suboptimal hop behaviour in many areas (and ultimately the removal of the ROUTER_CLIENT role). By putting the ROUTER / ROUTER_LATE / REPEATER mandatory-rebroadcast roles behind a remote-admin requirement, it will ensure:

  • That the users who enable these modes have put in some effort to understand the platform (rather than clicking the shiny option in the menu and not realising the consequences)
  • That users who deploy these things in locations that then cause problems will be guaranteed to have a way to remotely fix the issues they cause without needing physical access to the device.

thebentern avatar Oct 14 '25 21:10 thebentern

Side case: ham mode, which can't use remote admin at the moment? (see also: https://github.com/meshtastic/firmware/issues/7173 )

fifieldt avatar Oct 16 '25 21:10 fifieldt

Can we make this remote admin or CLI?

We're heavy pi node users, and we typically dont set a remote admin on them over mesh. Instead we get to them over the internet via SSH, and do all administration based task that way. Some of these are quite remote from those administering them, and admin over mesh isn't super reliable due to hop count.

100% support removing it from the phone clients though!

wehooper4 avatar Oct 23 '25 16:10 wehooper4

Can we make this remote admin or CLI?

We're heavy pi node users, and we typically dont set a remote admin on them over mesh. Instead we get to them over the internet via SSH, and do all administration based task that way. Some of these are quite remote from those administering them, and admin over mesh isn't super reliable due to hop count.

100% support removing it from the phone clients though!

Honestly I think we'd just carve out the rule altogether for native linux binaries. We know a lot of infra these days are Raspberry PIs and Nebra miners on towers.

thebentern avatar Oct 23 '25 16:10 thebentern

This issue has not had any comment or update in the last month. If it is still relevant, please post update comments. If no comments are made, this issue will be closed automagically in 7 days.

github-actions[bot] avatar Dec 11 '25 06:12 github-actions[bot]

This is still relevant. Posting to prevent auto-close 🙂

erayd avatar Dec 11 '25 07:12 erayd