Why did the United States ban foreign-made routers?

Why are foreign-made routers banned?

“Malicious actors have exploited security flaws in foreign-made routers to attack American homes, disrupt networks, enable espionage, and facilitate the theft of intellectual property. » the FCC wrote. “Foreign-made routers were also involved in the Volt, Flax and Salt typhoon cyberattacks targeting critical U.S. infrastructure.

Foreign-made consumer routers have been added to the List coveredwhich details equipment and services “considered to pose an unacceptable risk to the national security of the United States.”

Bogdan Botezatu, director of threat research at a cybersecurity company Bitdefendersays the ban is a step toward strengthening the cybersecurity preparedness of American households, given current geopolitical tensions.

“Consumer routers sit at the edge of every home network, making them an attractive target and a strategic risk if compromised on a large scale,” he explains. Asked if he thinks the risk is real, Botezatu says yes, although there is no easy way to prove his intention. “[Internet of Things] Devices, including routers, are a weak point on the Internet.

Which routers are banned?

The ban only concerns the sale of new Wi-Fi routers intended for consumer households. The ban does not apply to existing FCC-approved routers sold in the United States. Previously purchased routers already in use in homes across the country are also suitable and are not part of the ban, according to the FCC FAQ. These routers may continue to be sold, used, and updated with new firmware.

Any new router manufactured outside the United States now requires FCC approval before it can be imported, marketed, or sold in the United States. This includes routers from American companies manufactured abroad, which currently make up the vast majority of the market.

What does “made abroad” mean?

It’s definitely murky. The ban covers “consumer” routers and could include those that are designed or manufactured outside the United States or manufactured by companies that are not fully owned and operated by the United States. All major market players including Netgear, TP-Link, Asus, Amazon’s Eero, Google’s Nest, Synology, Linksys, and Ubiquiti fall under this definition. As do most, if not all, routers provided by Internet service providers in the United States.

Just like the recent federal ban on dronesthe router ban only applies to new routers, but manufacturers can request Conditional approval of the Department of Defense and the Department of Homeland Security. Applications must include details on ownership, board membership and country of origin of components, IP ownership, design, assembly and firmware, among others. The final section requests details of the applicant’s manufacturing and reshoring plan to the United States. So there is a clear desire to persuade companies to commit to manufacturing their routers in the United States.

“No router or manufacturer has received conditional approval so far, but as the process gets underway, we hope approvals will be granted in a timely manner,” an FCC spokesperson told WIRED.

What about components manufactured abroad?

Well, the FCC provides some clarification in its FAQs (“covered” here means prohibited):

“Non-‘covered’ devices do not become ‘covered’ simply because they contain a ‘covered’ component, unless the ‘covered’ component is a modular transmitter under FCC rules,” it says. “Therefore, a router produced in the United States is not considered ‘covered’ equipment solely because it contains one or more foreign-manufactured components. »

Manufacturers importing components from China but assembling them in the United States will likely be acceptable, although that is far from clear. “Applicants will need to be able to have sufficient evidence that the routers were not produced in a foreign country to obtain this certification, but no specific documentation or proof is required,” according to the FCC.

Let’s look at the three major US router brands and see how they are affected.

Will TP-Link be banned?

Since all of its routers are manufactured overseas, TP-Link will need to seek conditional approval or restart U.S. manufacturing to sell new routers. Estimates vary, but TP-Link’s U.S. consumer router market share is around 35%, while Netgear and Asus account for another 25% or so.

The US Departments of Commerce, Defense and Justice reportedly conducted an investigation and plans to ban TP-Link routers for more than a year due to concerns about the company’s ties to China. No ban has been enacted so far, but Texas Attorney General Ken Paxton sued TP-Link in February, claiming the company allowed the Chinese Communist Party access to American consumers’ devices. Critics have also criticized perceived predatory pricing, saying TP-Link has flooded the US market with a wide range of affordable routers to establish dominance.

TP-Link has repeatedly denied any wrongdoing and says it has divested from its Chinese roots and now has its headquarters in the United States and most of its manufacturing in Vietnam. TP-Link co-founder and CEO Jeffrey Chao recently applied for permanent residency in the United States through President Trump’s Gold Card program, according to the Times of India.

“Virtually all routers are manufactured outside the United States, including those produced by U.S.-based companies like TP-Link, which manufactures its products in Vietnam,” a TP-Link spokesperson told WIRED. “It appears that the entire router industry will be impacted by the FCC’s announcement of new devices not previously authorized by the FCC.”

TP-Link is a private company and is not publicly traded. Chao and his wife, Hillary, are listed as the sole owners of the company.

Will Netgear be banned?

Although it is a company founded and based in the United States, Netgear’s routers are manufactured overseas, primarily in Vietnam, Thailand, Indonesia, and Taiwan. She will therefore have to request conditional approval. The company has been moving away from China in recent years. Netgear is lobbying the government on “cybersecurity and strategic competition with China”.

“We commend the administration and the FCC for their action toward a more secure digital future for Americans,” a Netgear spokesperson told WIRED. “Home routers and mesh systems are critical to national security and consumer protection, and today’s decision is a step forward.” »

Netgear is a Nasdaq-listed company, owned primarily by institutional investors, including BlackRock and Vanguard. THE company shares rose following the announcement of the ban, suggesting that many investors believe the country will not be hit too hard.

Will Asus be banned?

Asus primarily manufactures its routers in Taiwan, although it has production facilities in China and works with several third-party manufacturers. Recent pricing pressures have led the company to expand into Thailand, Vietnam, Indonesia, Mexico and the Czech Republic, but the bulk of its routers still come from Taiwan or China. Asus will have to seek conditional approval to sell new routers. The company did not respond to WIRED’s request for comment.

Asus is listed on the Taiwan Stock Exchange and is primarily owned by public shareholders. The ban does not appear to have had any impact on its stock price.

Are routers made in the USA?

The only routers I know of that are made in the United States are some Starlink Wi-Fi routers, which are primarily made in Texas. Starlink is part of Elon Musk’s SpaceX company, but many components of these routers come from East Asia.

Botezatu says what matters more than geography is the security model behind the product. Companies that invest in “long-term firmware support, vulnerability management, and built-in layers of protection” deliver enhanced security.

How will the router ban impact ordinary people?

It’s not entirely clear, but it probably won’t have a huge immediate impact. There is already a wide range of Wi-Fi 7 routers And mesh systems on the market that will continue to be sold: they allow speeds much higher than what most people need at home. Whether companies expand production in the United States or find other ways to convince government agencies that their products do not pose a safety risk, the result will likely be higher prices for consumers.

“This move could potentially significantly disrupt the U.S. consumer router market,” Brandon Butler, network infrastructure and services research manager at IDC, told WIRED. “In the short term, much will depend on how quickly the conditional waivers are processed. Most suppliers will likely implement them, but any delay could limit supply and create upward pressure on prices.”

If you haven’t upgraded to the latest version Wi-Fi 7 standardmaybe this is a good time to do it. But it’s worth keeping in mind What you buy. Botezatu says consumers should “stick to reputable manufacturers who have a proven track record of releasing updates and maintaining their devices. Verify that your router is still supported and running the latest firmware.”

Unanswered questions

The ban leaves several questions unanswered. Why is it only applied to consumer routers? What route ers or manufacturers will benefit from conditional approval? Why are foreign-made routers currently on sale and in our homes considered safe? The FCC did not respond to these questions.