Should you enable automatic firmware upgrades for routers? I suffered a hidden loss once, but now it's all switched to manual mode, with three types of machines and three methods

happened on a Saturday morning last month. As usual, I tried to remotely wake up the desktop at home and copy files using my phone, but after a long time with no response, I checked the router's backend and found the port mapping list empty, the DHCP reserved address was gone, and the system log showed a record from 3:17 AM: the system had automatically upgraded to a new version. Just that one night, everything I had prepared two years ago was wiped clean. Later, I checked Xiaomi's update log and found that update had changed the firewall's underlying layer, had a bug in the configuration migration, and the official team only fixed it in the next version two weeks later. This made me turn off automatic upgrades for all routers at home, and also went through the topic of "how exactly should I manage firmware upgrades?" and wrote this post for those still unsure where to put the switches.

clarify first: what exactly is firmware upgrade fixing

many people think firmware upgrades mean "new features," but for routers, 90% of the updates are invisible: fixing security vulnerabilities, blocking traffic bugs, adjusting wireless driver compatibility. I read Xiaomi's AX3000T update notes and basically just mentioned "optimizing stability" and "fixing some device connection issues," but in reality, they hide WiFi compatibility fixes and DHCP behavior changes, directly affecting whether your devices at home can disconnect.

safety is the only thing I care about. Routers are the master gateway for all family devices. Exposed vulnerabilities, such as command injection issues from certain brands in the early days, allow attackers to access the backend and obtain permissions. Patches pushed by manufacturers are meant to plug these holes; if you don't upgrade for a long time, you're basically running bareheaded. I set up security settings after logging in mentioned remote management after passing, but patches can only be fixed through upgrades; setting up can't replace them.

so here's the conclusion: firmware needs to be upgraded, and that's not undisputed. The real question is: "When will you be promoted, and who decides to promote?" The essence of automatic upgrade is to give the manufacturer's server the decision on "when to restart and whether configurations can be migrated." When you sleep, it presses the confirm button for you. The accident I had happened happened to happen here.

the full process of my failure, I'll give you a matching number

review the inspection order that morning. If you also encounter "waking up and a certain function malfunctioning," it's very likely for the same reason.

first failed to wake up remotely. My topology is optical modem bridge, AX3000T main dial-up, desktop network card wake-up via magic packet, port 9 forwarding to desktop. Won't wake up. My first reaction is that the desktop network card settings were changed by Windows update. When I checked Device Manager and saw 'Magic Packet Wake-up,' it was still stuck on it. Checking the router again, the backend "Port Mapping" page was completely blank, and only then did I realize the configuration had been reset. The upgrade record from the log at around three in the morning was the final piece of the puzzle. By the way, you should check the logs early. They only keep the last few hundred entries. I waited until the afternoon to check them, but those records had already been deleted. The update notification time was matched based on the mobile app's upgrade notification time.

reconfiguring this system took me forty minutes: restoring port mappings one by one, rebinding the DHCP to the Mac and rebinding the MAC, and renewing the static lease periods for both devices. Forty minutes isn't a big deal, but if your home runs remote access NAS or surveillance cameras, and the reboot window hits you on a business trip, the disconnection won't just wake you up. And during the few minutes after the upgrade and restart, the whole house goes off the internet. If your family member happens to be updating the system or playing games, you'll be the one to blame.

three types of machines, I recommend turning it on for automatic upgrades, which is more convenient

turning off auto-upgrade isn't a one-size-fits-all solution. Right now, I have one left at home. There's only one criterion to judge: does this machine have anything you've manually installed

• the router at the elder's house . My dad's Redmi AX3000 is set to auto-upgrade. Elderly people don't know how to read update logs or upgrade manually; when vulnerabilities appear, they can only wait. Plus, their routers run with default configurations without any customization, so upgrading and resetting is fine. Remotely checking device status relies on the Mijia app; keeping the firmware up to date actually saves me the need to make trips.
• of rental and dormitory machines configured by default. I bought it, entered a broadband password, and never went back to the backend. Turn it on. The benefits of upgrading such machines (security patches, disconnection fixes) far outweigh the risks (since you don't have the configuration to discard anyway). Models like Mercury and Tenda, which cost around a hundred yuan, still rely on firmware updates to fix compatibility issues. I helped a colleague deal with a Tenda AC10 that kept disconnecting, and after upgrading the firmware once, it stabilized.
• the main brand still under warranty. I've seen people find after-sales service for firmware failures because the automatic upgrade keeps the device on the officially supported version, reducing disputes during troubleshooting. The premise is the same: the machine doesn't have any key custom configurations running.

these three categories must be turned off automatically or switched to manual. My current approach

on the other hand, I strongly recommend turning off the following situations and manually upgrading on a Saturday morning when you're sure no one at home is using the internet.

• is equipped with of port mapping, DMZ, and static routing. These are the hardest-hit areas. If the firewall underlayer moves, migration failures are everywhere. My port mapping is a living example. If you're still using modem to bridge various forwarding rules after , the same applies to the rules.
• running of flashing, unlocking, and third-party plugins. This machine is not part of the manufacturer's upgrade logic system. The OpenWrt system has its own OPKG system. The automatic push of brand-name devices collides with the modding system, which can cause upgrades to fail and resets, or at worst, directly brick the system to save the product. How to save a machine after flashing? I wrote a complete set of precautions in my article Flash Brick Protection. The key point: export the configuration before upgrading.
• load-critical that cannot be randomly restarted. If you rely on surveillance cameras, NAS sync, or remote work at home, you have to choose your own restart time. Automatic restarts at 3 a.m. are considerate for manufacturers, but for you, it's a blind box.