What is DrayOS 5

Since the debut of DrayOS in 1997, DrayTek has led the charge in delivering reliable, high-performance networking through innovation and user-focused design. Originally developed for our first-generation modems and single/dual WAN routers, DrayOS has grown into a powerful, feature-rich platform—recognized for its integrated VPN, intelligent multi-WAN load balancing, advanced security, and intuitive management tools, including the VigorACS central management system.

Now, we’re proud to introduce DrayOS 5, a major leap forward in firmware technology, now powering our latest routers, access points, and switches. DrayOS 5 delivers stronger performance, tighter security, and a smoother user experience-empowering IT admins and network professionals with enhanced control and efficiency from day one.

What’s New in DrayOS 5?

Identity and Access Management (IAM)

The new IAM module (under the IAM menu) offers comprehensive control over access and identity management

User & Group Management: Easily organize and manage user permissions.
Role-Based & Conditional Policies: Define precise access control based on roles or conditions.
Multi-Factor Authentication (MFA): Enhance security with layered user verification.
Customizable Hotspot Portal: Provide secure, branded guest network access.
Backup/Restore for IAM Policies: Save and restore configurations effortlessly.

Built-in Security Enhancements

DrayOS 5 equips devices with advanced, enterprise-ready security features

Layer 3/7 Packet Filtering: Fine-tune traffic control down to application-level detail.
MAC Address Filtering: Restrict access based on device identity.
Firewall & DoS Protection: Safeguard against external attacks.
IPv6 Filtering: Extend protection into next-gen IP environments.
Custom Profiles: Tailor security to match your specific use case.

Integrated Threat Protection Tools

Keep threats at bay with smart, real-time security utilities

URL/IP Reputation Filtering: Block known malicious domains and IPs dynamically.
Port Knocking: Hide services behind custom access sequences for added stealth.

Effortless VPN with EasyVPN

Secure remote access has never been simpler

WireGuard Integration: Rapid deployment via pre-shared keys.
Automated OpenVPN Setup: Streamline complex configurations.
Certified IPsec: Industry-standard security with optimized performance.

Redesigned Configuration Menu

The streamlined interface makes setup intuitive and efficient

Virtual Controller with VigorMesh: Unified management of APs and Switches with "Auto" device role selection for Mesh, APM, and SWM.
WAN/LAN Interface Setup: Easily configure internal and external connectivity.
DNS & Routing: Simplified navigation of core network functions.
Advanced WLAN Management: Gain complete control over wireless environments.
NAT, IGMP, Bandwidth Tools: Manage resources effectively.
Integrated Alerts & RADIUS Authentication: Stay informed and manage credentials securely.
Object-Based Firewall/NAT Rules: Build powerful policies using reusable components.
Wake-on-LAN & Certificate Handling: Remotely wake devices and secure communications.