*** 1 year review update ***
i decided to keep the system. After a few firmware updates and once tp-link fixed the ap only mode such that the main and guest networks are truly separated i switched over from using it as a router to an ap solution. It has worked flawlessly since and without any performance degradation’s.
I still do not like the app-centric approach for ‘management’ (cannot call it that honestly); insight would probably be more appropriate. But, i will be moving in the future to an enterprise grade solution (this solution purchase has just been a stop-gap until that time and i finalize my network architecture). For the average home consumer that is not very tech-savvy (which is the audience this product really targets) it is overall very simple to get up and running with very few issues, especially at this price point.
I have submitted over a dozen feature requests to tp-link and almost all of them have been discarded by the manufacturer (but at least acknowledged); of the ones that were ‘accepted’ they were very trivial.
As of today, sep 21 20201, the system via the app is no longer able to check for updates (it receives an error). I believe this is not due to the units themselves but instead tp-link’s update portal that the units use to check for updates. Checking on the main site reveals an update published on july 15 2021 (s4 2.0_en_1.5.0 build 20210607 rel. 56436_us_eu_au_jp_up.bin) that is available which is one update newer than my currently applied firmware published on september 30 2020 (s4 2.0_en_1.4.3 build 20200918 rel. 77820_us_eu_au_jp_up.bin). Looks like i will have to update the units manually using the download links provided by tp-link and by logging into the web ui (note: each unit will have its own web ui but one – the master – will show a different one by showing you the topology of the mesh; a manual firmward update can be applied using that unit).
= summary
overall this is a great product. It definitely addresses the wifi coverage in our new home. It has only been a few days since i set them up. However, a star in my rating had to be knocked off which will become evident shortly. I may update this review after some more time has passed. But it is currently appearing i might be returning this.
I operate these in access point mode and not router mode. I have a better router than what these units provide and do not need double nat’ing on my house wide network. That, and, i will be replacing the house wide router with a substantially better one anyway in the coming months.
This review, however, covers my utilization and experience in both modes. Also note that i am an it professional and deal with network infrastructure (along with many other things) day to day for over 20 years.
In this review the term “satellite” is used to denote a deco unit that is not the main deco unit.
I have intentionally saved the worst points of my review as the last section.
= topology setup
i have fiber to the premise gateway, still with the gateways’ wi-fi fully enabled on both 2.4ghz and 5ghz bands. My home is over 2,650 sqft, single story, built this year, with gigabit cat5e cables to each room the deco s4 units are situated. All deco units use the ethernet backhaul. All cat5e runs and cables have been tested to support gigabit speeds point-to-point (with of course the obligatory tcp/ip overhead). Placement wise each of the deco units are almost in a straight line, a function of my floor plan and where i need wi-fi coverage the most. Relative distances between deco units:
– 25 linear feet between first satellite and second, main deco unit with one interior door between. This i refer to as satellite 1.
– 45 linear feet between second satellite and main deco unit with 3 interior only walls between. This i refer to as satellite 2.
= performance
the throughput performance on these is fantastic, especially at the price point. I have fiber gigabit internet service. I use speedtest.net for all bench marks. I get the following throughput on a samsung galaxy note 8 (us), stock firmware, latest software and security patches. Distance is always the distance between my test device and a specific deco unit and with line of sight between the test device and the target deco unit.
| deco | distance | downstream | upstream |
satellite 1 | 1 ft | 344 | 392 |
main | 1 ft | 446 | 389 |
satellite 2 | 1 ft | 460 | 392 |
satellite 1 | 3 ft | 279 | 422 |
main | 3 ft | 485 | 409 |
satellite 2 | 3 ft | 392 | 383 |
satellite 1 | 6 ft | 355 | 350 |
main | 6 ft | 477 | 390 |
satellite 2 | 6 ft | 483 | 461 |
satellite 1 | 9 ft | 361 | 475 |
main | 9 ft | 482 | 374 |
satellite 2 | 9 ft | 477 | 466 |
satellite 1 | 12 ft | 385 | 460 |
main | 12 ft | 451 | 458 |
satellite 2 | 12 ft | 501 | 528 |
satellite 1 | 15 ft | 445 | 389 |
main | 15 ft | 461 | 453 |
satellite 2 | 15 ft | 500 | 432 |
a 15 foot distance between a deco unit and a connected device is most likely acceptable considering average housing room sizes. However, in my house floor plan, i have an easy 25 foot line of sight from the main deco unit to where i did a test. Results came in as 251 mbps downstream and 117 mbps upstream. Still, highly acceptable. At my maximum floor plan range to that same deco unit and still maintaining line of sight of 33 feet i wind up getting an unexpectedly impressive 493 mbps downstream and 388 mbps upstream. While i cannot check in the app to see specifically which deco unit my test device was connected to due to either app or overall product system issues, i am left with only one avenue of explanation: the deco system has successfully performed link aggregation for my test device. If, in the first place, i am correct in this very poor conclusion due to the lack of data, then, this is indeed impressive and can very well be the single most discriminator in overall product performance vs issues vs cost.
I realize these performance tests are not representative of real world scenarios. Fact is, most people do not go to such lengths to test their products and relevant environments, much less describe their environments.
When a little more time goes by i will update this review with more realistic real world performance tests in terms of longer distances and obstructions.
= the good
i do not need parental controls, so, access point mode removes that for me, thankfully. Because i operate this in access point mode not having quality of service on the deco’s is just fine as is not having dhcp handled by the deco’s. Again, my current infrastructure handles all of these elegantly and more than sufficiently.
In order to get a proper pass off while going from one end of the house to the other i had to enable fast roaming. Without enabling this resulting in unbearably long hand offs from one unit to the other based on proximity to units. The net result of this was severe performance degradation. This seems to work without issue and solved the hand off issue.
The app is straightforward to use and easy to understand, ranging from initial installation to adding additional deco’s to day to day activities. The app also provides notifications of new devices when they are added to / detected on the network (both in router and access point modes).
As expected you can define a main wi-fi network and a guest network. This is standard fare. You can select if you want both 2.4ghz and 5ghz bands active or be more selective. Again, this is standard fare.
You can rename connected devices in the app. Useful especially when connected devices do not allow you to set their dhcp host name. The units try to profile a connected device type (e.g., phone, pc, etc) in which the result of this is also easily accessible via the app. But, when it cannot or gets it wrong you can override this in the app, very useful feature indeed. The app will also show you basic information such as allocated ip address, mac address (wish it was in colon delimited notation and not hypen as the former is the standard representation for mac addresses), connection type (main or guest network and frequency band) and which deco unit the device is currently linked to.
Unfortunately you cannot get the same level of information regarding devices connected to the guest network. Having visibility into this is just as important to give you another data point in your connected iot devices. Oh, yeah, i suppose that people visiting your home is good too. Regardless, it is utterly unclear whether or not connected devices on the guest network have visibility to one another (e.g., can see each other), and much less have any reach into the main wi-fi or rest of your network. At a minimum, the default of any guest wi-fi network should be nothing can see anything else on the guest wi-fi , cannot see the main wi-fi, cannot see the rest of your network and can only see the internet.
Any deco unit can serve as the main. In router mode, this means that the main unit has routing capabilities. Likewise, a different unit can be specified as the main via the app.
= the bad
there is no white listing of devices, only a black list. Security best practice is white listing devices that are authorized for access. Having only a black list is unacceptable. It is on this ground alone these units may very well be returned. It escapes me why tp-link would fail to include the ability to white list. Since this product seems to be targeted to the less network technologically bound than myself i can understand why only a black list is available (to prevent the less technologically adept folks from effectively locking themselves out). However, not including a white list capability does an injustice to everyone and is, security wise, shameful and puts consumers’ home networks at additional unnecessary risk of exploitation. Yes, using a white list to winds up meaning having to go through a little more trouble to allow a new device onto the network. For me, and every other it security professional out there, white listing is an essential tool in the security posture arsenal and is one that should never be omitted.
The only firmware release is the initial firmware release: deco s4(us)_v2_191023 from december 25, 2019 (tp-link support site). In the deco app it reports no new updates for the firmware with a current version of 1.1.5 build 20191023 rel. 67285. Unzipping the firmware release on the support site shows the same firmware version as the app shows (specifically: s4 2.0_en_1.1.5 build 20191023 rel. 67285_us_eu_au_jp_up.bin). Half a year later i would expect at least an additional firmware release. While not having any could be a good thing, generally, this is never the case. There are always bugs and vulnerabilities in every piece of software, and, firmware is no exception. Clearly a firmware update is needed at least to add a white list feature.
There is a barely usable web ui for the deco’s beyond that of just using the deco app. I have found a landing page for each deco connected to my router via the ip assigned to each. All ui’s require authentication. The ui is different depending on which deco you connect to. The deco’s that are not the main deco provide the following features: update the firmware, pull the system log or reboot. Accessing the system log allows you to save it, email it or clear it. In contrast, connecting to the ui for the main deco yields a subset of the features compared to the app but adds visibility into the units’ cpu and memory usage. Said subset of features are mainly read only via the interface, again, not very useful. Thus there is no real point in using anything but the app if one is looking for access to more robust features.
Connected device presence status (online / offline) is wholly inaccurate as reported by the app. The only connected devices that are accurately reported for presence are those that have not left the wi-fi range and not power cycled. For example, all of my fire tv sticks show as being online but all mobile devices that left the wi-fi range now show as offline despite being back within wi-fi range of the units for several hours. Even manually refreshing the view still yields in the app reporting these same mobile devices as being offline. More testing still needs to be performed, but, there is no reason why the device list status page in the app is this inaccurate.
Bandwidth utilization by connected device in the device list is great to have. The only problem is that it too is completely inaccurate to the same degree as mentioned previously regarding connected device presence status. For those devices that actually show as being online the bandwidth utilization shown in this same view is always 0kbps up and downstream. Since installation of the units i have yet to see this populated and have seen, once, and only once, a single connected device bandwidth utilization being reported if i select the said device in the list.
There is no ability to perform a wireless site survey.
There is no ability to use 802.11x.
From a network management perspective there is no way to rename a specific deco in terms of the host name that it will present to the rest of your network. All units show up simply as ‘deco-s4’ from dhcp. Not useful.
There is no way to designate the guest network lan ip address range.
= the ugly
initial set up was in router mode, the default. Setup of main and satellite 1 deco’s went flawlessly and took but a few minutes per. Meanwhile, satellite 2 refuses to join the mesh in router mode and always leaves me staring at a red blinking light. The app reports “unable to add these decos” and “move these decos closer to a deco that you’ve already set up, then tap try again.” why would anyone have to move a deco unit closer to another? They have an ethernet backhaul, and by definition, can communicate with each other!
Meanwhile, the engineer within me takes a different stance: while all deco units indeed have a gigabit ethernet backhaul each unit must be able to verify a minimal wi-fi signal level from its closest neighbor. And, since i am a customer facing type of person that voice inside of me would scream: in order to assure the best possible experience please ensure all deco units have no physical obstructions between them and that none are surrounded by things that can block radio frequencies such as metal and concrete.
Point is, i have yet to get all three deco units online in router mode at all. It is not an option to bring any units closer together. Satellite 2 deco has been power cycled and reset (via the reset button on the bottom of the unit) half a dozen times per with precisely the same results.
Now, putting the system into access point mode results in a perfectly usable system without any of these problems. Wish i knew why. Regardless, this is a telltale sign to me of poor engineering. Of course, switching system modes from router to access point (or vice versa) results in the system rebooting all deco’s. The majority of most modern residential wi-fi capable routers do not require a reboot when making this change.
This is so problematic that it is cause, alone, for me to return the product.