Open Letter to Arris - Why do you disable basic functionality (e.g. software reboot on the SB8200) ?

We apologize, but the SB8200 and in fact, all Surfboard cable modems are plug-and-play devices. There are no configurations required, so the feature hasn’t been disabled; it simply doesn’t exist on these devices. 

​@undotcom As you said, the SB8200 indeed has a reboot feature, because there’s a button for it in the GUI after authenticating (at least, there is on mine) and ISPs have the ability to reboot it remotely. My guess is that the reboot button is disabled without authentication on the client side to prevent denial of service.

With that said, I found a (relatively) inexpensive workaround: It’s a power outlet device called Keep Connect. The Keep Connect device attempts an Internet connection on a schedule. If the Internet connection fails, it has the ability to power-cycle its outlet. There are a number of configuration options with the device to define how often it attempts a connection, how long it should wait for the connection to be re-established, etc.

Thanks Wstewart11 for the additional validation and suggestion.

I am, in fact, using a Shelly Outlet connected to Home Assistant for monitoring my connection and power cycling if needed. While I realize most electrical equipment can handle repeated the repeated spikes from power cycling, I would prefer to reboot without the surges.

As for you SURFboard Moderator,

Your corporate talking-point is demonstrably false (i.e. a lie).

I’ll repost one of the dozens of articles from 2015-2016,  that point to Arris’ security flaw allowing Surfboards to be rebooted without any user authentication, that permitted hackers to reboot or even reset Surfboard modems.

Rather than address the underlying issue and harden devices against unauthorized/external hacks, Arris took the easy way out, patching the firmware to disable Surfboards’ reboot and reset functionality - rather then update your security protocols to prevent unauthorized or unauthenticated requests.

https://thehackernews.com/2016/04/hack-modem-internet.html

The question to Arris remains the same. 

Why not update the security and authentication methods of your 10 year-old firmware to reinstate reboot functionality for your customer base?

We know other manufacturers still provide *secure* reboot functionality in their modem firmware.  Why can’t / won’t Arris do the same?

https://www.securityforrealpeople.com/2016/04/arris-motorola-surfboard-modem.html

“... the simplest solution would be a firmware update such that the web UI requires a username and password before allowing disruptive actions such as rebooting or resetting the modem, and that validates that a request originated from the application and not from an external source.”

Between 2016-2017, “...most ISPs have now pushed an updated firmware that eliminates the reboot and reset features (but doesn't actually secure the UI).”

As you mentioned, remote rebooting is possible from the ISP side, so this feature already exists. However, they are unable, or unwilling, to share how this works so we could access it from the internal network.

It would be nice if the cable modem provided a web-based API that allowed encrypted delivery of credentials in order to gather data or issue a reboot. Sadly, the cost required to develop such a feature and the minuscule size (comparatively) of the audience who would actually use such a feature make its development a wish that will likely never be fulfilled.

I’m thinking the surge in home automation adoption will drive a change.

Someone built a Cable Modem integration to Home Assistant. In just 60 days, it is quickly picking up steam and already added to the default library for users to add. Almost everyone has the same motive in mind - give me a method to reboot my modem when my internet connection drops.  It’s becoming quite evident which manufactures support and which one doesn’t.  

I just changed my main router brand to do the same.
I really like the Surfboards, but this specific exclusion will ensure I buy a different brand next time.

Educating others in other forums can only help. 
Most of us “research the boards” before we make buying decisions!