多个项目发现 ESP32 微控制器隐藏的 SDR 功能
Various Projects Find Hidden SDR Capabilities in ESP32 Microcontrollers

原始链接: https://www.rtl-sdr.com/various-projects-independently-find-hidden-sdr-capabilities-in-esp32-microcontrollers/

ESPARGOS 团队发现了尚未公开的 ESP32 原始 IQ 信号采集功能,使受支持的开发板能够作为低成本 SDR 使用。其频率覆盖范围为 2.2–2.7 GHz,ESP32-C5 还支持 4.8–6.0 GHz;采样率最高可达 80 MS/s,模拟带宽约为 13–54 MHz。大多数型号只能导出信号快照,因此主要用于频谱分析。ESP32-S31 可通过千兆以太网以最高 16 MS/s 的速率连续传输数据,并计划支持 GNU Radio 和 gqrx。 相位相干采集如今使 ESPARGOS 能够对任意 2.4 GHz 信号进行测向,不再局限于 Wi-Fi 和蓝牙。其他项目也独立采用了类似技术:其中一个项目使用 ESP32-S3 加 FPGA,通过 USB 3 连续传输 IQ 数据,但与时钟相关的相位噪声问题仍未解决;C5VRX 则使用 ESP32-C5 在设备上直接解调 5.8 GHz FPV 视频。ESP-WebSDR 还支持在浏览器中刷写固件并实时查看频谱。

多个项目正在利用廉价 ESP32 芯片中 undocumented 的 ADC/DAC 调试接口采集原始 IQ 样本,从而实际上将支持 Wi‑Fi/蓝牙的微控制器变成软件定义无线电设备。大多数实现都专注于仅接收操作,不过 Espressif 的调试接口也可能支持双向射频访问。 评论者认为新型 ESP32-S31 具有很大潜力:其千兆以太网接口或许能在无需昂贵 FPGA 和高速 USB 硬件的情况下实现约 20–40 MSPS。據称,最近一次更新还解决了原型机因由 FPGA 提供时钟而产生较差相位噪声的问题。这可能使 ESP32 开发板在业余无线电、频谱监测以及其他低成本射频数字化应用中非常有吸引力。 讨论还涉及信号质量、监管限制和出口管制。在获得当地适当许可的情况下, transmissions 可能是合法的,但如果这些 undocumented 模式得到广泛使用,制造商可能需要面对类似 FCC 的认证或合规问题。 最后,评论者将这些实验与将电视 USB 调谐器改造成 RTL‑SDR 接收器进行了比较,同时指出 Ettus USRP 设备在动态范围和灵活性方面明显优于基础的 8 位 RTL 硬件。
相关文章

原文

Back in 2025, we posted about ESPARGOS, a phased array of many patch antennas, each connected to an ESP32 WiFi microcontroller. ESPARGOS could be used to determine the direction of arrival for WiFi signals and create a live augmented reality heatmap.

Recently, the ESPARGOS team has made an exciting discovery. They found that several ESP32 chips have an undocumented feature that lets the firmware bypass the fixed WiFi and Bluetooth functionality and instead capture raw IQ baseband samples. As a result, several ESP32 models can now be used as an internal SDR covering 2.2–2.7 GHz, plus 4.8–6.0 GHz on the ESP32-C5, with up to 80 MS/s sample rate and roughly 13–54 MHz of analog bandwidth, depending on the chip.

However, for use as a general-purpose PC-connected SDR, the output bandwidth is insufficient, so only snapshots of data can be exported to a PC. This means that the SDR will only work as a spectrum analyzer, and demodulating or decoding continuous radio data is not possible with just an ESP32. The exception is the new ESP32-S31, which can stream continuously at up to 16 MS/s over its Gigabit Ethernet interface, with a SoapySDR driver for GNU Radio and gqrx coming soon. If you want to try it yourself, the ESP-WebSDR page lets you flash the firmware to most ESP32 dev boards directly from your browser and view a live spectrum and waterfall.

Furthermore, ESPARGOS notes that phase-coherent IQ sample capture is now possible with their hardware. This means ESPARGOS is no longer limited to WiFi and Bluetooth signals; it can now perform direction finding on any arbitrary signal in the 2.4 GHz band. The team also says phase-coherent transmissions would be possible, but they aren't implementing them right now because they could be misused.

It also seems that, independently, at least two other projects discovered the same or similar features around the same time, but to solve different problems.

Over on Reddit, user /u/h0m3us3r discovered the same feature and uploaded it to GitHub on Sept 26, and recorded a video showing an ESP32-S3 working as an SDR with an FPGA used as a USB3 front end. Unlike ESPARGOS, h0m3us3r's project streams the raw IQ data to a PC continuously via the FPGA rather than in snapshots, so full demodulation/decoding on PC should be possible. However, the current prototype uses the FPGA to clock the ESP32, which results in poor phase noise. So if the clocking issues can be resolved, an ESP32 combined with an FPGA could make a standard general-purpose SDR, like the RTL-SDR, but with a 2.2–2.8 GHz frequency range and up to 80 MHz of bandwidth.

Another project that seems to be using a somewhat similar finding is C5VRX, which was first uploaded to GitHub on August 13. C5VRX uses an ESP32-C5 as a 5.8 GHz real-time FPV video receiver. Although this project appears to use a different mechanism, the result is similar: it uses an undocumented IQ data stream on the ESP32 to sample FPV signals and demodulate them onboard, outputting analog composite video through a simple resistor DAC. The project is still a work in progress and doesn't yet work reliably at range.

eSpDR ESP32 80 MHz output to SDR++
eSpDR ESP32 80 MHz output to SDR++
联系我们 contact @ memedata.com