Home >Industry dynamics>Industry dynamics
ExpressLRS Open-Source Protocol Deep Dive & EWM700 Three-Model Comparison

Introduction

In the world of FPV (First-Person View) drones and RC models, the performance of the control link and telemetry link directly determines flight safety, range, and handling experience. For a long time, commercial protocols such as FrSky's ACCST series and Crossfire/Tracer dominated the market, but they were either range-limited, had locked transmit power, or required expensive proprietary hardware.

The emergence of ExpressLRS (ELRS) has completely changed this landscape. As an open-source, high-performance RC (Radio Control) link protocol, ELRS has rapidly become the hottest choice in the FPV community due to its extremely low latency, ultra-long communication range, and compatibility with most mainstream low-cost hardware on the market. It is not just a protocol — it is a technological revolution driven by makers and flight enthusiasts.

What Is ExpressLRS?

ExpressLRS (ELRS) is a high-performance, open-source radio control (RC) link system built on ESP32/ESP8285 microcontrollers and Semtech SX127x/SX128x LoRa RF chips. Hosted on GitHub and maintained by a global community, it is designed for FPV drones, fixed-wing aircraft, RC cars, boats, and other RC applications.

ELRS is defined by three core attributes: Express (ultra-low latency), Long Range (exceptional distance), and Open Source (community-driven). Through LoRa spread-spectrum modulation, optimized packet structures, and frequency-hopping technology, it delivers performance that rivals or exceeds commercial solutions (e.g., TBS Crossfire) at a fraction of the cost.

ExpressLRS:Key Advantages  

DimensionPerformance
Ultra-Low LatencyUp to 1000 Hz packet rate on 2.4 GHz, latency as low as 2–4 ms
Extreme Range5–15 km typical on 2.4 GHz, 20–40 km+ on 900 MHz
Open EcosystemFully open-source code, rapid community-driven iteration
Cross-Brand CompatibilityTX and RX from different brands work together on the same band
Exceptional ValueReceivers typically priced between $10–$25
Dual-Band SupportOperates on both 2.4 GHz and 868/915 MHz bands

ExpressLRS:Core Technology

LoRa Spread-Spectrum Modulation

ELRS leverages Semtech's LoRa (Long Range) technology. By using Chirp Spread Spectrum (CSS) modulation, it trades some data rate for extremely high receiver sensitivity (down to -130 dBm or lower), enabling long-distance communication. On 2.4 GHz, ELRS also supports FLRC (Fast Long Range Communication) modulation, offering higher data rates while maintaining strong interference resilience.

 FHSS (Frequency Hopping Spread Spectrum)

ELRS employs adaptive frequency hopping, rapidly switching across multiple channels during communication. The hopping sequence is seeded by the Binding Phrase, ensuring each user has a unique hopping pattern. This dramatically reduces co-channel collisions and enhances anti-jamming capability.

CRSF Protocol

ELRS communicates via the CRSF (Crossfire Serial Protocol), an efficient binary serial protocol:

  • Frame Structure: Device Address (1B) + Frame Length (1B) + Frame Type (1B) + Payload (variable) + CRC8 (1B)

  • Channel Encoding: 16 channels, 11-bit resolution each, range 172–1811

  • Telemetry: Supports RSSI, Link Quality (LQ), SNR, battery voltage, GPS, and more

  • Baud Rate: Typically 400k–921k bps to match high packet rates

Binding Mechanism

ELRS uses a Binding Phrase instead of physical button pairing. Devices with the same binding phrase (set during firmware flashing) automatically pair. The phrase seeds the random number generator that determines the frequency-hopping pattern — it is an anti-collision mechanism, not encryption.

Hardware Architecture

ELRS receivers typically use a MCU + RF chip dual-chip architecture:

  • MCU: ESP8285 (common in receivers), ESP32 (common in TX modules) — handles protocol processing and Wi-Fi updates

  • RF Chip: SX1276 (900 MHz LoRa), SX1280/SX1281 (2.4 GHz LoRa/FLRC)

  • PA/LNA: Some models integrate power amplifiers and low-noise amplifiers for higher output power and better sensitivity

Firmware & Configuration

ELRS supports multiple firmware update methods:

  • Serial (UART) flashing via ESP flash tools

  • Wi-Fi OTA: Receiver auto-enables Wi-Fi hotspot if unbound for 60 seconds; firmware and settings can be managed via browser

  • Betaflight Passthrough: Flash via flight controller USB

Default Wi-Fi password: expresslrs

ELRS 4.0 Key Updates (February 2026)

  • Customizable arming switch (CH5 freed as a regular channel)

  • Smarter dynamic power algorithm

  • Automatic antenna mode negotiation (True Diversity / Gemini)

  • Doubled telemetry bandwidth in Gemini mode

  • Redesigned WebUI

  • Direct GPS connection to receiver

  • Not backward compatible with 3.x

Features and Comparison with Other Protocols

Core Features

  • Ultra-Low Latency: ELRS is one of the lowest-latency RC links available. In high-rate flight modes (e.g., 500Hz), the end-to-end latency from transmitter stick movement to receiver PWM output can be as low as <3ms, far superior to the 10-20ms of traditional commercial protocols.

  • Ultra-Long Communication Range: Through its unique spread-spectrum technology and powerful Forward Error Correction (FEC), ELRS can achieve communication distances of tens of kilometers in low-rate flight modes (e.g., 50Hz) with 1W (30dBm) transmit power — a feat often unattainable by commercial protocols.

  • Open Source & Highly Customizable: This is ELRS's most compelling trait. Users can freely adjust air rate (from 25Hz to 500Hz), transmit power, frequency, packet structure, telemetry content, etc. Developers can also contribute code to enrich the protocol.

  • Low-Cost Hardware Compatibility: ELRS supports a variety of common low-cost RF chips on the market, including:

    • Ebyte E80-xxxM2213S dual-band LoRa module (based on LR1121)

    • Ebyte E80-400M2212S / 900M2212S dual-band LoRa modules (based on LR2021)

    • Classic SX1278 (868/915MHz) and SX1280 (2.4GHz) modules

  • Dual-Band & Multi-Band Support: ELRS firmware can run on Sub-GHz bands (e.g., 433/868/915MHz) and the 2.4GHz band. Dual-band modules (e.g., Ebyte E80 series) can support both bands simultaneously, enabling software-based automatic switching for coordinated "long-range Sub-GHz" and "low-latency 2.4GHz" operation.

Comparison with Mainstream Protocols

DimensionExpressLRS (ELRS)FrSky ACCSTCrossfire (TBS)Ghost
Protocol NatureOpen-source, community-drivenCommercial, proprietaryCommercial, proprietaryCommercial, proprietary
Latency (Typical)3 ~ 10 ms9 ~ 20 ms5 ~ 10 ms5 ~ 10 ms
Range (Ideal)>30 km (1W, Sub-GHz)1.5 ~ 5 km (100mW)>20 km (1W)>10 km (1W)
Hardware CostVery low (generic modules)Medium-high (dedicated hardware)HighMedium-high
CustomizabilityExtremely high (open-source firmware)Low (limited modification)Low (not open)Medium
Software EcosystemOpen-source configurator, active communityOfficial configurator, mature ecosystemOfficial configurator, mature ecosystemOfficial configurator
Module CompatibilityGeneric SX127x/128x, etc.Dedicated FrSky modulesDedicated TBS modulesDedicated Ghost modules
Frequency BandsSub-GHz + 2.4GHz / Dual-Band2.4GHz868/915MHz868/915MHz
Main DrawbackRequires some technical know-how for firmware flashingHigher latency, limited rangeExpensive hardware, closed ecosystemSlightly higher hardware cost, smaller community

Summary: In terms of latency, ELRS is comparable to Ghost, slightly better than Crossfire, and far superior to FrSky. When pursuing extreme range, ELRS's 1W power + Sub-GHz band combination offers a significant advantage. The biggest advantage, however, is that ELRS achieves performance close to or even exceeding top-tier commercial protocols at one-tenth the hardware cost.

EWM700 Series — Three-Model Comparison

The EWM700 series is a next-generation wireless receiver module developed by Chengdu Ebyte based on the ExpressLRS open-source project, featuring an ESP8285 + SX1276/SX1281 chipset architecture covering both 915 MHz and 2.4 GHz bands.

Product Overview

DimensionEWM700-900T20DXNEWM700-2G4T12SXEEWM700-2G4T20DXN
FrequencyFCC 915 MHzISM 2.4 GHzISM 2.4 GHz
ChipsetESP8285 + SX1276ESP8285 + SX1281ESP8285 + SX1281
TX Power20 dBm (100 mW)12 dBm (15.8 mW)20 dBm (100 mW)
Dimensions (mm)18.0 × 12.0 × 3.512.0 × 12.0 × 3.318.0 × 12.0 × 3.5
Weight1.1 g ± 0.1 g0.7 g ± 0.1 g1.0 g ± 0.1 g
Interface2.54 mm Pin Header2.54 mm Castellated Hole2.54 mm Pin Header
AntennaIPEX 1IPEX 1IPEX 1
TX Current≈ 141 mA60 mA165 mA
RX Current≈ 33 mA≈ 33 mA≈ 37 mA
Default FirmwareELRS 3.4.2 Generic ESP8285 SX127x 900 MHz RXELRS 3.4.2 Generic ESP8285 2.4 GHz RXELRS 3.4.2 Generic ESP8285 PA 2.4 GHz RX

Model Breakdown

EWM700-900T20DXN — Long-Range & Penetration

  • Band: FCC 915 MHz — longer wavelength, better diffraction and penetration

  • RF Chip: SX1276, optimized for long-range LoRa

  • Best for: Long-range flights, mountainous/wooded terrain, obstacle-heavy environments

  • Pros: Less congested band, greater range at same power (20–40 km+ theoretical)

  • Cons: Lower max packet rate (200 Hz), larger antenna required

EWM700-2G4T12SXE — Ultra-Lightweight

  • Band: ISM 2.4 GHz, license-free worldwide

  • Power: 12 dBm (15.8 mW), no external PA

  • Size: 12 × 12 × 3.3 mm — smallest of the three

  • Weight: Only 0.7 g —Extremely lightweight

  • Interface: Castellated holes, ideal for direct SMD soldering

  • TX Current: ≈ 60 mA — lowest power consumption

  • Best for: 65–85 mm whoop drones, ultra-light builds, indoor flying

  • Pros: Smallest footprint, lightest weight, lowest power draw

  • Cons: Lower TX power limits telemetry range

EWM700-2G4T20DXN — Balanced High-Performance

  • Band: ISM 2.4 GHz

  • Power: 20 dBm (100 mW), with external PA

  • Size: 18 × 12 × 3.5 mm, same footprint as the 900 MHz variant

  • Weight: 1.0 g — only 0.3 g heavier than the Lite version

  • TX Current: ≈ 165 mA (highest of the three)

  • Best for: Racing drones, freestyle, everyday FPV flying

  • Pros: 2.4 GHz high refresh rate (up to 1000 Hz) + full 100 mW output

  • Cons: Higher power consumption; 2.4 GHz band is more congested

 Common Features

FeatureDescription
ProtocolCRSF
InterfaceUART (TX/RX)
Supply Voltage3.3 V – 5.5 V (5.0 V recommended)
Operating Temp-40°C to +85°C (industrial grade)
ShieldingMetal RF shield for enhanced interference rejection
Firmware UpdateSerial flashing + Wi-Fi OTA
PCB Wi-Fi AntennaOnboard antenna for wireless updates
LED IndicatorSolid (connected), Double flash (binding), Slow flash (lost signal), Fast flash (Wi-Fi mode)
BOOT ButtonHold during power-on for serial flash; hold after power-on for Wi-Fi mode
BindingPower cycle 3 times rapidly to enter bind mode

Buying Guide

Use CaseRecommended ModelRationale
Long-range flightsEWM700-900T20DXN915 MHz offers superior penetration and range
Whoop / micro dronesEWM700-2G4T12SXE0.7 g ultra-light, 12×12 mm ultra-compact
Racing / freestyleEWM700-2G4T20DXNHigh refresh rate + full 100 mW output
Fixed-wing / cars / boats900T20DXN or 2G4T20DXNPin header for easy wiring, ample power
Beginners / practiceEWM700-2G4T20DXNBalanced performance, broad compatibility

Important Notes

  1. Firmware version matching: TX module and RX must run the same major ELRS version (e.g., both 3.x or both 4.x) to bind

  2. Power safety: Input voltage must not exceed 5.5 V; use a low-ripple regulated supply

  3. Antenna matching: Always use a 50 Ω impedance-matched antenna; keep it away from metal and carbon fiber

  4. Binding phrase: Receivers ship without a default binding phrase — set one (≥8 characters) when flashing

  5. Thermal management: 20 dBm models generate noticeable heat at full power — ensure adequate ventilation


ExpressLRS has become the de facto standard in the FPV and RC world, driven by its open-source nature, high performance, and low cost. The Ebyte EWM700 series offers three well-targeted models:

  • 900T20DXN for long-range and obstacle penetration

  • 2G4T12SXE for ultra-lightweight builds

  • 2G4T20DXN for full-power 2.4 GHz balanced performance

Whether you're a long-range explorer, a competitive racer, or a first-time pilot, the EWM700 series has a solution tailored to your needs. Combined with the powerful ELRS open ecosystem and active community support, this system will elevate your flying experience to the next level.

Frequently Asked Questions (FAQ)

Q1: Which Ebyte module should I choose for ELRS?

A: It depends on your target frequency band and performance requirements.

GoalRecommended Module
Long-range challengeE80-900M2212S (900M, LR2021, for Americas) or E80-400M2212S (400M, LR2021, for China/Europe). Sub-GHz offers strong penetration and long range.
Low-latency freestyleE80-400M2212S or E80-900M2212S operating in 2.4GHz mode, or other SX1280-based 2.4G modules. High packet rate on 2.4GHz delivers the lowest latency.
Dual-band backupLR1121-based modules (e.g., E80-xxxM2213S), which natively support both Sub-GHz and 2.4GHz for seamless switching.

Q2: Is ELRS latency really only 3-5ms?

A: Yes, but this is based on specific hardware and configuration. On the 2.4GHz band with 500Hz Packet Rate, end-to-end latency from transmitter stick to receiver PWM output can reach 3-5ms. However, when switching to Sub-GHz or using low packet rates (e.g., 50Hz) for ultra-long range, latency increases accordingly (e.g., 10-20ms) — a trade-off between range and latency.

Q3: How do I connect an ELRS module to my transmitter?

A: Most modern transmitters (e.g., RadioMaster TX16S, TX12) support external RF modules. You can connect an ELRS-flashed Ebyte module (e.g., E80 series) to an RF module board via SPI/UART interface, then plug it into the transmitter's external module bay. Additionally, you can configure ELRS parameters via Lua scripts directly on the transmitter. Advanced users can also solder or design custom carrier boards.

Q4: Is flashing ELRS firmware complicated? What tools do I need?

A: There is a certain technical threshold, but the community provides very convenient tools and tutorials. The general process is: download ELRS Configurator, select the corresponding RF module, frequency, and firmware version, then connect the module to your computer for flashing. When flashing Ebyte modules, you typically need to pull the BOOT pin high before powering on to enter programming mode. Ebyte also provides corresponding flashing guides.

Q5: Which is better for ELRS — the E80 module (LR2021) or the SX1280 module?

A: Each has its strengths; there is no absolute "better" choice.

ModuleStrength
LR2021 (E80 Series)Core advantage lies in the Sub-GHz band. Its -142dBm极限 sensitivity makes it the king of long-range modes.
SX1280Core advantage lies in the 2.4GHz band. It supports FLRC high-speed modulation, potentially offering slightly better latency than LoRa mode at high packet rates (e.g., 500Hz), making it the preferred choice for high-speed racing.