/rg/ - Router General / Home Networking

For all your home networking needs.

What router do you currently run?
What firmware is installed and how have you configured it?
Is Wi-Fi 6 a meme?
Optimal routers for OpenWrt: openwrt.org/toh/views/toh_available_16128

FreeBSD-based:
OPNSense: opnsense.org/
PfSense: pfsense.org/

Linux-based:
DD-WRT: dd-wrt.com/
FreshTomato (Broadcom only): freshtomato.org/
OpenWrt: openwrt.org/toh/views/toh_available_16128
Asuswrt-Merlin too I guess.

Previous:

Attached: DIR_2660_Side_Right.png (1096x1011, 285.76K)

As far as I can tell, Wi-fi 6 is AC (5) with higher real world (through walls) bandwidth capably. 6E is the one that sounds like a meme to me, unless you've got like 3+ people gaming online and streaming 4k at once.

I got pfSense installed and configured.
Port Bridges don't work for me and I'm pretty sure I set them up right; static ipv4, dhcp enabled, allow all firewall rule, etc.
I have my Orbi AP connected to the LAN1 port and I'm currently using it as my switch. It works fine, but for some reason the router itself can't detect a WAN/internet connection, and the LED is permanently pink(error mode). Weird.

I tried pfBlocker, and it seems like a massive drawcard over OPNSense. So much power and simple enough to operate.

Which is better for privacy and security, DoT or Unbound?

How do you deal with a very high concentration of wireless devices? Like 30 devices in 1 room?

Ordered this badboy yesterday for an OPNSense router. Still debating if proxmox + several services is worth the trouble or go bare-metal OPNsense.

Ideally I would like to run a OPNSense, Pihole (or other DNS adblock), torrent box, on one little machine. But I am new to this and configuring it all is daunting.

Attached: IMG_20220910_124422.jpg (1080x1592, 308.74K)

holy fuck that's expensive lmao

>260 ahmeds for a j4125
nigga you can get them for like 120 usd on aliexpress, maybe 150 with the same amount of storage and memory

Anyone?

Attached: 5.jpg (768x1024, 133.29K)

>And all of that could be practically be done on a small connection
>All of that so you can superfast upload a file from a computer.

If you want coolness because your own IXP i dare you

learn about packet filtering

Attached: pc-engines-apu-3c4-system-board-4gb-ram-big_ies2858938.jpg (776x452, 53.06K)

depends somewhat on the thread model, but in general i'd go with unbound.

how do I setup VLANs on openwrt? I feel retarded. my router only has a wan and two lan ports. It's a few clicks on my synology router so Im completely out of my element.

i don't get unbound.
people say you should never use your ISP dns servers because they spy on you. how is it any different to querying authoritative nameservers THROUGH your ISP provided WAN? And isn't Unbound unencrypted?

They can just read your SNI anyway

how do I collect all the wifi data floating around me? i have a wifi adapter that supports monitoring mode or whatever. also how do I spoof the adapters mac before I plug it in on ubuntu?

I like your style.

Interfaces -> Devices -> Add device -> Type VLAN
Or just type in $DEV.$VLAN into the input field when you configure interfaces. It's at the very bottom of the list. Type something like like "eth0.7". It'll create the VLAN interface automatically.
If your router has a hardware switch you might have to do it in the "Switch" config, but that's usually not a thing any more.

6E is mostly jsut wifi 6, but on 6ghz
Which is great, but the real world usage of that is pretty slim right now. The best use of it seems to be as backhaul between mesh nodes. Otherwise, regualr wifi 6 will do you just fine for quite a while

Someone explain to me how a dedicated managed switch is better than the built-in switch on a router/AP or an Intel NIC.

The point is to make it more difficult / less convenient for your ISP.
If you use their DNS, all they need to do is grab the server logs.
If you use your own DNS, they would need to package inspect your traffic and log that.
And as pointed out, if they inspect your traffic, they could get the same data even if you use DoT. But on top of that, now you also have that third-party DNS, which might grabs your data.

Who cares if they spy on you

Watch your child-porn csam shit somewhere else

It's not. It's exactly the same shit. Just more ports.
Those multiport Intel NICs are different in that they're not actually switches. You can set them up that way in software but unlike a hardware switch it is not independent from the rest of the system. On a hardware switch the OS running on the CPU can crash and burn but the switch will generally keep working.