this post was submitted on 11 Aug 2023
100 points (96.3% liked)

Selfhosted

38719 readers
606 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

  1. Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.

  2. No spam posting.

  3. Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.

  4. Don't duplicate the full text of your blog or github here. Just post the link for folks to click.

  5. Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).

  6. No trolling.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 1 year ago
MODERATORS
 

I am planning to eventually build my own home server, and when I do I will hook it up via ethernet. But I do want to switch away from the generic FIOS router and use my own for more control over my data and security. Any recommendations?

you are viewing a single comment's thread
view the rest of the comments
[–] daranto@2dl.eu 45 points 1 year ago (2 children)

If you want the full control use https://opnsense.org/ on a mini pc or in a VM on your home server.

[–] betternotbigger@lemmy.world 5 points 1 year ago (2 children)

Can this work with the "off the shelf" mesh routers.

[–] vector_zero@lemmy.world 7 points 1 year ago (1 children)

This seems like it's geared toward higher power hardware that's not generally available on a consumer-grade router.

[–] stown@sedd.it 7 points 1 year ago (1 children)

You could buy a $300 consumer router and it would be worse than just using an old PC with OPNsense.

[–] _TK@lemmy.antemeridiem.xyz 6 points 1 year ago (2 children)

Except that the old PC is probably less efficient at a lower clock than an AR based consumer router. You'll get more performance and features, but it will be more expensive to run.

[–] stown@sedd.it 3 points 1 year ago

I guess if you live in a place where electricity is super expensive this will matter. A good majority of self-hosted people don't seem to care much as they have server racks full of old hardware.

[–] peregus@lemmy.world 1 points 1 year ago

The Fujitsu Futro S720 consumes about 6 Watts and it's great for OPNsense!

[–] Lrobie@lemmy.world 7 points 1 year ago (1 children)

No, off the shelf routers are usually ARM and opnsense is x86 only.

[–] thejoker8814@lemmy.world 4 points 1 year ago

Please don’t host a router on a Hypervisor VM. That does not benefit security. First of all a router is an integral part of the (home) network, therefore it should not be dependent on anything, like a hypervisor. You want to be able to replace or update your server/ hypervisor independently from each other, for example in 5 hrs your router might be still rocking all data, but you would want to upgrade your home server / hypervisor. Furthermore all those OpenWRT, PFsense, OpenSense kernel/ OS hardening is more effective on the hardware itself, especially all RAM/ Memory based security measures. Also if you truly want to be more secure, you use dedicated hardware for multiple reasons, performance is dedicated to only routing/ firewall processing (no other service/ VM can block or slow down packet processing), reducing the attack surface (less software, less attack surface), easier to update.