Was rather shocked to find BT hubs don’t allow you to change DNS servers anymore and force you to use their own ones, so I can’t properly setup adguard.
What routers are people using now that are reliable and will let me control my own network configuration
Old computer, or Raspberry pi with proxmox and pfsense on it. The positive thing is that you can run other servers as well (pi-hole for example for network wide blocking ads)
If you’re using pfSense anyway, pfBlockerNG provides the same AD related DNS sinkhole functionality of pi-hole without the need for a whole separate machine/VM to manage.
So the pi takes over dchp and assigns itsself as a DNS server? I assume if I want to assign static IPs I have to do it through the pi from then on?
Can’t use pihole because I’m running NixOS on my pi and the only way to run it is via docker container (which melts down my system, believe it’s trying to emulate x86 for some reason)
Literally anything that’s not ISP provided should give you the flexibility to set your own network parameters, but if you want strong flexibility beyond that, I’m going to throw my recommendation to opnSense, it’s a fork of pfSense and the only reason I like it over pfSense is that the interface is very different and to me, it makes a lot more sense in how it’s laid out.
That’s personal preference, YMMV.
For consumer gear, ubiquiti has some strong units, the ER-X is pretty reasonable, but the unifi line is somewhat more beginner friendly, but tends to bury advanced features a little bit, focusing more on usage and reporting of activity and such.
Lower end consumer, the usual contenders are tp-link, and Netgear, though I lean more towards stuff from Asus, or anything on the dd-wrt compatibility lists… I ran a Linksys WRT54GL for a long time because of dd-wrt. I haven’t kept up with the “wrt” variants over time… The last time I touched dd-wrt was on a relatively high end (at the time) Asus router and it did very well… Might be work looking into. There’s usually a trick to getting wrt firmware into a router though, and it will likely void your warranty, so buyer beware.
Circling back… My biggest issue with opnSense and pfSense, is the choice of hardware, unless you’re buying direct from pfSense’s netgate product line, you’ll have to source something to run it on, and my biggest issue with that, personally, is that I want something small, like a router, IMO, should be, at least smaller than most PC’s, that’s relatively inexpensive, with at least two built in ethernet ports, since I’ve found that USB ethernet options are generally not very reliable. And usually, I can find something small and cheap, but there’s only one ethernet port, or I can find something cheap with plenty of networking, but it’s not small, or I can find something small with plenty of networking, but it’s not cheap.
So I’m running a sonicwall at home, because fuck all this other junk, I just want something that does what I want it to do without hiding all my options behind some garbage, or a system that can only work a particular way, and you don’t get options to change it. Or something that’s huge or expensive… Or something I have to spend a lot of time setting up, maintaining, or fixing. For me, that’s sonicwall.
This is also similar reasoning and why I went with a mikrotik router. All the functionality I need, none of the bullshit, solid performance for price. Only downside is the setup isn’t trivial, but if you’re comfortable on the command line, it’s a breeze.
I opted for a Fujitsu Futro S720. It has only 1 Ethernet, but you can add a second one with a PCI x4 card. Used are very cheap and consumes about 6W (if I’m not mistaken).
Just wanna put in a good word about GL-iNet routers … they are more travel- and pro-sumer focused than a lot of what’s been mentioned here. They run a proprietary front end on top of OpenWRT, but if you don’t like that, most of them have full support in vanilla OpenWRT.
These are definitely more for the tinkerer market, their documentation and firmware can have quirks, but that being said (and as somebody who wouldbe wary at that caveat) I have been using GLi routers with manufacturer firmware as a daily driver for 3+ years and once you get them set up they are very solid.
Might be a good option for the digital nomads among us who need a smaller device which can connect to a host network and then send all traffic over a VPN with very easy setup.
Good question, I’m not entirely sure as I have never used mesh features per se.
I do currently use a GLi Creta as a wifi extender to a GLi Slate AX, but that’s likely not what you’re asking about (I believe it’s a layer 3 (?) bridge from WWAN to WLAN/LAN). It does work pretty well in this role, all factors considered.
I use Protectli hardware with Pfsense or Opnsense. Doing this at home and in 10+ small/medium environments. Never had any issues, I highly recommend Protectli hardware + pfsense/opnsense.
You can also get cheaper mini PC’s on Alibaba for cheap. I did this in 2017 and it’s still going strong. No moving parts, all passively cooked with an Intel laptop chip that has hardware encryption built in (core i5).
Been using opnsense since the start and it’s been rock solid.
pfSense on a ZimaBoard 216 works astonishingly well and it’s easy to setup and manage. Toss in a Mikrotik CSS610 and you have a vlan ready setup in under an hour.
If you don’t like the ZimaBoard, you can go with any of the Topton style router PCs from AliExpress for a couple hundred and have a 2.5Gb router running in proxmox with docker in a separate VM.
pfSense is great!!! I bought a Netgate router which comes with pfSense Plus.
OP, consider buying a Netgate router if you want no hassle, or if you’re up for installing an OS then you can put pfSense on a custom platform like ZimaBoard or Protectli.
Surprised to see no mention of the Edgerouter X in this thread so far.
Honestly, if you’re looking for a simple, highly customizable router that comes with its own hardware, and don’t mind supplying a separate access point, you really can do a lot worse than the ERX. They’re small, highly affordable, use very little power, and it’s all just Debian under the hood so you can do an astonishing amount with them.
Honestly, your average SOHO router can easily be turned into a good enough access point. I’m using an old Asus router for mine. A Ubiquity access point is also a solid choice for cost vs performance. Or give TP-Link a look, they’re always a decent bet for wireless.
I have been using this for years and cannot recommend it enough. It’s literally the perfect home router in my opinion. Highly customizable, affordable, small, no gimped features “for ease of use” or whatever bs and extremely stable - I have never once had to touch it or reboot it after setting it up, which is more than I can say for any other router. The only downside is that you do have supply an AP separately.
It’s a great little machine. The downside, though, is that it’s not that powerful at all. With hardware offload enabled and features like QoS turned off, you’ll get about ~600mbps of max total bandwidth shared between up/down.
For most people that shouldn’t be an issue, though.
Yeah this is what I’ve been running for the last few years. Incredibly stable and does everything that you want for a small network. Even has poe passthrough if your AP supports that
That’s depend on how deep you want to go with router customization. Most casual enthusiasts would do fine using an Asus router. Out of the box, the firmware is based on an opensource firmware (Tomato) and has a lot of features and options compared to their competitors. Feature-wise, it already blows other consumer-grade routers out of water. And because the firmware’s source is available, third-party firmware (asuswrt-merlin) is thriving and can be flashed with zero risk while adding a whole bunch of new features and customization options.
If you want something more, then your only options are using enterprise-grade routers (e.g. mikrotik, ubiquity, etc). Just note that these enterprise gears usually don’t have latest WiFi tech (or even WiFi at all!), so you’ll still need to buy another wifi access point and hook them downsteam of the router.
Lots of good suggestions. The down side to a pc running opnsense is going to be electricity costs. If that’s a concern.
Any of the Asus routers supported by Merlin will do what you need. (That’s what I’m currently doing). It has a feature called DNS control that will intercept DNS lookups and send them to the servers you define.
Pfsense is fantastic. Extremely flexible. I am contemplating switching to opensense when it’s time for an upgrade (it’s been running seamlessly for many years, but someday I’ll need to).
Note that it’s a router, not a wireless access point. For that I use a few Ubiquity APs (I forget the model).
pfSense is indeed fantastic. The best part about it is you can install it on pretty much anything, as long as you have a couple reasonably fast network interfaces and an okay-ish processor depending on the network load it will just work. Also has OpenVPN server baked in which is pretty cool
Add comment