Routers Suck. Build Your Own Instead!
ฝัง
- เผยแพร่เมื่อ 4 ส.ค. 2024
- Join us in War Thunder for FREE at playwt.link/ltttq and get an exclusive bonus using our link - thanks for supporting the channel!
Did you know that you can build your own router that'll perform a lot better than off-the-shelf products? It's easier than you think!
pfSense documentation: docs.netgate.com/pfsense/en/l...
OPNsense documentation: docs.opnsense.org/
Leave a reply with your requests for future episodes, or tweet them here: / jmart604
► GET MERCH: lttstore.com
► AFFILIATES, SPONSORS & REFERRALS: lmg.gg/tqsponsors
► PODCAST GEAR: lmg.gg/podcastgear
► SUPPORT US ON FLOATPLANE: www.floatplane.com/
FOLLOW US ELSEWHERE
---------------------------------------------------
Twitter: / linustech
Facebook: / linustech
Instagram: / linustech
TikTok: / linustech
Twitch: / linustech - วิทยาศาสตร์และเทคโนโลยี
Y'all should really do a video dedicated to "here's the stuff you can turn an older PC into" like this cause it feels like there's so many options that no one knows. I didn't even know this was possible.
Yes please do that. That would be so useful and interesting. I might finally find a use for my 3 laptops with Intel 2nd gen in them.
When I build my next pc I intend to turn my current one into network access storage. Would be great if LTT did more videos as it could reduce e-waste
If you use Linux the world is pretty much your oyster :)
@@Batyalas Do you have a NAS? If not, make one of those laptops into a NAS. It was relatively easy. Don't expect blazing fast speeds though.
God I would love this. I’ve already done the home server thing and a few other pet projects but stuff like this is my jam!
It helps to have a stack of old scrap pcs lying around
I never would have expected a router to be something an ordinary person could make. Cool
@Britney 8 wtf is this I see spams like this on every second video I watch on yt
For home or small business sure, anything more than that and you’ll be needing specialist hardware. A cpu can handle a fair bit of traffic but quickly overwhelmed - this is where companies like Cisco come in, developing ASICs to absolutely annihilate packet processing.
I built my own Pfsense router last year and its super easy.
Yeah it is I run untangle on a old core 2 duo with a wifi pci-e adapter and one 1gbps Network card never have issues since then
@@voidpointer398 ppl need to be using the YT Spammer Purge app Linus did a video on a while back...
PLEASE do a dedicated video on this. I would absolutely love a short and to the point how to video for setting this all up. Also, if you could lightly touch on the more thank likely added energy cost of running a full PC vs a small ARM based router that would be great.
I would love to put this to a hand-down project to learn metal-kernel construction. A lightweight microkernel and a decently powerful risc v will definitely work for one device at optimal speed.
Checkout Lawrencesystems' vids!
If you're going to go this route by reusing an old PC, honestly one of the investments should be downgrading the PSU to something closer to the max draw compared to what it was using. Possibly a 500GB SSD downgrade from whatever was inside before as well.
@@Allurade Downgrading the PSU like that isn't going to really do anything. Electronic circuits don't draw power just because the power is there. They draw only the power they need in order to function. The only real purpose that downgrading the PSU will ultimately serve is powering your home-built router with a PSU that is less under-driven, which in some cases _can_ affect the energy efficiency of the PSU, but will at least put more strain on the PSU over time than if you'd just left the original higher-spec PSU in place.
@@calyodelphi124 Exactly right, your best for a PSU, is one that doesn't exist i.e. is a super efficent but low wattage, my opnSense pc in total
In all my years, I didn't realize that I could build my own router like that. Always figured it used specialized parts that were rare/hard to get. Thanks for the info!
Fuck the ISPs! Make it yourself!
The fact that Riley, who still uses the ISP provided router, is the presenter makes this so much better
as long as it is in bridged more who cares
He doesn't have a clue here and it shows. Whoever wrote this seemingly wanted to make a quick video on pfsense, but the info about regular routers is just stupid. Yes, they can vary between pure junk and good, but no average person needs to worry about creating a pc with pfsense which also uses more power to run 24/7. Just buy a good wifi router. LTT could have actually recommended some and it would have been much more helpful. There is nothing special about pfsense.
His info about routers using chips that are from 2012 is pure garbage. Someone likely confused the ARMv7-A architecture with the age of the chip itself. Sure, the architecture is from 2011, but the chips are much newer. Wifi6 routers use all in one SOCs that are processors and wifi radios on one chip. When buying one, the difference of 40 dollars in price can sometimes make a real difference, but sometimes more expensive isn't really going to benefit you much. All you need to do is select a good one and you are fine.
Everyone's desktop processors are using the x86 architecture from 1985 and the x64 architecture from 2003.
As an example, the TP-Link AX5400 router is perfectly fine. It isn't too ridiculously expensive considering how insane routers can go up to and it is even better than some higher priced ones. It uses a chip from 2019 that is an ARMv7-A processor and two wifi6 radios.
@@_PatrickO I run an RT-AX58U with asuswrt-merlin and it got all the options I need.
I could even install aditional packages if I wanted to.
That's why I 100% agree with you.
@@_PatrickO That's not the full picture though. Regardless of architecture, router SoCs tend to have older power-inefficient manufacturing nodes to keep costs down. It is a hint that they never advertise their latest routers to be using a 6nm process, because they aren't. I looked up one recent router SoC, the Broadcom BCM4908 which is ARMv8 and 64bit quad core and all that jazz. It took some googling to figure out that it is made with a 28nm process. Which is essentially 2012 vintage.
@@_PatrickO Except there can be a pretty huge difference in reliability between even a high end Wi-Fi router and using a wired router with access points.
I would love an in-depth video on this. Including an optimal price-to-performance build and software setup.
TH-cam - Lawrence Systems
and power consumption comparison at least.
@@NoiseEverywhere In the end, it is generally pointless. Pfsense isn't going to do anything for the average person. The pc you use will be more expensive than a router and use more power.
They should have just recommended the best bang for your buck wifi6 routers and called it a day. It feels like someone really wanted to make a pfsense video, but their info on normal routers is pretty dumb. Sure, the arm architecture used by most routers is 10 years old, but the x86 architecture in your PC is from 1985 and x64 is from 2003. The age of the architecture doesn't really matter. The chips in routers may use an architecture from 2011, but a wifi6 router will have a chip from 2018 or newer.
@@_PatrickO I agree 100%. In another comment I pointed out that this video is just a channel filler without real meaningful content. Maybe play around with the setup for learning experience if you have all required components laying around. Power use alone after a year make it worthwhile to invest in modern wifi router.
that optimal price/performance thing will have a shelf life of less than 24 hours in todays world. Its better to learn how to determine the best price/performance at any given moment so you can make the right choices for the exact moment you are buying things.
It would be nice to know what the actual increased performance actually is
Well it can lower your ping even your little brother is downloading some weird stuff at 10 GB :)
yeah riley
@@mrwooomaker5606 I thought something like this might be the case. Thanks
I get 20% more performance from my router than I’m supposed to get I have a 100/5 connection I get 120 down 6 up and my router does a lot of the things he was talking about basically just don’t buy cheap router and you’ll be fine stay away from linksys they suck go Netgear there the best routers on the market imo and you can add more ports with hubs if you need to lol I have 11 wired connection to my 4 port router I have an 8 port hub in my room for all my connected crap I hate gaming over and Wi-Fi hardwired is the way to go especially when your a TH-cam streamer, buy a good Netgear like the older nighthawk ac2600 it’s a great router was $180usd when I bought it my old router wouldn’t let me go over 25mbps it was a $29 Netgear that was 7 years old when I went from a 25/3 connection to my 100/5 connection I bought a new router like 3 days after I switched my plan I wish I had 20mbps *( maybe in a year or two I’ll be able to get more upload so I can at least do 1080p30 streams )* up so I could stream at 1080p60 or 4k30 right now best o can do is 720p30
@@mrwooomaker5606 in the video he said only x64 cpu can be used, can i use x86?
😀 Nice choice of tutorials on pfsense to reference.
Lawrence in the comments section!!!!! :)
Have used, would recommend :) 11/10, 6 stars, A+++
WAS SO HAPPY TO SEE YOU SLIDE IN THE DMS😃
Pfsense for the win.
Toms' video tutorials are 2nd to none. Lawrence Systems tutorials have given me the confidence to deploy PFSense and Truenas commercially within my business. Go and subscribe!
The x86 PC you use for this DiY project will likely be a power usage pig compared to a retail router. I used a Raspberry Pi as a router for a bit, and that worked fine.
Higher power usage is a valid concern, but not necessarily a pig... My pfsense box is running a Pentium G6400 and I see about 10W at the wall. That's a lot more then a typical consumer router, sure... But that's not excessive. And the last time I restarted pfsense, my uptime was 191 days.
The reliability and QoS that actually works is more than worth the extra $1 in electricity.
Depends, I have a quad-core Celeron I use it uses like 30w... And does a gigabit easily.
@@ZachStein correct. Same here.
As others noted, it will use more power, but not necessarily a huge or noticeable amount more. Whether or not it is worth it will depend on your needs and wants. For me, it's well worth running an old AM3 board to have a flawless router that has never needed a restart in the 3 years I've been running it. It's especially unnoticeable next to the Unraid server that does take a huge amount of power.
@@TheEvox81 Mikrotik and Ubiquiti do have good offerings if you don't have a spare computer.
So you guys did a video on turning your old PC into a server, and now one on turning it into a router.
Would it be possible to run both, one within a VM, and run both off the same CPU? If it was a more powerful CPU like an older i5 or i7
Ooh boy that would be nice if possible, I'd also like to know about this
Yes, theoretically that can be done. As a Security Engineer, I would recommend against it.
Yes. Install proxmox and buy a PCI network card to pass through. TechnoTim and the tech / craft beer guy both have excellent tutorials on TH-cam.
Yes, and it's not that hard. I run a solution like this, with pfSense on a VM inside a VMware cluster.
Proxmox. You can spin pfsense (likely opnsense as well) up in a vm and pass through the NICs.
For my understanding you're missing the "fourth" important part of an all-in-1router: The modem, which translates the DSL-Signal into an Ethernet-signal, which then can be routed to you internal network. At least in Europe (when using DSL) you need this...So you need one as well when putting together your DIY-stuff.
In the USA, for me they've always been separate devices. When we had DSL, the ISP only leased a modem and expected you to plug the desktop directly into the modem, but that's far from a good solution so we bought a router. Same with my friend's VDSL and now fiber, as well as all my friends who had cable modems. Because the coaxial cable can only run so long, my modem is stuck near the wall opposite from all the devices where placing a router would be useless. Having a separate router means I can run it to the best location, which may be a contributor to splitting the function.
@@Washington715 With how prone ISP equipment is to failing, having it all in one place must have been awful! How far back is this? I went to the library for internet before 2010-ish, but I do remember PCI modem cards. I think my stepfather might have had one in his desktop back in 2003 because it was the only device with internet.
In my ISP in Canada provides a combo modem router device
Naw, maybe in your part of Europe, but at least over here DSL routers are their own specialist thing and hardly a default. There's plenty of home routers in Europe aimed at typical consumers by electronics shops that are just the router+switch+AP combo. Though you may often see combo routers with modems at the ISP-managed edge of your network, but I personally would recommend treating any connection to its ports as a WAN in regards to the bits of the network you have actual full control over (namely, connect your "real" router to it) and building things from there.
Ironically here in third world rural south India our modem has long been an optical fiber one (for almost a decade now?) I don't see many integrated optical modem-routers in the market like there are DSL modem-router combos. We always had the 3 in one DSL routers earlier, now the modem is separate. Most people here still get the most basic 150mbps N routers even though fiber plan speeds are already past 100mbps (ISPs claim so at least) and are limited by the fast ethernet ports on everything.
There is also OpenWRT as a great alternative to pfsense. Since it uses Linux, it has greater hardware support.
Also, on the box I ended up with (an embedded intel pre-built industrial PC) it ended up being more stable. pfSense/OPNSense were easier to configure what I wanted to do but would randomly just lock up and drop connection for a few ms which would suddenly result in a giant lag spike. OpenWRT has been treating me well for almost 2 years now.
I found it very suspicious that OpenWRT was left out of this entire video while Sophos-NG & OPNsense were suggested. Most people I know would use OpenWRT/PfSense for this job.
@@drownthepoor Or even DD WRT for consumer network devices :)
OpenWRT and DD WRT have support built in for Pi-Hole right?
Yeah drawback from OpenWRT is that it's firewall isn't as good and opnsense/pfSense run 'hardenedBSD' which is more secure then linux
However, an old PC with several additional devices also consumes much more power than a purchased router does. And that thing runs 24h.
Yes, but a router OS will consume far less power than a full blown Windows/macOS install. And most used modern Dell Optiplex's on ebay are pretty power efficient these days even under the stress of Windows. With pfsense that will drop substantially too. BUT running an old PC 24/7 would still eventually fail, but also this video isn't exactly a permanent thing. Once you learn and realize how seperating routing, switching, and WiFi works, you'll probably buy proper equipment or a PC that can run low power for extended periods of times.
@@madezra64 cpu is not the main source of power consumption on most modern PCs. Running a more efficient OS will reduce CPU use and power consumption, but won't do much about the power consumption of the remaining components in the system.
@@c128stuff What other components? You remove the GPU in these builds for starters. That alone plus the router OS on bare-metal is gonna substantially reduce power consumption. And in fact, many Dell workstations that most small businesses and consumers purchase also use low voltage memory. You can remove the disk drive and swap out the HDD for a small SSD that uses little power and you'll be doing real good. Will it be as low as a shitty consumer router? Of course not, but you'll still be using drastically less power. Add on top of that you can undervolt and underclock your CPU in these situations too if you really wanna be frugal. Like I said, it aint a few watts like a consumer router, but 15 watts is pretty damn low and will basically cost you like a dollar extra to run opposed to the router, and that's under load lol
@@madezra64 what about a minibrick PC ? That things use Atom cpus right?
not if ur underage and your mom turns the router off sometimes.
It's important to remember that many network cards don't like being used in this way. Realtek is one of the worst. Do your own research here, but most Intel nics will work great.
Agreed, especially faster (gigabit+) cards
I don't understand these warnings about Realtek cards, I have built a pfsense system like this 2 years ago running 3 different realtek NICs and I have never had any issues during all this time.
also note that hardware acceleration exists and makes many routers way more efficient and pro gear can be way faster than their cpu would imply
oh my god Realtek drivers are nightmare fuel
@@Lothyde Non-intel nics have compatibility issues. Have for years. This is a widely known issue and realtek is one of the main ones due to how popular they are for consumer grade hardware. The main reason is that much of the hardware tested is enterprise level. I have a 1u server and a cisco switch in my home that runs most of my networking and home service needs. It has intel nics because intel is a huge supplier in that market. Realtek nics will usually work, most of the time. But, if you are building a system to replace your router do you really want to risk it? I want the most tested and verified parts, myself.
Can we get a group of these videos and get Linus to attempt them? Watching him use Linux for his desktop replacement was like my boomer mom trying to print a document. Ineffective but highly entertaining. 😅
We definitely need an Anthony/Linus collab video for this. Anthony has an absolutely astonishing amount of technical know-how and is great at presenting those details, and there’s just something about the enthusiastic and “easy to understand” presentation style from Linus. Together, they make some of my favorite videos on the LTT channel when technical detail and fun DIY vibes are the focus.
I have turned one of my old PCs into a router about a year ago and it is currently running adblock, intrusion detection and local VPN, so I can access my home network and NAS from anywhere. It's pretty cool definitely recommend others to give it a try. Also learned a bunch of stuff of how networks work.
That sounds really cool, what's your setup for your router? I might want to do something similar myself
@@rubiksfaq9214 It's a Pentium G2030 with 4GB RAM
@@Lothyde BRB, looking up security vulnerabilities for that CPU model. (joking)
Now, what's your IP? (nice try FBI)
Question here, do I actually need an Ethernet wifi card , what if I have a normal wifi card, and plug it in through the motherboard
I hope you're using a load balance dns with encryption both ends. Otherwise you're just opening ports on your router that shouldn't be open.
This is a plan of mine whenever I can finally get a job. Redo the entire networking for the house, with a single network (stuck with 2 routers that don't play nice to each other, so upstairs and downstairs are their own wifi networks- one of them doesn't support the ability to just automagically switch over)
Sounds awesome!
Good luck on finding the job!
I recommend getting some UniFi WAPs.
I can't believe you guys managed to make something like this, which seems so complex, fit into a Techquickie. I truly appreciate what you guys do here.
Would absolutely be interested in a full LTT video on how to do this. Need info on reliability and issues that may occur. I know Comcast won't help you at all with connection problems unless you use their expensive hardware.
PfSense has been pretty amazing at handling everything, I have it within a VM that can and has handled 10gbps routing, possibly up to 40gbps but no ISP offers anything close to that.
10 gbps lol. Around here, no ISP offers anything close to 1gbps. People hover at around 200 mbps (and measley 35 up) and feel like it couldn't be any better. Hell, there are even new installations being done still with only 100mbps DSL!
@@AsekiBekovy I mean I had a unique situation where there's all the positives from a Monopoly, cheap infrastructure and large collection of people combined with contractually required connection maximums.
They also had 2 40gb trunks to NTT and were their own equipment/manufacturer provider for most of their back end except the last 100 feet.
@@Oyashiro_Chama Nice one, we have the exact opposite. A complete primary school with a couple of switches, 45 PCs and a controlled WiFi environment, 3 subnets. All connected to town hall via VPN. But the local DSL only has 30 mbps of upstream.
10-40gbps on pfsense? It lacks VPP & probably eats up way more resources tha n tnsr for it.
You've added another eth port to your computer?
I literally was reading this hackaday article a week ago lol
I still love the one network Chuck made with a raspberry Pi and two USB Wi-Fi antennas. Like he said it makes a perfect travel router with built-in VPN that you can set up in seconds wherever you go knowing that you have nothing to worry about using a public Wi-Fi
I've been running Untangle on an old 2500k for several years now and can confirm it's good stuff. However one thing that it's not mentioned in the video is how, well, a normal router will use just a fraction of the power needed for a computer.
I recently did a DIY router setup and it's awesome. Raspberry Pi 4 + my old router running as an AP (both running OpenWrt) + Unifi AP. So much faster and more reliable than before, and so many options
how did you do this? I want to do this too
I'm surprised any linux alternative wasn't mentioned. Cuz rather than pfsense as os, i always use OpenWRT with pfsense package for management.
Count me in. I've been building custom firmware images with OpenWRT since 2013. It runs on any CPU, makes networking easier, and the community is quite friendly.
BSD is robust, as long as you know what you are doing. Linux is more friendly to novice users. I get the impression LTT are using mainly pfSense when it comes to networking.
There are routers with powerful ARM CPUs. Mine can do 100Mbit/s encrypted VPN.
How do you install the pfSense package on OpenWRT?
Linux is more power efficient but FreeBSD traditionally (don't know if its still the case) has faster networking so is preferred for a router.
I ran Linux as a router from Slackware (on dialup when NAT was still experimental) up to OpenWRT on consumer routers, then on x86. When I switched to pfSense, web pages seemed to load faster, though I couldn't objectively measure a difference.
@@alexatkin FreeBSD is faster when dealing with low level networking, meaning layers 1 and 2 of ISO/OSI (ICS 35.100); while linux has superior performance when dealing with layers 3 and 4 (IPv4/v6 and TCP); usually high performance routers, firewalls and access points use linux while BSD based systems are reserved for network cards, switches and modems, but do consider that the main reason large companies use FreeBSD is actually licensing as it allows them to create a fully proprietary kernel and OS.
@@project5799 yes, hence all NAS based solutions on FreeBSD or some BSD system, also not being much different than linux cuz being unix based makes easier for ppl who know commands, directory struct, perms, etc to shift over ez
I used to run a DIY router back in the early dial-up DSL days here in Germany, but ever since I came across the first AVM Fritz!Box I never went back.
These things are an absolute godsend. For the SoHo-environment at least. And for a German cable connection there aren't any real alternatives either.
Also, even though I'm an actual IT-Guy, I'm just getting too old and lazy for this $h!t...
Which fritz are you running?
Also got another question that I've never seen an answer for: say if you have two 7490's, is the Fritz mesh between them real mesh? Or is the second AP really just acting as a repeater?
lol german internet is pretty bad... in 2019 it was the worst in Europe. I've been in germany last year and nothing changed. mobile net is a joke as well
avm did fine for a long time, but now they are acting up. 7510 is a mess without gig lan and 5 ghz, 4060 even more with 2.5gb wan but not lan, and the new 7590ax is missing isdn. If they continue that way, they will soon vanish into nonexistence
@@johnsonjamie1555 It got already a lot better, in cities at least. We can get 1GBit over cable and 5G is also nice if you can afford it. But yes our government is not good at these things, at least at the past, I hope the new one does a better job. The main party is on the opposition and not leading anymore, but we have 3 partys now that take care of not finding a solution together that is acceptable for the public, but hey it could be worse.
@@AsekiBekovy pretty sure ISDN isn't there anymore since it is getting out of fashion, our provider for example want more money if you want that option for your landline.
OpenWRT is also a lightweight and feature-full OS. It's based on Linux and supports things like Docker containers, so you can add plently of services that can't be used in a router by default (or it's kinda messy to get it working instead of running in a container)
I have noticed that sense using one of the suggested routers in this video, security patches are released a lot quicker than on my old mainstream routers. So mini trade off, open-source vs quick repairs of CVE's
Haven't noticed you mentioning anything about power consumption or device size.
Routers usually consume 1-5W/h, while old PCs consume about 150-200W/h and require active cooling.
Also, there is a size difference to consider.
Yeah, power consumption, the size/space to fit everything and the amount of power outlets: the router the ISP provides, the PC, the switch, the Access Point. AND the mess the wires make. I think it is a nice project to tinker with, but it maybe be a pain in the butt to actually use it. What about troubleshooting? Four devices instead of one. Oh man.
there are so small an power savy models just for somthing like this. just look at ally or others, there you can have a intel celeron or atom cpu with 2-6 nic's on a small "pc" for maybe 150 bucks. so no one say you should use your old highend hardware. this small things take maybe 10 watts or somthing, and if 5-10w more is not worth it for you, then dont do it.
there are enoug peopel out who use dell poweredge r210-230 just to use pf/opensense on them.
An embedded generic device such as APU2, Protectli or Qotom device does not consume much more power than a traditional router. Of course, if you decide to saturate the CPU with encryption tasks such as VPN, then yes, they will consume more electricity.
I agree that the size is an issue if you don't have a closet to put your router in.
@@thescandalchannel if you're going as low as celeron, you might as well just buy a normal router
@@avert_bs is just a example for low power and easy to use Systems. Its not just the router itsel pf/opensense can do so much more.
If you have gibabit inet, you cant take a celeron, but for lower speed, it works easy.
While I'm all for people DIYing their network, I rather suspect that most people won't see any noticeable benefit from doing so.
I partially agree. Only partially because I thought I was a part of the "most people" category. It turns out that I have so much throughput in my house that I overwhelmed both my ISP-provided router AND the Netgate ARM pfsense box I purchased to replace it. I'm repurposing an old gaming machine to be my next router to handle my household's throughput. Those two routers, regardless of software, had just low-end hardware they would be pegged at 100% and I'd notice serious issues, particularly with full state tables preventing new connections and ultimately crashing the router.
It's worth considering if you're a power user at least.
@@cybersteel8 your old gaming machine will definitely use exponentially more power than your router does right now. Especially if you intend to have 24x7 internet access in your home.
@@jesseinfinite undervolting could help though
I've had an ISP-supplied router before that will just occasionally crash and reboot when I play a network-intensive game.
So I think the audience is larger than you might suppose.
@@jesseinfinite Everywhere I've had to pay the power bill has had cheap hydroelectric power. Guess I've been lucky, because the power consumption argument means very little to me.
I've been doing this for over a decade now. Very easy to see everything going on with the network and keeps the router from the ISP from being overwhelmed.
Been using my own firewall for 15+ years. Actually thinking of moving to a more power efficient system. Relatively modern ARM are more than powerfull enough for most home routers.
I installed pfSense on an HP Thinclient T520, installed a network adapter using the mPCIe port on the motherboard, cut the bottom of the case out since the wire needed a place to come out and just mounted it to the case itself. It's been going for almost 2 years 24/7. Very low power system and never had any issues with it!
I prefer to just buy good quality flexible versions of each part. Modem, Router, Switch and Access point. Leaving an old PC running 24/7 just doesn't feel like such a good idea to me.
It wouldn't be just any PC running, it would be running a router OS. No different from leaving your router at home now on 24/7.
A router operating system is generally incredibly lightweight and uses far less power than your average full blown Linux DE/Windows/macOS install. Also this is more for people looking to get off of the shitty combo unit and try something better. Obviously us network savvy guys will buy quality versions of each piece, but modern workstations are quite the power houses in this day and age. You can pick up a fairly modern Dell Optiplex on ebay for a few hundred bucks that will make an incredible router. In fact pfSense has more features available than even most business grade dedicated routers. I love my Dream Machine Pro, but pfsense still wins at the end of the day in its feature set.
@@tilgare Unless your PC has an ARM/RISC based CPU, it is not the same. x86/CISC architecture is much more power hungry than whatever's in a router so it will consume significantly more power and will dissipate more heat to do similar tasks. Using a PC as a router also implies that it will do more than that(like hosting local services, acting as a NAS etc.) otherwise you are better off using an off the shelf solution when it comes to power efficiency.
@@LAndrewsChannel Yes for power consumption, it's obviously a hog. But for safety, that is not a factor. And yeah, using it as the NAS would be an excellent use case.
@@madezra64 If I really wanted pfSense I'd use one of the little netgate boxes. But my EdgeRouter X works okay as my dual stack router (3 LANs) and wireguard VPN server.
That DIY router will use a lot more power though
This! It's suddenly hundreds of watts instead of a dozen
Not really, my NUC draws 10W at max.
I would love to see the main channel do this, but you build the router into an art canvas or something so it's discrete
Switching to a dedicated coax modem and small business firewall/router along with a dedicated small business AP was the best network upgrade I've made.
Untangle is also a very good option. There is a free version, but also an inexpensive home version that provides a lot of filtering.
My pfsense box runs on one xenon core and one gig of ddr3 ram. Absolutely plenty for my gigabit net. 2+ cores and 4G of ram have absolutely no use-case for a small router.
Its like having a car to go to your local shop a block away. I mean a car with 4 wheel drive, 800HP, slick tyres, maybe NOS.
But you forgot one thing: Intrusion Prevention Systems, live malware detectors, DOS mitigation, etc.
@@paulvorderegger1522 for a simple home router replacement? :D
@@re4zoon Im just saying that there are case where one would want (more than) 4GB of RAM and a few cores..m
@@paulvorderegger1522 of course there are, but that wasn't the point of the video, nor my comment.
What you are saying is using the above described car to do racing. For that, it's fine.
That's a great analogy. The average household would see no difference, but it's still technically better.
Ha, this is exactly what I did a few years ago when I wanted to upgrade from my AirPort Extreme. Love pfSense. Installed it on a little Protectli box with a 7100U, attached a couple of TP-Link APs, and haven't had a single issue since. The whole system has literally only been rebooted for firmware updates - it's awesome.
I watched this video when it first came out, now I have 2 proxmox setups, with pfsenes, truenas, and everthing else I could want. What a rabbit hole this turned in to. Thanks!!!! Riley.
As someone who has spent most of the last 10 years working on enterprise hardware: I wish I could afford some of the dedicated solutions I've worked with.
Nothing like having a dedicated fiber modem, dedicated router, dedicated switches and dedicated wireless access points.
The only data center I've worked at that only ever had scheduled downtime was the only data center that had all single purpose dedicated hardware.
Sure that made the scheduled downtime take longer, but resulted in longer overall uptime.
What do you do for a living?
@@ValerieFire Currently, nothing. I am now a stay at home dad. But before my son was born last year, I was an independent IT contractor, network administrator, and custom hardware supplier DBA FAllen Computer Solutions.
Do you know about TekLager? The hardware they make is a bit expensive for consumer use but dirt cheap for enterprise and it is insane how well it performs.
You can easily run a small business (say a few dozen employees) on off-the-shelf hardware with pfSense etc. One of my clients is doing exactly that, with branches between different cities connected via a VPN between a pfSense box at each branch.
I'm using a Juniper SRX300 as my home router, which I bought used on ebay. You can get used enterprise hardware at reasonable price, and for home purposes, they are usually reliable enough.
I've been running OPNSense for 2-3 years now, initially on a Dell SFF box with a i5-4590 and 8GB of RAM; currently, I have it on a "refreshed" mini-ITX build with the i5 and RAM scavenged from said Dell (screw Dell proprietary mobos and fans!) with a dual-port 2.5G NIC. I prefer bare metal, but IIRC it can be done on Proxmox or unRAID as well in docker containers.
Agreed. I have it in proxmox on amd and no issues. Previously ran on proxmox in an old refurb dell. Neither had problems, only upgraded to be able to run more VMs. Also, my opnsense gets frequent security updates which on many commercial routers is questionable.
Used pfSense on a Hyper-V Server for about 5 years. Rock solid.
Doing this in a Docker container scares the hell out of me.
I would love to see you guys make one and run it against consumer routers!
That would be dope
I run OPNsense on a Protectli FW2B small form factor PC myself. I demoted my AC-68U to just being a wireless access point and I've added a pair of switches (one near the other devices and one at the other end of the apartment so I only have to run one cable down the hall) to further reduce the strain on my aging wireless access point.
Bad thumbnail. Calling One of the best Routers wrt54GL (in former times) with a trash arrow is a sin. Video is good btw.
Technically you can make a router-on-a-stick as long as you have a switch that supports VLANs.
hmm
What does router-on-a-stick mean? I've messed with VLANs on my switch but I don't know what you mean you could do.
@@deViant14 I think he means making a router PC with only one NIC. If it's a trunk/tagged port, it can act as if it was connected to all of the VLANs separately through virtual network interfaces.
@@szaszm_ This
I have a pfsense router on a stick running as a VM with 5 vlans. My stick is a 10Gb connection so performance is pretty decent.
One thing I will say, as someone who used to work as tech support for an ISP, is that one should take the time to get fully comfortable with PFSense before committing to switch over in lieu of a standard router. The amount of times I had customers call who had little to no idea how to do even simple things on the PFSense they installed (or, even worse, their tech savvy friend/family member installed for them), complaining of slow speeds or routing issues, or packet loss, or high pings, or intermittent dropping (especially on DSL), is just frightening. And unless you hit the jackpot, there's basically zero chance that the tech support you get on the line will be able to help beyond making sure everything works plugged direct to the modem and sending you on your way to figure the rest out yourself, even if you are lucky enough to be with an ISP that is willing to support issues within the Local Network (mine initially didn't but shifted towards doing so a year or so before I left). The standard branded routers are all encountered commonly enough that most ISPs will either have emulators or guides for them, but PFSense, to many ISP tech support agents, may as well be a totally different language.
I know it should be common sense to make an effort to understand something that important before using it as the lynchpin of your internet access, but, unfortunately, there are a lot of people out there who don't make that effort and then find themselves lost as soon as things go anything but smoothly.
I agree. ISPs are providing routers with very simple features and simple interface because the do not want to support the users with complex configurations. Sometimes, they take a brand name router and rebrand it with their logo and their own firmware that has even less features than the original one, just for limiting the error potential from the users and reducing the call volume in their call centers.
@@viaujoc yeah, I actually worked with our R&D team to develop custom firmware for our DSL modem/router combos that would let us set up the customer's login and Wi-Fi to go "reset" to presets based on the customer's choice when ordering the service (or getting a new modem) when factory resetting the modem, for the customers with less technical knowledge. It was especially useful because we were a third party and the first party install techs liked to factory reset people's modems after completing the install.
That being said, even with Cable internet, where we mostly used modem-only devices, with customers providing their own routers, we eventually started helping troubleshoot those as well, and aside from the occasional knucklehead that decided to buy a $10 special from one foreign market or another (our biggest customer base was in Toronto, so lots of different cultures going to stores or markets within their community and getting something that was made there), the worst to work with were people with DIY routers.
Part of the problem was people not being very knowledgeable about the OS they used, but even worse were the people who refused to even try to troubleshoot because they believed the router they built couldn't possibly be the problem.
@@R0D3R1CKV10L3NC3 I totally agree. I also worked for an ISP tech support here in Quebec many years ago and I hated taking a call from a DIY wannabe who was blaming the modem the ISP and everything else but the device that they built.
I currently have a 3/1 from my ISP and just hard wire the gaming rigs. But this video has me seriously contemplating a upgrade.
This is a greatly timed video. I have been thinking of doing this, this may be the push I needed.
It's got so many advantages in my opinion. I've been using my own for ~3 years now. Only equipment from my ISP left are the TV boxes. Running an old (5~y) supermicro thing, iirc it's a low powered xeon with 16gb memory. Got Vyos as it's OS, mainly because I'm familiar with Linux and not with *BSD. Sweet advantage of it is that I run my DNS server and such on it too, everything in one box.
Great content! Could have been a full tutorial video - not a quickie, but its great tip nonetheless!
Interesting. There any chance y'all could maybe do a step by step build and how-to? This would combine all the different places to find info into one cool vid!
I really wanted to build my own router for years, but it's only convenient when you have an old PC lying around... Also form factor was an issue for me since I don't have much space, so I went for a pre-built firewall appliance, the ProtectLi Vault... There are many other brands that offer the same thing but this one seemed more trustworthy to me, with tons of documentation on their website. It's a Celeron based fanless mini PC with a very small form factor (around 10x10 cm) and 4 gigabit Intel ethernet ports, USB, serial console and HDMI output. For now I installed pfSense to get started quickly but I plan to make my own custom firewall/router based on debian server distro. It's excellent hardware, very happy with it, and the performance is amazing: I can do 800Mbit/sec in OpenVPN on local link
After seeing this, I’m actually now curious how Linus should be using when making the ultimate custom made gaming router/pc
Another good OS option I'd say is Vyos I'd say. Its Linux based rather than *BSD, so for those not familiar with *BSD but are with Linux, it might be an easier choice. It doesn't come with a GUI though.
Have used VyOS before, virtualized and it works reall well. Not sure about its hardware compatability, or features as i used it in a home lab sense for some network infrastructure demos during one of the UKs many lockdowns. in addition it doesnt have a built in web interface, but as you said earlier its basically a linux distro, and im sure there are ones out there you can simply install(remembered vycontrol, but not really sure how well that works).plus the configuration is vaguely reminicent of the cisco style of doing things, and that really gets me going.
bsd ftw
ubiquiti uses a variant of it on their stuff
@unsubtract unix-like* lol
I would only select this option if you're really into Cisco / Juniper devices, as VyOS definitely has that feel for me.
Back in the day, I used to build my own routers. I'd use an old PC, run a Linux distro on it (usually Red Hat -- this was back before they went Enterprise-only) and have both the Internet and a switch connected to the PC. Back then it was ISDN or maybe a T1 for the Internet, if I was doing the install at an office -- cable-modems definitely weren't a thing yet, at least not in my neck of the woods. DSL came along, and I still did my own router thing... And for a short while with a Cable Modem as well. But as soon as WiFi became a thing, I stopped doing it. Never occurred to me that an expensive aftermarket 3-in-one router/wifi/switch wasn't as good as my old DIY-router setup. I knew the ones provided by the cable company were crap, but I figured the more expensive ones were far better. And that the weekly required reboots were just par for the course.
Maybe I'll have to give it a try again.
sounds like you just told a love story lol
Getting your isp to bridge their network device is the hardest step in the process. Most require a business level service and won't bridge consumer service.
Bridging passes the public ip address to the network instead of NATting it to a private ip address and using dhcp to assign addresses.
5:58 works 99% of the time.
0:25 You forgot the “modem” part which handles communication over that Internet port, and connecting to your ISP with your account credentials. The “router” really sits on top of all of them, “routing” data between all the three kinds of physical connection.
Not all routers have a built in modem. Usually, only the ones you get from your ISP will have a built in modem.
@@undead890 Generally you cant just plug in a new modem anyway. The ISP's node will ignore it until you call them to authorize it under your billing account, if they even let you. Without that, anyone could just stick a modem on the coax line and get free internet.
@@thegamerguy56 That varies by ISP and country quite a lot actually. For example in the UK most DSL based ISPs you can use any modem you like, a few prefer their own but if you try hard enough you can replace those too. Now cable or FTTP, you are locked to the ISPs modem.
In the US it seems kinda reversed. You can buy your own modem on Cable but not on DSL.
Some countries/ISPs even let you replace your FTTP ONT (modem) by having using a SFP ONT, but that's very niche though hopefully will become more commonplace going forward as it would make building your own router with built-in ONT possible.
These things are discussed a lot on the LTT forums.
My ISP doesn't even use a modem if you're on their fiber optic lines. I have a normal wifi router plugged directly into an ethernet port on the wall.
@@shred1894 The modem is part of the ONT (optical network terminator) installed by your ISP. The one I use has four connectors: 1. to a wall wart power supply 2. the ISP fiber 3. an Ethernet jack at 10Gb/s and 4. a POTS (plain old telephone system) port as unlimited phone service is part of the package.
I built a PC Engines APU2C4 (I think) many years ago, ran pfSense plus a ubiquiti AP. Great combo. Recently switched to OpenBSD instead and I’ve loved it all the more. I’m also a bit of a command line junky
I would love to see Anthony or Jake run through all of this on LTT, I think it would be really interesting :D
Ha! Years ago, before consumer routers (and WiFi!) were available, I was buying old PCs from university labs, kitting them with a couple NICs, installing FreeBSD and selling them for home router/firewall systems. Everything old is new again. That said, modern routers are never CPU constrained as described and they use way less power than a PC. Don’t do this.
Yep. Buying off the shelf hardware routers are going to save you time and also money in power bills.
One term: Energy Consumption
Prices exploded over here, with 0.40€ per kilowatt being the current norm. So no, i will not let a full blown computer run as a router.
Where is this? Paying $0.17 CAD on peak rates. Around half that on weekends and nights. There are hidden fees though....
My brand new 2U server with an Epyc 7443P idles about 115 watts running 15 virtual machines. That's like $9 per month in electricity and it runs my NAS, nextcloud, virtual windows 10 workstation, pinhole, a wiki, pfsense, Windows servers, etc.
@@pooshiesty Germany...
@@zacharysandberg i have a Pi4 with a 2 TB HDD attached doing several duties. Runs at ~10 Watt. Much more suitable to German energy prices at the moment.
In Quebec and British Columbia (Canada) where LTT is, electricity cost around 0.10$-0.15$CAN per kWh. So the cost of power here is not a big factor. At 0.15$ per kWh, each watt of power consumption on a device running 24/7 costs 1.31$ per year. I can imagine that this can become a more serious concern at 0.40 Euro per kWh.
Quebec and BC have cold weather and cheap electricity, a perfect combinaison for cost effective datacenters!
USB C powered notebook mainboards with M.2 storage (like Framework mainboards when they start aging and getting replaced by 13th gen Intel or AMD based boards) would be awesome for this. POE to USB C adapter so no extra power cord is needed if you have a POE switch, and another simple usb c to ethernet adapter, and good to go.
debating on trying to set this up, wondering about how port forwarding would work since my web server will be on the same machine in a different vm
Most consumer routers also play the function of modem (or equivalent) and firewall as well.
Imagine how bad are the 5-in-1s...
A router, a switch, an access point, a TV modem and a recorder...
Do monstrosities like this exist? Am I in the twilight zone?
@@madezra64 Yes they kind of exist. Look at Comcast Xfinity or Videotron Helix. They are not recorders but one box acts as the internet router, feeds TV terminals and provide home phone service. If the "gateway" (this is how they call the router) dies, then all your services are gone (internet, TV and phone line).
I have that very router laying around in a drawer somewhere. Got it because it supported dd-wrt, it ended up not being useful for very long as I upgraded to 802.11n. But it was a solid router for the time I used it.
i use Untangle Firewall on their Z4 appliance from their site, works flawlessly. i used to just run the Untangle software on old PC's with two NIC's until they finally just died. Untangle worked amazingly on 2 different PC's with TP Link gigabit NIC's. i use 2 AP's and 1 router in AP mode for all things wireless, very rarely any hiccups . ill never go back to a conventional router again. the control, options and things you can learn with this sort of setup is a fun thing for me to do. just having the ability to connect to my house on the go via the VPN in Untangle is a huge resource. its nice when you need to get to your files while your away or for those times when you are on sketchy wireless and need the protection of your VPN back at home.
very nice video, I'm sad that you didn't mention openwrt as I think it's better if you use something like a pi due to better arm support and stuff like that but everything else was very nice,I enjoy
I'm a fan of Gargoyle (based on OpenWRT) for traffic shaping and family filtering. After the old Netgear died, I've got it running on a NUC-like computer and it's smooth as butter.
You can also use any device with only one NIC (ethernet port) and configurre the router as one armed router (aka router on a stick) with VLANs and a managed switch. my set up is exactly as that.
Can you explain a bit more detailed. Do you need router that support VLANs for this?
@@Tish0eX It's a really awkward way to do it but ultimately you need a switch that supports VLANs. It's just way easier to do it with two ports and not over-engineer something.
@SuperWhisk Any ethernet card made in the last 10 years will support vlans as along they support IEEE 802.1q
@Yuriy Umanskiy it's mainly in case you have a device laying around that you can't upgrade (mine is lenovo thinkcentre).
@@Tish0eX you basically use VLAN tagging to route your traffic around. The Wan, pfsense and Lan connected to the same managed switch that tag the ports accordingly
Just like a NAS: you can build one, and it will be more powerful than an off the shelf device, but the off the shelf one will be plug and play, and the built one will require some ironing out the bugs
I am using a CM4 on a dual nic carrier board running OpenWRT and love it. It is plenty powerful and wasn't too expensive. I love having enterprise level control over my network.
But what about…
1. size
2. efficiency
3. Convenience
How does these compare?
2025: Smartphones suck. Build your own instead!
I installed Sophos XG, a POE switch and a couple of ceiling mounted Ubiquiti AC Pro access points a few years ago and my home network is great.
Nitpick from a networking professional at 3:13 - switching and bridging is not the same. It even says so in the highlighted text. A super short explanation would be: bridging means incoming traffic from one port is sent to all others. Switching means incoming traffic on one port is only sent to the port where the destination is. Bridging would congest the network card like immediately especially during high bandwidth traffic situations like network file transfer or streaming.
well using an x86 desktop PC as a router would drive up the electricity bill exceptionally don't you think? I doubt it's worth it considering that adding extenders in a mesh is probably a more sustainable option
The one i built had 200W power supply, but the parts I used only uses 100W max. CPU use isn't much when routing only, so actually power consumption is probably 30-40W.
@@haoweishi5538 a typical router uses between 5W and 15W so a yearly use of 44 kWh - 132 kWh for a typical router compared to 263 kWh - 350 kWh for your DIY router even though I personally think you underestimate the power usage of your build because you only measure CPU and not the system as a whole?
That's why I love my AVM Fritz!box. Those Routers are extremely good, have a lot of great features and aren't in any means underpowered for a reasonable price.
He most likely did not mention a modem because many ISP are offering fiber optic services that do not use a modem.
I built one from an old small form factor i5 Dell Optiplex running PfSense. Works great and gives me more features for managing bandwidth. I do bridging, but the CPU is overkill so it does fine.
One thing I will say: when choosing older PC's/Laptops etc, TRY to get one that has a CPU that supports hardware based Cryptography (commonly AES). For desktop stuff far as I can tell that's pretty much anything made after 2010. It's a bit trickier with mobile (like Celeron 3215U, doesn't have AES even thought it's a 2015 CPU) - which are commonly found in NUC's and other small formfactor devices as there do seem to be a bunch on the lower end that do *not* have AES support. I ran into this issue as mobile is very tempting (as mentioned above, try to avoid ARM for now) because of the small formfactor and low power consumption and I looked at cheapest NUC's i could find and a good bunch of them had Celeron Mobile CPU's from 2015-2017ish without AES support.
You don't necessarily need a CPU that supports hardware based Cryptography.
Not necssarily. Useful if you run your own OpnVPN server though.
It is indeed very useful to have a CPU that has AES-NI instructions, but it is not required. Sometimes ago, pfSense has announced that AES-NI would be a requirement for v2.5.0, but they since removed it. If you plan on using VPN, having AES-NI will definitely keep the power consumption down and increase the encrypted throughput.
Outside of a medium sized business, you're never going to need the power of a full-blown pc for your routing. Unless you already have an old pc, you're better off with anything in openwrt's recommended routers section; cheaper, lower power and less work to maintain. When your existing router is failing you, it's normally due to specific parts being cheaped out on to meet low price points, causing bufferbloat and other similar problems rather that the concept of a low power soc being a poor.
Torrenting can absolutely fry older garbage routers. Ask me how I know. Our pfsense box with an 8 core atom can saturate gigabit with it and not really break a sweat.
So what do you do if your router also includes a VOIP interface for a landline phone as well? How do you get that into your DIY router?
I run unraid on an old pc and run pfsense on a vm inside it. Makes it far more economical as far as power consumption goes.
If you're just going to install pfsense, I recommend using a low power system like a NUC or similar. Only issue there is it can be tricky to find one with 2 x LAN ports, and tricky to add a LAN port if you can only find a single NIC system.
a really really long time ago, we had our own home router. it was a refurbished IBM PC with a NIC in there somehow that a family friend provided. Strangest contraption to date i think that i ever owned.
Nowadays you have your overpriced ubiquity stuff and the spider mesh craziness. Those have never really caused a problem for me but the weak link has always been the *modem* that the ISP provided. I still have the black box ones and not the white tube looking thing. they won't issue me a white tube thing unless it can be shown i need it (like if they issued me a new modem for whatever reason, I'll just get another black box :( )
now if I can make my own modem....
The wifi router my internet provided seems to work perfectly fine. I get 50Mbps, 6 connected devices, daily streaming on yt, Netflix, Disney. Decent signal through the house.
They've gotten better in the past decade imo
You have low requirements imo.
For me its this way: Around 50 devices, 500mbits connection, I run a few servers at home so I need speed, security (thats where ISP routers start to lack, I cant block incoming requests based on IP, Intrusion prevention systems, VLANs, DOS mitigation etc) and stability aswell as control.
Ive used pfsense on PC Engines Alix mini PCs before. Works really well.
The difficulty is the energy and space use of running a PC, with fans. Reliable, sure... but not without some maintenance.
I'd also recommend Ubiquiti products for decent routers. The video imaged a Ubiquiti wireless access point, for example. This is the approach I take for most clients, as these commercial options are quite powerful as well.
What about the modem part of the router? Like, how would I get the DSL/cable/fiber connection into this DIY router?
Standard routers are actually about 7 devices in one 😉
Please explain??
@@toddmaek5436 it's a router, switch, firewall, access point, DHCP server, DNS server and sometimes also a VPN server/client
It would be great to see a video on LTT channel comparing the performance of a DIY router you would build and a high end one that cost hundreds of dollars.
Please please do this. I've been trying to google this question for so long and I get no good results.
That’s incorrect. DIY router can only outperform in CPU intensive task such as using VPN client. However, it will never outperform in terms of throughput and latency. The hardware acceleration of even a cheap router will outperform most DIY router because DIY router is limited by the performance of CPU.
@@wojtek-33 Please don't talk about things you don't understand. Have you even tested a consumer grade router on IP performance tester properly in accordance with proper standard such as RFC2544? A poplular consumer grade router such as AC86U can have Agg Rx Tput around 1.488 Mpps, that's close to a commercial grade router. Try your DIY router, I guarantee you it will crash at much lower rate. Powerful CPUs are no use for high Mpps rate because that's not what they are designed to do, they can hardly forward few thousand packs at a time. Any consumer router can beat CPU bound router if you don't use it for CPU intensive task such as VPN.
@@wojtek-33 Routers regardless whether they are consumer or commercial use low powered CPU, small RAM and small storage because these are unreleated to network performance. Unless you want to use additional feature such as VPN, NAS etc on a router (and you shouldn't), CPU/RAM/Storage are not useful at all for high performance network device.
@@wojtek-33 You clearly never even touched a IP tester. Have you even tried putting any CPU bound router on IP tester? 64 frame size can go up 2 Mpps for i7, most CPU can only have around 100-200kpps. Please tell me how your c3558 can beat AC86U. Show me the test result.
Would have loved for you to touch on using power over ethernet for the AP!
I used to run a home server on Gentoo, which also doubled as a router and even an access point via a PCI WiFi card. The AP part was the worst: the chip in the card supported AP mode very poorly and was causing constant kernel panics, so I had to abandon that pretty quickly. Though based on the fact that Windows seems to be able to easily put most modern laptops in the hotspot mode, probably AP mode support has improved since then. The router part ran just fine, and I particularly appreciated the possibility to implement HTB QoS when trying to download large files over ADSL. I did have some trouble with making sure that it consistently goes back up after power failures (instead of e.g. requiring manual intervention for corrupted file systems), though I suspect that it could have been done - I just didn't know how - and distros optimized for working on a router would probably have sane defaults. What really made me stop doing any of that though wasn't any specific technical problems, but the fact that it solidly made me the single point of failure for all internet issues at home. Suddenly, if I'm away, the ISP's tech support is completely useless, "turn it off and on again" may cause more problems than it solves, and even calling me on the phone isn't super useful, because I'd have to explain how to ssh into the box or how to attach a keyboard and monitor.
Which isn't to say that I'm against the idea of DIY routers. These days I once again need to build a LAN beyond the capabilities of a consumer router, but at least this time, I'm planning to use a MikroTik router and only use a DIY server for non-essential tasks. Basically, I'm avoiding non-standard solutions unless I absolutely have to use them.
I've used pfSense in the past, but ran into a lot of bugs and other oddities that caused me grief. I moved on to Untangle and while is not free (~$50 a year), it certainly is pretty powerful, dare I say even more powerful than pfSense even with the added packages.
A few things that could have been added to this video are how important it is to use a PC that is preferiblly small form factor and low power and also list the many other OS options that are avaialable for creating your own web appliance (pc based router). I have been running old PCs as web appliances for the better part of 2 decades at this point and have never looked back. If you are creative with some of the other OS options you can also add a lot of other functionality to the same machine without having a ton of other stuff plugged in.
They entirely missed out that a Raspberry pi4 would be ideal for the job as - gigabit ethernet
Cheap and low power consumption
@@MaxC_1 The only issues with using a Pi4 are that you have to add a second ethernet port that isn't limited by the throughput of the Pi chipset and you quickly run into the same issues that many off the shelf routers have as far as max throughput, number of simultaneous connections, encrypted tunneling, and very limited system resources if you decide to do any real stateful packet inspection.
If you can live within the limits of the Pi4 it can make a decent home router for many people.
@@kuhrd the port on Pi4 supports max 1Gbps so about 200MBps on a 5 port lanes say. Good enough for most networks
Besides that if you want higher speeds I prefer a compute module+io board which has a PCIe Gen2x1 which allows over 3Gbps throughput using a PCIe to ethernet adapter and a switch
Does this work well with AT&T UVerse? I am annoyed with it, but it is the only choice for my house and putting anything in front of it makes the wired network different than the wireless one, unless you want to mess up the path to the required AT&T router.
I’m working in networking so I have plenty of knowledge on how the routers work but I never ever thought that I can build one for myself. I even worked with pfSence lol
These spam bots really trying hard aren't they?
Errr, a crucial part of those so called routers is also the modem functionality! Do your own modem, do your own router, do your own switch and do your own wifi. Now you're good to go! Also consider efficiency: ASICs built for routing and switching are not found on PCs, look for a designated router instead.
A-AND: Separating networks is one nice and easy layer of security, go for it. But claiming devices were "protected", even if one subnet becomes compromised is quite a bold statement. At least VLANS should be recommended here and a pro tip would be to use network namespaces in Linux if using a PC for routing.
I use my old Q9550 PC myself running Ubuntu. It also has mdadm network raid 5, Shinobi handles my Security Camera's, and custom scripts to manage my thermostat.
Another tip, if you are replacing a router compatible with alternative firmwares you can also use it as a VLAN capable switch and use a laptop/mini pc with a single nic.