Hi, and sorry in advance if this is the wrong community to post this. But I seek some advice on how I can upgrade my home networking setup that also connects my selfhosted services.
I have posted a shitty Visio that visualized my current setup, but just to describe it in some words.
I use an aging Amplifi HD router and access point, that is connected through wireless to a mesh point.
It works, but I am aware how much of the throughput disappears when connecting through the meshpoint. And I would also like to utilize newer technologies like Wifi 6 (i already have devices that support this standard) or even 6E.
So I thought about switching the router to a dedicated one without a wireless access point, and then wire an access point to provide wireless access.
While I was at it, it could be interesting going from gigabit to 2.5 for the wired devices. One of the homelabs could be modified to utilize it. Or at least just gain the possibility in a future upgrade, by getting a router that supports it while I am at it.
My question is, what would you suggest I upgraded with? I’m open for OpenWRT or PFsense/OPNsense, and keeping things modular.
Edit: and I am located within the EU, if it has any bearing on what devices are available without crazy import duties.
I’d suggest looking into the Unifi product line. They have products that meet your needs and then some. I believe the company is based out of the EU so you are likely good in imports.
Very tempting, as I am accustomed to Amplifi, and I like their access points a lot. But if I am to achieve above 1 Gbps wired speeds, it appears that I have to go for the UDM Pro which I think is quite above the mark. It seems like many other options have opened up, like a retrofitted Fujitsu S920 as I commented to another.
I’ve heard good things about TP Link WAP as well. They have some that support 2.5G/Wifi6. I like pfsense if it is available in your country/budget for firewall. I use a virtual appliance but it’s essentially the same thing software wise. It has a bit of a learning curve and but it’s a very common enterprise level firewall so the skills you learn will be transferrable not just to work (if you work in IT) but also to other firewalls like fortinet, Palo Alto, etc. because the fundamental firewall principles are the same even if the GUI and specific features are not.
I work with the Azure cloud infrastructure, with quite a bit of networking included, so it’s one of the motivations of not necessarily taking the easy route.
What hardware are you using?
The ONT allows for 1Gbs up and down, through fibre. But the possibility of buying more is possible. Having multi gig within the network, was more for internal communication and keeping options open for future upgrades.
Would be from the assumptions that typical routers that do everything, tends to be underpowered. One thing I looked at was repurposing a second hand Fujitsu S920 for the task of being a router. But again, I am just spitballing, seeking inspiration.
“underpowered” routers are usually underpowered for multiple high bandwidth wireless connections. if you disable the wireless, shoving bits over copper would -usually- be efficient enough to not be the bottleneck.
I’m running this as my router. It handles a 500/500mbit connection over WireGuard for me without a problem. CPU usage can spike up to 80% when I push it as much as I can, so depending on how it scales I’m not 100% sure how it would handle 1gbit routing+vpn for example.
I would definitely go Opnsense for the router, it’s much more flexible than other options. You can get various Intel mini-PCs with very low power usage that have 2.5GbE ports.
For the APs I’m pretty happy with my Unifi setup, but I’ve heard decent things about TP-Link Omada hardware too.
Hi!I see a lot of great suggestions here but I was just looking at your chart and I think just one fundamental change would benefit you.
Think of your switch as the “core” of your network. Everything should connect to that switch (computers, access points, firewall) for your best experience/performance.
If you go with unifi, you should know that their switches are managed but if you intend to self host anything, you’re actually going to want the managed features!
Have a look at the Bananapi options, especially the R3. (Or the R2, it’s a bit more mature)
It’s a very capable single board computer with onboard managed switch, including SFP cages. If you want, you can buy antennas and utilise the wifi 6, or get a dedicated access point.
PFsense, openwrt, et al all have images. I think some people also run the mikrotik OS on it. It’s powerful enough to run as a hypervisor so you can chop and change between all of these if you want.
It gets bonus points for accepting 5G modems for failover.
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !selfhosted@lemmy.world
A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.
Rules:
Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.
No spam posting.
Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it’s not obvious why your post topic revolves around selfhosting, please include details to make it clear.
Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.
Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).
I’d suggest looking into the Unifi product line. They have products that meet your needs and then some. I believe the company is based out of the EU so you are likely good in imports.
Yea, same company makes the amplify line. Depending on bandwidth they could get a usg, or udm. Then a poe switch and a poe AP.
Isn’t that the cloud shit?
Nope. It can be cloud if you want it to, but generally, you can host your own controller. I run the controller in a docker container, personally.
Very tempting, as I am accustomed to Amplifi, and I like their access points a lot. But if I am to achieve above 1 Gbps wired speeds, it appears that I have to go for the UDM Pro which I think is quite above the mark. It seems like many other options have opened up, like a retrofitted Fujitsu S920 as I commented to another.
Seconded on the Unifi line
Budget (about 200 euro):
Better(400-500 euro):
TP-Link omada line is basically a bunch of ubiquity clones at much lower price
This is exactly the kind of input I was looking for, thank you!
I’ve heard good things about TP Link WAP as well. They have some that support 2.5G/Wifi6. I like pfsense if it is available in your country/budget for firewall. I use a virtual appliance but it’s essentially the same thing software wise. It has a bit of a learning curve and but it’s a very common enterprise level firewall so the skills you learn will be transferrable not just to work (if you work in IT) but also to other firewalls like fortinet, Palo Alto, etc. because the fundamental firewall principles are the same even if the GUI and specific features are not.
I work with the Azure cloud infrastructure, with quite a bit of networking included, so it’s one of the motivations of not necessarily taking the easy route. What hardware are you using?
What is your bandwidth from your ISP?
The ONT allows for 1Gbs up and down, through fibre. But the possibility of buying more is possible. Having multi gig within the network, was more for internal communication and keeping options open for future upgrades.
Staying with 1 gig you could go https://store.ui.com/us/en/pro/category/all-cloud-keys-gateways/products/uxg-lite If you want more you could go https://store.ui.com/us/en/pro/category/all-unifi-cloud-gateways/products/udm-pro Depending on how many directly connected devices you are going to use you could use this switch https://store.ui.com/us/en/pro/category/all-switching/products/usw-lite-8-poe and then use one of the poe ports to power https://store.ui.com/us/en/pro/category/all-wifi/products/u6-plus
Is there a reason for this? Unless it has specific issues you’d like to fix, I’d just keep using the current router and simply disable its WiFi.
Would be from the assumptions that typical routers that do everything, tends to be underpowered. One thing I looked at was repurposing a second hand Fujitsu S920 for the task of being a router. But again, I am just spitballing, seeking inspiration.
“underpowered” routers are usually underpowered for multiple high bandwidth wireless connections. if you disable the wireless, shoving bits over copper would -usually- be efficient enough to not be the bottleneck.
It might be underpowered, it might not be. Just test it out? Do you notice performance issues related to your router?
I’m running this as my router. It handles a 500/500mbit connection over WireGuard for me without a problem. CPU usage can spike up to 80% when I push it as much as I can, so depending on how it scales I’m not 100% sure how it would handle 1gbit routing+vpn for example.
I would definitely go Opnsense for the router, it’s much more flexible than other options. You can get various Intel mini-PCs with very low power usage that have 2.5GbE ports.
For the APs I’m pretty happy with my Unifi setup, but I’ve heard decent things about TP-Link Omada hardware too.
Supports gigabit speeds with SQM (QoS) over Ethernet and up to 400Mbps over WiFi in its current form.
Hi!I see a lot of great suggestions here but I was just looking at your chart and I think just one fundamental change would benefit you.
Think of your switch as the “core” of your network. Everything should connect to that switch (computers, access points, firewall) for your best experience/performance.
If you go with unifi, you should know that their switches are managed but if you intend to self host anything, you’re actually going to want the managed features!
Thanks and goodluck!
Have a look at the Bananapi options, especially the R3. (Or the R2, it’s a bit more mature)
It’s a very capable single board computer with onboard managed switch, including SFP cages. If you want, you can buy antennas and utilise the wifi 6, or get a dedicated access point.
PFsense, openwrt, et al all have images. I think some people also run the mikrotik OS on it. It’s powerful enough to run as a hypervisor so you can chop and change between all of these if you want.
It gets bonus points for accepting 5G modems for failover.
Why the unmanaged switch? Putting servers on a switch I like to know that the switch can handle VLAN and link aggregation.