4 ms·

I’ve been looking to install WiFi internet for some tenanted accommodation (think 8 flats or so). As it’s an “included with rent” perk, I need a way to dynamica

I’ve been looking to install WiFi internet for some tenanted accommodation (think 8 flats or so). As it’s an “included with rent” perk, I need a way to dynamically throttle based on number of clients and protocol. Is there a simple prosumer solution for this? My current path is leading me towards openwrt on a beefy router with some custom firewall rules.

sbr464 8y ago
You can install a separate box running pfSense to act as a gateway, configuring different rules/load balancing etc. It also has a plugin ecosystem to enable additional features. That would allow you to size the box and grow as you need. I usually virtualize it with VMWare on Dell Server hardware. That way you get good remote management via Dell idrac, and can make config changes/reboot without losing access. https://www.pfsense.org/ https://www.pfsense.org/ On the access point side, if you want more granular control to handle congestion, Ubiquiti Unifi and their various mgmt platforms work well. I can't recommend their Security Gateway Appliance (frequent reboots), but the backhauls, APs and CPEs are solid. That will allow you to visualize utilization using a gui, and adjust limits per device/group easily. If you already have the APs, then a gateway device may be better. https://www.ubnt.com/ https://www.ubnt.com/ I've found over the years, and in the datacenter, that running pfsense on server hardware is very reliable. You can run on a single board computer kit but the CPU doesn't hold up to heavier traffic/vpns etc, worse remote management.
- nsomaru 8y ago
  Thanks! That seems quite expensive in terms of hardware needed and the license for VM Ware. Any thoughts on this (this is an investment decision for low cost housing in Africa)? Also, is there a way to charge for traffic beyond a certain quota? There’s a product called Sputnik with some firmware you can download for various router brands which lets you run a hotspot/captive portal with billing
  - sbr464 8y ago
    The regular VMware vSphere Hypervisor is free, and works on most hardware. You could go used, or check delloutlet.com. (sub $1k) It doesn't need high specs at all. The reason I mention is that usually you end up needing other small services. Virtualizing allows you to have a single box and add VMs as needed. It's also easier to setup carp/failover later if the system grows and you need redundancy. Running an ISP is 24/7 so being able to have full console access, and confidently reboot services saves late night trips. It's been a while so am not familiar with the current hotspot products.

sbr464 8y ago

You can install a separate box running pfSense to act as a gateway, configuring different rules/load balancing etc. It also has a plugin ecosystem to enable additional features. That would allow you to size the box and grow as you need. I usually virtualize it with VMWare on Dell Server hardware. That way you get good remote management via Dell idrac, and can make config changes/reboot without losing access. https://www.pfsense.org/ https://www.pfsense.org/ On the access point side, if you want more granular control to handle congestion, Ubiquiti Unifi and their various mgmt platforms work well. I can't recommend their Security Gateway Appliance (frequent reboots), but the backhauls, APs and CPEs are solid. That will allow you to visualize utilization using a gui, and adjust limits per device/group easily. If you already have the APs, then a gateway device may be better. https://www.ubnt.com/ https://www.ubnt.com/ I've found over the years, and in the datacenter, that running pfsense on server hardware is very reliable. You can run on a single board computer kit but the CPU doesn't hold up to heavier traffic/vpns etc, worse remote management.

nsomaru 8y ago
Thanks! That seems quite expensive in terms of hardware needed and the license for VM Ware. Any thoughts on this (this is an investment decision for low cost housing in Africa)? Also, is there a way to charge for traffic beyond a certain quota? There’s a product called Sputnik with some firmware you can download for various router brands which lets you run a hotspot/captive portal with billing
- sbr464 8y ago
  The regular VMware vSphere Hypervisor is free, and works on most hardware. You could go used, or check delloutlet.com. (sub $1k) It doesn't need high specs at all. The reason I mention is that usually you end up needing other small services. Virtualizing allows you to have a single box and add VMs as needed. It's also easier to setup carp/failover later if the system grows and you need redundancy. Running an ISP is 24/7 so being able to have full console access, and confidently reboot services saves late night trips. It's been a while so am not familiar with the current hotspot products.