4 ms·

Run Debian stable on your routers. Use APs as dumb APs.

• yjftsjthsd-h 6y ago
  Are there truly dumb APs? Because I'm really not fond of having Debian in the network core but the actual APs running unpatched proprietary garbage firmware either (especially if that's the part handling wireless security).
  • sliken 6y ago
    Dunno, define "dumb". Ubiquiti APs run linux, you can get a shell, but generally the APs are pretty simple and managed by their management util, which you can run somewhere on your network. The APs don't control the router, don't write/change firewall rules, and generally just focus on reliably handling wifi duties. So you could build yourself a router, run OpenWRT, pfsense, or whatever floats your board to control which packets go where, and which ports are visible from where. The APs do not need access to the internet, and generally anything sensitive going over the network should be encrypted anyways. I'd consider a router I control the OS and configuration of with a ubiquiti AP (or 3) more secure than the usual router configured by some corporation or running a bunch of wifi binary blobs.