3 ms·
Why have a non-'guest' network? Force anything secure over a proper VPN E.G. wireguard.
by mjevans 4y ago
Why have a non-'guest' network? Force anything secure over a proper VPN E.G. wireguard.
- rootusrootus 4y agoHadn't really considered that. A bit inconvenient, I don't know that I'd want to VPN inside my own network just to access my servers.
- mjevans 4y agoSurely this is desirable while away from home too?
- Abekkus 4y agoNot sure I could enforce QoS priority on the wireguard traffic. Easier with a non-guest SSID. Is there a huge performance benefit if there's just one SSID running in my airspace? Also, for the OP, sounds like it's time to put the kids on the guest network.
- rootusrootus 4y ago> sounds like it's time to put the kids on the guest network I have considered that, for sure.
- mjevans 4y agoYou can QoS tag by whitelisted mac addresses if it's just priority to known devices generally. At best your router may be able to slightly shape devices on the network (strategically dropped packets). QoS over the air doesn't really work as there's zero control of any devices tying up RF spectrum, and zero ability to defend against DoS attacks (E.G. neighbor trying to stream 4K over wifi).
- fmajid 4y agoStreaming services block VPNs, many sites like Wikipedia impose restrictions (no editing allowed from a VPN), and geoloc based services act oddly (I live in London and my VPN server is in a London data center, but Google thinks we are in Dubai and G.Apps default to Arabic).