3 ms·
You'll need something that can do traffic shaping and you'll also have to segment your network somehow. This will cost you roughly $1000 at least in hardware. U
by alar44 4y ago
You'll need something that can do traffic shaping and you'll also have to segment your network somehow. This will cost you roughly $1000 at least in hardware. Unless you really really want to learn about networking, it's likely not worth the effort.
- hunter2_ 4y agoPfsense is free (if you already have a server to run it on) and a switch with vlan support (not a managed switch, just a smart switch) can be had in the $100 range. Probably need an AP/SSID per vlan though, assuming the vlan awareness stops at the switch. But you're spot on regarding effort/learning.
- alar44 4y agoYeah it all depends. They may need to buy access points and a switch and a device to run the shaping. Depending on how many ports they need on the switch, it's really easy to hit $1k if you don't buy the cheapest no name stuff you can find.
- pxx 4y agolol what? Are you buying 10GBASE-T equipment or something?
- planb 4y agoMy Unifi Dream Router does this per device (not network segmentation needed) and costs less than 300€.
- weare138 4y agoI'm not sure where you're getting that price from. If you're already running pi-hole on something like a Raspberry Pi you can just use Linux's traffic shaping tools. That's all you really need for a home network.
- alar44 4y agoFirewall - $300 2 APs - $200 8 port switch - $150 That's less than I'd spend personally. If the Pi isn't the gateway (which it likely isn't) that's not going to be trivial. Even if it was, fiddling with iptables isn't exactly easy. How are you going to identify devices? MAC? DHCP reservations? Static IPs? That's not a trivial project.
- weare138 4y agoWhy would you buy a firewall? If you're already running Linux just use that or use the one in the WiFi router you probably already own. You don't need 2 APs, I don't know where you're getting this from. It's a home network. And why would you need an 8 port switch? You just need 2 ethernet ports on your Linux box to pass the connection through to the Wifi router. How are you going to identify devices? MAC? DHCP reservations? Static IPs? Yes. That's not a trivial project. I do this stuff all the time, it's not rocket surgery.
- alar44 4y agoBecause I value uptime. I don't want my garbage PC that runs PiHole to crash and totally take down the network. I have many hardwired devices, they may not. I need two APs as I live in an older house and I get crappy reception in my basement. I also want a guest and IoT network so I chose to use VLANs to segregate, which requires switching and APs that can do that. Yes, if you do this all the time (I do too) it's not that hard. But it's certainly not a beginner project.
- squarefoot 4y agoYou can have professional level packet filtering by using OpnSense (FOSS) on any not too slow used PC if you are a home or SOHO user, or on new dedicated hardware that costs half of that money or less. If you are ok with consuming more energy by using older hardware, there are many big brand used firewalls converted to OpnSense or PfSense that can be bought almost for peanuts online. Just search for "pfsense" or "opnsense" on Ebay for example. https://opnsense.org/ https://opnsense.org/ https://www.ipu-system.de/ https://www.ipu-system.de/ This is the only European based vendor I'm aware of, aside PCEngines, whose hardware is excellent but not comparable wrt performance for heavy use. I'm sure there are cheaper similar solutions, especially from far east; also some interesting offers from the US and UK although shipping and import fees make them a lot less appealing (for us in the EU).