2 ms·

>I'm currently upgrading my home network, trying various options, and one of the headaches is provenance of the equipment. If you're concerned about provenance

>I'm currently upgrading my home network, trying various options, and one of the headaches is provenance of the equipment. If you're concerned about provenance (or even if you're not), I suggest using a general purpose device and rolling your own ala pfSense[0]/OPNSense[1], etc, or just use one of the BSDs or Linux and use native tools or one of the many router/firewall distros[2] [0] https://www.pfsense.org/ https://www.pfsense.org/ [1] https://opnsense.org/ https://opnsense.org/ [2] https://en.wikipedia.org/wiki/List_of_router_and_firewall_distributions https://en.wikipedia.org/wiki/List_of_router_and_firewall_di...

neilv 2y ago
One of the things I learned while building such a server-based box is that eBay is awash in counterfeit high-end Intel NICs. Regarding pfSense and OPNsense, I recently built and used a nice OPNsense box, including IPS, but decided to go back to OpenWrt for home use, because OpenWrt actually worked a bit better for the things I needed. I might use pfSense (or maybe OPNsense) router for a startup office of more than several people, though (until we can cost-justify a dedicated IT infra&support specialist). With OpenWrt on the WiFi APs.
- nobody9999 2y ago
  >One of the things I learned while building such a server-based box is that eBay is awash in counterfeit high-end Intel NICs. Assuming you mean NUCs[0] and not NICs, I'm sure you're correct. That said, there are many other fanless miniPCs which are both less expensive and, as such, much less likely to be counterfeited. >Regarding pfSense and OPNsense, I recently built and used a nice OPNsense box, including IPS, but decided to go back to OpenWrt for home use, because OpenWrt actually worked a bit better for the things I needed. A fair point. The device I use as a router/firewall came pre-installed with OPNSense, which I immediately wiped and replaced with a vanilla Linux install and customised it to my own taste. I mentioned OPN/pfSense not because I use them, but because they offer a fairly complete solution without having strong networking knowledge. Rolling your own is, IMNSHO, definitely superior to those, as well as to OpenWRT. As for WiFi, I restrict my APs to just bridging to my wired network and have implemented strong egress filtering to control outbound access. >I might use pfSense (or maybe OPNsense) router for a startup office of more than several people, though (until we can cost-justify a dedicated IT infra&support specialist). With OpenWrt on the WiFi APs. That's not a bad idea at all. Although you might also consider one or more of the other distros/packages in the Wikipedia link[1] I included in my previous comment. Good luck! [0] https://en.wikipedia.org/wiki/Next_Unit_of_Computing https://en.wikipedia.org/wiki/Next_Unit_of_Computing [1] https://en.wikipedia.org/wiki/List_of_router_and_firewall_distributions https://en.wikipedia.org/wiki/List_of_router_and_firewall_di...
  - neilv 2y ago
    I mean Ethernet NICs. For example, various PCIe quad-port models. (I used industrial NUC PCs as part of factory stations for a startup a few years ago, and they were nice. I looked into NUCs for home routers/firewalls, but I didn't like their NIC options.)
    - nobody9999 2y ago
      >I mean Ethernet NICs. For example, various PCIe quad-port models. My misunderstanding. Apologies. I use something similar to this[0] device, which has 4X2.5Gb ethernet ports and no WiFi (which was my preference) interface. As such, no additional NICs were required, even with a dual ISP configuration. [0] https://www.amazon.com/gp/product/B09J4H9ZXY?ie=UTF8&th=1 https://www.amazon.com/gp/product/B09J4H9ZXY?ie=UTF8&th=1
    - rsync 2y ago
      An aside: I, also, was frustrated by the lack of multi-NIC options on NUC sized computers and was pleased to find this vendor: gmktec.com. Many of their NUC-sized computers have dual physical LAN ports.
  - dfc 2y ago
    No, they meant counterfeit NICs. It has been a problem for a long time now for anyone trying to find a deal on Intel NICs: https://www.servethehome.com/identifying-risky-counterfeit-intel-gigabit-ct-network-adapters/ https://www.servethehome.com/identifying-risky-counterfeit-i...
- SoftTalker 2y ago
  Yeah don't buy this stuff on eBay or Amazon. Buy from a reputable vendor.
  - gessha 2y ago
    Such as? Also, is this new gear or second hand gear? (I’m looking at my stack right now and looking to upgrade)
    - SoftTalker 2y ago
      CDW, B&H Photo, anyplace that doesn't comingle inventory and doesn't allow random sellers on their platform.

neilv 2y ago

One of the things I learned while building such a server-based box is that eBay is awash in counterfeit high-end Intel NICs. Regarding pfSense and OPNsense, I recently built and used a nice OPNsense box, including IPS, but decided to go back to OpenWrt for home use, because OpenWrt actually worked a bit better for the things I needed. I might use pfSense (or maybe OPNsense) router for a startup office of more than several people, though (until we can cost-justify a dedicated IT infra&support specialist). With OpenWrt on the WiFi APs.

nobody9999 2y ago
>One of the things I learned while building such a server-based box is that eBay is awash in counterfeit high-end Intel NICs. Assuming you mean NUCs[0] and not NICs, I'm sure you're correct. That said, there are many other fanless miniPCs which are both less expensive and, as such, much less likely to be counterfeited. >Regarding pfSense and OPNsense, I recently built and used a nice OPNsense box, including IPS, but decided to go back to OpenWrt for home use, because OpenWrt actually worked a bit better for the things I needed. A fair point. The device I use as a router/firewall came pre-installed with OPNSense, which I immediately wiped and replaced with a vanilla Linux install and customised it to my own taste. I mentioned OPN/pfSense not because I use them, but because they offer a fairly complete solution without having strong networking knowledge. Rolling your own is, IMNSHO, definitely superior to those, as well as to OpenWRT. As for WiFi, I restrict my APs to just bridging to my wired network and have implemented strong egress filtering to control outbound access. >I might use pfSense (or maybe OPNsense) router for a startup office of more than several people, though (until we can cost-justify a dedicated IT infra&support specialist). With OpenWrt on the WiFi APs. That's not a bad idea at all. Although you might also consider one or more of the other distros/packages in the Wikipedia link[1] I included in my previous comment. Good luck! [0] https://en.wikipedia.org/wiki/Next_Unit_of_Computing https://en.wikipedia.org/wiki/Next_Unit_of_Computing [1] https://en.wikipedia.org/wiki/List_of_router_and_firewall_distributions https://en.wikipedia.org/wiki/List_of_router_and_firewall_di...
- neilv 2y ago
  I mean Ethernet NICs. For example, various PCIe quad-port models. (I used industrial NUC PCs as part of factory stations for a startup a few years ago, and they were nice. I looked into NUCs for home routers/firewalls, but I didn't like their NIC options.)
  - nobody9999 2y ago
    >I mean Ethernet NICs. For example, various PCIe quad-port models. My misunderstanding. Apologies. I use something similar to this[0] device, which has 4X2.5Gb ethernet ports and no WiFi (which was my preference) interface. As such, no additional NICs were required, even with a dual ISP configuration. [0] https://www.amazon.com/gp/product/B09J4H9ZXY?ie=UTF8&th=1 https://www.amazon.com/gp/product/B09J4H9ZXY?ie=UTF8&th=1
  - rsync 2y ago
    An aside: I, also, was frustrated by the lack of multi-NIC options on NUC sized computers and was pleased to find this vendor: gmktec.com. Many of their NUC-sized computers have dual physical LAN ports.
- dfc 2y ago
  No, they meant counterfeit NICs. It has been a problem for a long time now for anyone trying to find a deal on Intel NICs: https://www.servethehome.com/identifying-risky-counterfeit-intel-gigabit-ct-network-adapters/ https://www.servethehome.com/identifying-risky-counterfeit-i...
SoftTalker 2y ago
Yeah don't buy this stuff on eBay or Amazon. Buy from a reputable vendor.
- gessha 2y ago
  Such as? Also, is this new gear or second hand gear? (I’m looking at my stack right now and looking to upgrade)
  - SoftTalker 2y ago
    CDW, B&H Photo, anyplace that doesn't comingle inventory and doesn't allow random sellers on their platform.