I’m partial to mikrotik gear, the CRS305 has 4 sfp+ ports for around $150.
I’m partial to mikrotik gear, the CRS305 has 4 sfp+ ports for around $150.
If you’re looking for a more mature networking setup, I would definitely recommend splitting up your router, switch and AP duties into separate devices. It gives you the most flexibility for when you want to tinker or change things.
For a main router setup, I would recommend OpnSense. It’s has a cloud backup feature which allows you to automatically backup the configuration to a Google Drive xml file whenever it is changed.
The XML config file stores all your leases so you don’t have to worry about reassigning DHCP reservations. If you load the config onto a new system, like for an upgrade or if the router hardware fails, usually you just have to change the interface mappings and you’re good to go.
As far as APs/switches, I would recommend Unifi or Mikrotik. Unifi has a fancy dashboard you can use to adopt new equipment and restore/change configs from, but I find Mikrotik easier and simpler to backup and I like that i dont have to host a controller to make config changes.
I do something similar with opnsense and policy based routing. opnsense is acting as both a VPN client and server. The client interface connects out to a commercial VPN, and the server interface listens for incoming connections. Based on what I I want to accomplish I setup firewall rules that use policy based routing to route incoming VPN traffic where it needs to go.
Regarding split tunnel on the client, the Android wireguard app has the option to specify what traffic uses the tunnel based on the application
Is the NIC built into the motherboard or an add on pcie card?
You could check the journal to see if the logs tell you anything.
You could try taking some packet captures from opnsense and your server while accessing your externally available web server. Reviewing the pcaps might give you some hints on how fix it based on what behaviour you see in the captures.
Once you change your DNS server in your router, make sure to renew your clients DHCP lease. It may still be using the stale DNS server. On windows verify its using the new DNS server with: ipconfig /all
No issues jumping straight from 37 server edition to 40.
This website has a bunch of great practice “wargames”. You’ll learn a bunch about common linux commands and the different options for them. It also provides you with some great tips on what to google if you get stuck. I reccomend starting with bandit.
+1 for openscad. I switched over from Fusion 360 back when autodesk changed the personal use license in 2020.
It takes a bit to get used to it, but once you’ve made a few parts you begin to see how powerful it can really be.
Its also super lightweight, so you can run it on most systems without any issues. I’ve ran in on a chromebook before.
The only thing I miss about fusion 360 is an easy way to add fillets to parts, that can be tricky in openscad. I use chamfers for the most part though, so I don’t miss it much.
I get quite a few reccomend actions from the sci-fi/fantasy rss feeds I’m subscribed to. I also get some from suggestions on lemmy.
If you use Firefox, the reader view works great when you want to look at just the article and nothing else.
I do this same thing. I have Ubuntu on an external ssd with its own EFI partition. I followed this guide to get it setup and it works great.
A custom router + managed switch is a great way to learn. Studying the fundamentals is also good, but in my opinion it’s not as fun as setting up your own network and learning hands-on.
If you decide to go this route I highly reccomend taking regular backups of your config (and backup again before you change stuff). Part of learning involves breaking things - trust me you will break your network - and in networking that’s one of the best ways to learn. Backups will give you an easy way to restore to a known working configuration.
deleted by creator
Yes. A unifi ap connects all my wireless devices to my LAN
Yes its my main router. Everything comes into the laptop across one interface setup as a trunk that includes vlans for WAN, LAN, etc. From there proxmox has a vlan aware linux bridge setup that connects to all the VMs/containers that I run. The VM virtual interfaces get tagged with whatever network I want the host to be part of.
I have a laptop motherboard setup with proxmox running:
This is running on an i5-1135 with 40gigs of memory. If your frugal about how you have stuff setup you can pack alot of services into old laptops.
If your VPS can connect to your home router as a client it sounds like your wireguard server on opnsense is working correctly.
Might be a problem with your phones WG config. Have you tried taking the client .conf file from your VPS and loading it onto your phone to test a working config file?
Yes, looks like that is the official name for it. Thanks.
If you set a static ip can you get connectivity? Have you confirmed that your interface is still up via Ifconfig or ip link?