I’m trying to make my first server (Immich + Navidrome + Nextcloud running on Debian, will use WireguardVPN for remote access), but my crappy XFinity router (XB7) just won’t port forward at all to my server machine. I’ve tried so many things to make it work, so the best thing I can do now is buy my own router so that I can just use the Xfinity router as a bridge. Do you guys have recommendations for a secure, customizable enough, and long-distance router good for 6 people?
Used SFF PC: $40
Pcie 10gbe network card: $30
OPNsense: free
Done.
If you want a complete unit with custom hardware and tuned custom software, look at MikroTik. Solid hardware, dependable software, good support, good community.
If you want to build your own, grab any multi-ethernet micropc from aliexpress and install OPNsense. Cheap and flexible. But you’ll be on your own once (not if) something fails.
Both of these are essentially pro-level options with lots of headroom to build up to advanced services. I’d stay away from OpenWRT which is essentially just an open source consumer grade wifi router image. You’d be replacing your crappy (but supported) router with the same thing just without support.
One other option I would mention if you like nice centralized web ui’s, have a look at Ubiquiti’s Unify. If you can afford to go all-in on a Unify router, backbone switch and wifi access points, the combined management is really a step above the competition.I bought a minipc and put OPNsense on it. Its been just over a year now. Very flexible, very easy, and rock solid.
You can get dirt cheap routers on eBay (like $30, for Tp-Link) that have active support on OpenWrt. Great little devices to get you started and if it won’t be enough you will know more / what you need to upgrade.
However if your XB7 isn’t doing / allowing port forwarding, you will still needed that for things to work.
I second the recommendation for TP-Link running OpenWRT (that’s the important part).
I’ve been using a few Archer C7s for going on a decade at this point. (So long that they went from “OpenWRT” to “LEDE” to back to “OpenWRT”, LOL!) They’ve been working fine that whole time, and the only thing that annoys me about them is that they’re a funny shape instead of being rack-mountable.
Beware! Now there’s a hardware revision for a TP-Link router (I think the C7) that is not supported by OpenWrt and never will
we were looking awhile back for one, but none of the tplink models at walmart (the only retailer with routers within 50 miles) supported flashing with a third-party firmware and i didn’t want to shop online for one.
we sorta lucked-out, though… ended up just using the one from our old provider since they never asked for it back or charged us for it. it’s dual band, has wpa3, guest ssid and vlan. enough for us for now. all we had to do is flip a setting from dsl uplink to wan uplink.
keep in mind it may not be your router’s fault you can’t accept incoming connections, you may be behind cgnat. if you are, you need a reverse proxy like cloudflare tunnels
Cloudflare tunnels is more than just a reverse proxy, but agreed. That might be the better option regardless. If you’re Cloudflare-averse, you can use Tailscale funnels, or spin up your own rproxy+tunnel solution (there are plenty out there, such as Rathole, Zrok, or frp).
I am behind cgnat and my fritzbox buildin wireguard allows me to connect to my home network from outside.
I use very popular router by Gl.Inet called Flint 2 (GL-MT6000). Goes on special for about $125 USD. Great specs, solid device.
Fully supported by OpenWRT, and I recommend flashing to that so that you have completely FOSS software with no possibly hijinks from the manufacturer’s OEM OS.
You’ll need to read some guides or watch some vids to get you set up on OpenWRT, bit of a learning curve, but it has everything you could possibly need. Check it out.
I also vouch for GL.inet routers, they also have a 5th gigabit port that was nice to have since all 4 of the ones on my old router were full.
I just bought the Flint 3 and love it so far! Been to lazy/haven’t prioritized flashing it yet but it works great out the box.
Anything that supports OpenWRT I would say…
Or even better buy a mini PC with many net ports and install opnSense, but in this case you will need a separate wifi router and/or dedicated switch since any opnSense device will only work at perimeter level
Or even better buy a mini PC with many net ports and install opnSense, but in this case you will need a separate wifi router and/or dedicated switch since any opnSense device will only work at perimeter level
I went with this option except using pFsense in lieu of OpnSense. My own modem, router, and managed switches.
I like Mikrotik’s stuff.
Same. Moved from OpenWRT through OPNsense to Mikrotik. The performance per watt and per dollar is great.
Me too.
If you’re not wanting to customise too much, the Frtizbox equipment is good.
Plenty headroom for normal use.
However if you have 6 people all streaming 4k netflix and need 1mSec ping for gaming over a 10Gb link, you’ll probably need to build something.
OpenWRT. It’s got a slight learning curve. But if you want something guaranteed to do what you want while still being upgradable. It’s the solution for you. You can find pre-made Hardware that will run it. Or any old business waste computers that you can gut and rebuild any way you like to make a beast of a router if you want.
OpenWRT gets a lot of love around here, incorrectly.
If you are willing to flash custom software to a router you bought for that purpose, you may as well just pick the better option and put pfSense or (better) OPNsense on a mini PC with two Ethernet ports.
The router running OpenWRT will usually be a lot less power hungry than a mini PC, ethernet switch and access point.
I think the added benefit of an OpenWRT router is, you get 3 more ports (for your TV, Playstation and PC), plus a Wifi network. And it’s really hard to break it. But a MiniPC with OPNsense, of course will be more powerful. And some more advanced things have been notoriously difficult to set up in OpenWRT, maybe OPNsense does it a bit better.
if you have an uplink of 1 Gbit/s or less, you can easily solve the problem of ports by purchasing a switch for $3. By the way, there is a mini PC with 4/6/8 ports and even with optical fiber.
and in general, if topic starter build own server, he can just build a router out of it too. the set of programs is not very large: kea-dhcp, radvd, iptables. that’s all. for WiFi, you will need a compatible card in the server or a separate access point like ubiquity.
