Next time on LTT: build your own ISP

@wilfredohernandez71

Жыл бұрын

Sooooooo...when is this going to happen???? lol

@Mr.Morden

Жыл бұрын

Next-next time on LTT: Selling internet service to your neighbors.

@TheMikkelet

Жыл бұрын

Yes please 😩

@TheFirstWaffles

Жыл бұрын

@@ravanjock Next next next time on LTT: build your own power plant

@dancomando

Жыл бұрын

Launch your own starlink

we want an entire definitive series about network, switches, router, access points, servers, racks, everything. Kinda like the "How to build a Network, the last guide you'll ever need!"

@LMojzis

Жыл бұрын

Who is we?

@MasterLemon98

Жыл бұрын

@@LMojzis at least everyone who liked this comment

@earthling_parth

Жыл бұрын

Yes, please

@Wrenchmonkey1

Жыл бұрын

"The last guide you'll ever need."* *It will be outdated in 6 months.

@Wrenchmonkey1

Жыл бұрын

As far as consumer-grade junk, yeah, not much has changed. Unbox it, plug it in, type in the passphrase printed on the bottom, and you're off to the races. Networking in Enterprise has changed a LOT, and has trickled down into high-end consumer/prosumer/business. Layer 3 switches, VLANs, 2.5G/5G/10G/20G/40G LAN, SDN (software defined routers and firewalls), etc, etc.

I would love to see one of these concepts built out of a rack-mount server. You can get fairly cheap 1U multiport switches that run at guaranteed gigabit speeds, and racks make everything tidier.

@goliard20

Жыл бұрын

i have 5k worth in hardware in my rack, but those e300 are so adorable :D

@YerBrwnDogAteMyRabit

Жыл бұрын

Why tho? Sounds like a recipe for way higher electricity bills and a bunch of extra noise. I put win XP on an old G4 (w/ an array cause idiocy) tryna be cool and wanted to kill myself. It was like there was a frikkin Harrier jump jet landing constantly, even after I pulled the array.

@jamegumb7298

Жыл бұрын

​@@YerBrwnDogAteMyRabit I got my gaming rig in a 2U. Because 1U was an issue with most motherboards being 1.3U. It is not that loud if you know what you are doing. In fact when not under high load it is very quiet. A Soekris 65 or PcEngines apu would fit the bill, and 1U.

@YerBrwnDogAteMyRabit

11 ай бұрын

@@jamegumb7298 Well (please forgive the late reply) that XP situation was def an experiment fo sho, but I'm sure if you used non- DC type hardware, you could put something a lot more energy efficient and quiet together. I'd imagine aesthetics-wise you could make it look good too.

@jamegumb7298

11 ай бұрын

@@YerBrwnDogAteMyRabit Any DC hardware would fit in 1U, I used 2U because it is a standard B650 mobo (those damn shields make it 1.3U, a barebones mobo might just fit but they are bottom bitch tier like A520 or A620 and lacked some stuff I wanted) with 5600X (Maybe 7600/7700 soon if I can be bothered to take it apart). I suspect most would call it quiet, you just hear the exhaust start to blow under max load and it annoys me but the case is just tight. I do have surround sound with 8 inch woofers backed by compression drivers so this usually is not an issue. This is why I want to design my own 1.5U, put a large radiator in 2×120 or 2×140 (tilted, windtunnel, convection or ultra slim fans), better layout, I already designed the dual pump-res combo. I would have ordered it already but Protocase is not exactly cheap, 1st time has to be right. I got a Xeon 4114 in a 1U case (runs BSD). That runs even quiter because I used a rather deep 44mm radiator (not easy yto get tho).

As a tech director for a school district, I had the lucky privilege of our big name firewall/router dying on a Friday afternoon. There was no way I was getting a replacement before Monday morning when staff and students arrived. pfSense saved the day with old on hand hardware, and haven’t gone back since. I easily built a cold spare for “just-in-case” purposes.

@CDNKEEFTV

Жыл бұрын

bruh i thought there was a random fly on my monitor cuz of your pfp .i was like damn middle of winter and i got a fly in here wtf lol

@jesuislejoseph

Жыл бұрын

Wish I had this privilege, our router doesn’t want to die😖😖😡😡

@KiraSlith

Жыл бұрын

Sounds like you ran into the old engineer's adage. There's nothing more permanent than a temporary fix. Glad it worked out for you in this case. :)

@Xphinity

9 ай бұрын

@@CDNKEEFTV Caught me too lol

@ElliottVeares

3 ай бұрын

Should have had a clustered firewall for resiliency.

What always puzzled me is that every provider says how much they care about their customer. But no one delivers a good router out of the box.

@SyntheticFuture

Жыл бұрын

In the Netherlands there are options 👀

@whoathatcombo

Жыл бұрын

Since I use Starlink I don’t think I can get or upgrade the router

@LockonKubi

Жыл бұрын

John Oliver has a web segment about cable boxes, I'm sure the same applies; lack of competition so lack desire to do anything on the ISP's side.

@JoebDragon

Жыл бұрын

lot's of them FORCE YOU TO USE there router

@anassbougazzoul5405

Жыл бұрын

@@whoathatcombo hey do you have a stable ping while gaming with starlink ?

I did this years ago before the age of cheap home routers. Loaded RH Linux and used the Router HowTo to set up the SW. It worked great for years but, honestly, better options came along and were actually cheaper. You can do tons of stuff with a PC based router, but most of us don't really need that.

@ericbsmith42

Жыл бұрын

I did the same thing circa 2001 using a Wondows Box and Internet Connection Sharing. However, these days a good all-in-one Router is just simpler and far more power efficient for most users.

@tylersanders2388

Жыл бұрын

This is the same thing I found. Tp link and ubiquiti both have great routers that are as good and more efficient for less money than anything I could put together

@CreativityNull

Жыл бұрын

@@ericbsmith42TL;DR buy a Microtik hex lite for $40, get a switch if necessary, and get a used ubiquiti access point (or some other WAP) and you might be better off for about the same price as a "good" combo router. I would agree if I haven't had hardware problems on nearly every single one I've had, even the ones I've gotten back from RMA. It honestly made me give up and put Pfsense on my home server and install an Intel i210 on it. My main problems were that something would fail or be unreliable (wifi sometimes, Ethernet switch other times. This is on about 5 routers that I purchased myself in the last 6 years) and their support for getting a replacement would be completely useless. Had to wait over 2 months for a replacement on one, and 3 weeks was the fastest. I went and bought a used backup router (which had an unreliable Ethernet switch) for $20 and used that while I waited for Netgear or Linksys to get me a replacement. I'm not a normal user, a normal user would be without internet for weeks because of the poor service and it is NOT okay. Honestly I think a better solution than this video is to buy a cheap mikrotik router rather than what I did, but I did mine to learn things too. RouterOS is a little daunting, but not as bad as Pfsense.

@_invencible_

Жыл бұрын

i just need an internet connection that doesn't get disconnected every 5 minutes 😭

@James_Knott

Жыл бұрын

With mine, I have my main LAN, VLAN for guest WiFi, test LAN and a connection to a Cisco router. I have both IPv4 and IPv6, NTP server connected to stratum 1 servers and more.

really appreciate including the idle wattage and providing power efficient alternatives. Hoping to see power efficiency become a more common talking point in future videos

@sas408

Ай бұрын

There’s devices named "Soft Routers" actually optimised to be a router. Its power consumption is lower, usually look like a Mini PC and you can install any os like RouterOS/OpenWRT/OpenSense etc

Mikrotik has some decent 10gbe options too. Also, remember there are the low power / S / T (like the 4770 is an 84w TDP, the 4770S is 65w, and the 4770T is 45w TDP) type intel chips for some of these machines that have a lower base clock with the same boost, they will save some extra power when idle.

@samuellourenco1050

Жыл бұрын

The switches from that brand are crap, though. We have one in the office, and the connections are always being interrupted. And, despite being a 10 Gb switch, speeds from computer to computer are significantly lower.

@NightWolfx03

Жыл бұрын

@@samuellourenco1050 The ones I am running are working a treat so far. Though for 10gbe I am running fiber or DAC cables.

@MrGivmedew

Жыл бұрын

I have a feeling you have no knowledge of routerOS, didn’t switch to switchOS (not necessary), and didn’t troubleshoot on the forum. I had the same problems as you did. But I knew that wasn’t an acceptable scenario from such a highly regarded company and I knew I didn’t know my way around routerOS. So I did some research. Yeh turns out you need to mess with some of the settings. If you are going to leave the switch running on routerOS then you need to turn off auto negotiate and manually set your speeds. Is it as easy to setup as an arista layer 2 set to DHCP? No way but those where $5000-10,000 switches when they first came out. If that’s what you want you can get them cheap I sold my 16 port SFP+ unit for just under $1000 and went out and bought a 4 ports SFP+ plus 1 1G switch for $150 from MikroTik and I’m very happy with it. You just need to read and troubleshoot.

@MrGivmedew

Жыл бұрын

If you ever stick a wired ethernet transceiver in you need to go into settings and turn off auto negotiate especially if it isn’t the MikroTik branded transceiver. In fact if it isn’t the MikroTik transceiver your lucky if it works at all if you left auto-negotiate set to on.

@brahimbelmouhand9888

10 ай бұрын

MikroTik switches and routers are basically experimental-only, they're not that strong for daily usage and have a lower security level. You can always upgrade it through software etc but yeah

Please, if you make a video like this in the future... show viewers how they can setup separated networks (VLAN) for their network. For example having all IoT or "smart" devices on their own separated network? One of the basic security precautions one would take by setting up a router this way!

@emptystreets130

Жыл бұрын

Setting up vlans in PFsense or opnsense is simple but it's configuring the switch and tagging/untagging the ports that is going to get most users. Not all switches are the same.

@raknikmik

Жыл бұрын

This isn’t necessary for homekit right?

@bdd7881

Жыл бұрын

@@raknikmik it all depends on how much you want to do and your threat model. But yes, if you're separating IoT devices, homekit should be as well. 1) so it can talk to LAN IoT devices easier 2) it talks to IoT devices A LOT 3) it's still an IoT device

@Ruboka

Жыл бұрын

Oh I am definitely interestet in vlans, but I just can not get to set it up.... Someday maybe.

@soxfansince97

Жыл бұрын

This is a cool suggestion. As an owner of about 10 "smart" appliances, what kinds of vulnerabilities can be prevented by putting them on a separate network?

An important note on 10gb nics: The x540-t2 NIC recommended here doesn't support 2.5gb or 5gb links. It appears most ISPs offering faster than gigabit are using 5gb links from their router/modem so you need a NIC that supports that. The recommendation for a while has been x550-t2 based cards but those have almost doubled in price in the last year.

@killerb255

Жыл бұрын

Great catch! Any 10GBaseT NIC manufactured before NBaseT became a thing won't support 2.5gb or 5gb, as 10GBaseT (802.3an) and NBaseT (802.3bz) are two different 802.x standards. Considering that the x540-t2 NIC was manufactured in 2012, that's definitely an 802.3an NIC. From my understanding, and I could be wrong: - 802.3an can always negotiate 100Mbps, 1Gbps, and 10Gbps. Sometimes it can do 10Mbps depending on the manufacturer/chipset/drivers/etc. 802.3an CANNOT do 2.5Gbps or 5Gbps. - 802.3bz can always negotiate 100Mbps and 1Gbps. I don't know if it can do 10Mbps--never tried. From there, it's a matter of whether or not the port is capable of 2.5Gbps, 5Gbps, or 10Gbps, and the higher speed ports can support the "next increment" down. So a 10Gbps bz port can support 5Gbps and 2.5Gbps. Likewise, a 5Gbps port can support 2.5Gbps (but NOT 10Gbps). Connecting a 'bz' device to an 'an' port (or vice versa) can have various results: - 10Gbps 'bz' to 10Gbps 'an': Negotiates 10Gbps. - 10Gbps 'bz' to 5Gbps 'bz': Negotiates 5Gbps. - 10Gbps 'bz' to 2.5Gbps 'bz': Negotiates 2.5Gbps. - 10Gbps 'bz' to any speed port lower than the above: Negotiates the lower speed (although 10Mbps may not even work). - 10Gbps 'an' to any 'bz' port (5Gbps or 2.5Gbps): Negotiates 1Gbps (that's the highest common speed both ends have in common). - 10Gbps 'an' to any lower speed port: Negotiates the lower speed (although 10Mbps may not even work). For sake of completion: - 5Gbps 'bz' to 5Gbps 'bz': Negotiates 5Gbps - 5Gbps 'bz' to 2.5Gbps 'bz': Negotiates 2.5Gbps - 5Gbps 'bz' to any lower speed port: Negotiates the lower speed (but I'm having doubts about 10Mbps even working at all) - 2.5Gbps 'bz' to 2.5Gbps 'bz': Negotiates 2.5Gbps - 2.5Gbps 'bz' to any lower speed port: Negotiates the lower speed (but I'm having doubts about 10Mbps even working at all)

@joepaige196

Жыл бұрын

My x550-t2 works great, but it's speed is listed as "unknown" within pfsense. Otherwise it works great, even at 2.5gbe. Also note, you can get the fiber versions of these cards and use a transceiver to convert the fiber connection into 10gbe Ethernet.

@QualityDoggo

Жыл бұрын

also, imho, once you're at more than a couple 10GbE links you really should be running dedicated enterprise/enthusiast style gear and layouts. a "core switch" with proper hardware-acceleration is like magic; at L2 even a cheaper switch can have eye-watering backplane speeds with VLANs and more and ASICs can use shockingly minimal power. I'd wait for at least a few more major-generational-improvements before it makes sense to process it in software. having said that, software is a great place for a couple more complex VLAN or Firewall tricks even at L2... just make sure you have the performance and check power consumption

@scj643

Жыл бұрын

You could get an Intel 2.5 gigabit card

I would highly recommend selecting ZFS, not UFS. A simple power outage easily causes filesystem corruption on UFS. The increase in memory usage of ZFS is 100% worth the reliability.

@neilbradley

Жыл бұрын

Not if UFS has journaling turned on.

@jeremyokeeffe3315

Жыл бұрын

@@neilbradley yes, but we are choosing between the 2 preset settings

@neilbradley

Жыл бұрын

@@jeremyokeeffe3315 FreeBSD has had journaling on as default since something like 11.0, so unless you're running an ancient version of pfSense, you'll get journaling for free. I just checked my pfSense router (2.6.0) and journaling is on, and I used the installed and selected UFS, so it would suggest journaling is the default. Also, ZFS has CVEs all the time, too, one recent one that resulted in a bad filesystem corruption (free block related IIRC). In the past (like 10+ years ago), UFS did have issues with journaling and potential FS corruption. I've run and maintained many FreeBSD servers running 24/7, all with journaling, and a few that kernel panic'd because of bad hardware and one with an accidental power outage (tech pulled the wrong power cable) and no data lost. It sounds like IT folklore that's no longer true.

@Elmojomo

3 ай бұрын

Power outage? You're running a quality UPS on your router, right? RIGHT?!

@jeremyokeeffe3315

3 ай бұрын

@@Elmojomo I am, but you can't always control what your customers do.

Great intro video for this concept. Increasing network knowledge is better for everyone and helps prevent all sorts of shenanigans that ISPs pull because they assume people don't understand and will use the defaults.

Really appreciate you putting the idle wattage in at the end. Fancy doing a "DIY NAS vs dedicated" video looking at power consumption vs outlay/expandability too? Bonus points for talking about whether shutting a NAS down overnight to save power is going to result in b0rked harddrives

@BikeHelmetMk2

Жыл бұрын

Power consumption is pretty big. I tend to keep my devices 5+ years. I ended up going with ASUS RT-AX/AC gaming routers with fast processors (researched on Wikipedia), TP-Link WiFi 5 APs for like $60 a piece, and some off the shelf TP-Link smart switches for $30-40. I modded the router's firmware, unlocked a ton of capabilities, had fun tuning it for weeks (I have 1ms jitter under load. Tuned Merlin FlexQOS is nuts.), and got a super reliable setup that is very power efficient and covers a huge home - for like $340 in cash outlay. It's more power efficient than an old PC router, and some of those costs would've been incurred anyway. I should come out well ahead in under 5 years. Internet equipment runs 24/7, so 5 or 10 watts adds up, and 35 watts certainly adds up fast! 0.8kwh/day in savings. My NAS is Synology and is more efficient than having a PC running all the time, plus the web apps are pretty skookum.

@JamesScholesUK

Жыл бұрын

@@BikeHelmetMk2 yeah, my media server is pulling 145W at idle, so 1kWh a night while doing basically nothing, but I'm concerned that spinning up and down the drives would drastically shorten their lifespan. It's really difficult to weigh up a couple of £ a month vs potentially £200 for an early drive failure

@BikeHelmetMk2

Жыл бұрын

@@JamesScholesUK That is a tough one. I guess it depends on things like warranty duration... whether you'd chance it. For a bunch of 18TB drives, you would care less about the power consumption than the wear and tear. My NAS consumes around 18 watts. Much more acceptable. I got it on a Prime day sale, so very reasonable price.

@WitchMedusa

Жыл бұрын

A FIY NAS will be so much of a better bang for your buck that power usage isn't a factor, especially since the majority of the power will be consumed by the hard drives.

@WitchMedusa

Жыл бұрын

35 watt usage is only $30.66 a year at 10 cents a kilowatt. Personally I have PfSense (VPN) > OpenWRT router, gotta have that privacy game going

As a German, I am pretty proud that they decided to use the German power price as an example for expensive power 😂

@rightwingsafetysquad9872

Жыл бұрын

I'll be praying for y'all when I set my cheap gas furnace to a cozy 71F this winter. Actually our gas prices up a lot too this year, even if it isn't nearly as bad as for y'all. So I'll be praying for you in my crisp 67F home. R

@zee-fr5kw

Жыл бұрын

LIKE WTF. ELECTRICITY IS 4X MORE EXPENSIVE THEN WHERE I LIVE. I would feel bad but you guys where the ones pushing "renewable energy" soo you reap what you sow

@defaultkoala2922

Жыл бұрын

@@rightwingsafetysquad9872 I like living in an apartment surrounded by other apartments with poor insulation. I get no natural light but I only turn my heat on every few months to clear out the dust to avoid fire.

@joebot86

Жыл бұрын

@@defaultkoala2922 now that's thinking inside the box =)

@Bad7Seal

Жыл бұрын

@Default Koala 👍 Yep, my neighbours are heating my appartment for me. Ever since my landlord renovated the building with top of the line insulation on the outside and leaving everythin inside the building as is (pretty common in Germany) I'm practically not turning on the heat at all. @joebot86 😂😂😂

I would definitely use a Protectli vault if you are going down this route. Unless you need fibre networking, then you would be talking spf cards in a poweredge server. Also, as for opensense vs pfsense, opensense uses hardenedBSD, which is a bit better in terms of security. As for serial, it is generally used for embedded devices or devices with no video output for anyone wondering. (An example would be cisco routers)

I’ve always wanted to do this just to do it. There have been so many times I’ll randomly come across a board with insane amounts of ethernet connectivity built in, and that or a switch is the first thing that comes to mind. There’s just something about knowing you have the fastest router possible.

I would really love a separate channel dedicated to home projects that have to do with tech. I would love to get into 3d printing but find it hard to spend the money needed to get a decent long term setup. The main reason being there aren't that many youtubers focusing on 3d printing tips/upgrades. As well as full comprehensive guides from unboxing to complete setup with upgrade instillation. Its also a credibility thing, I trust you guys to do the proper research and validate necessity for upgrade parts Etc. I'm also very into SDR stuff and although it is a bit more of a niche topic it has plenty of really interesting content to be had and frankly if you guys stuck your heads in the space it might breath new life into some of the currently available SDR software as some of it is pretty outdated/doesn't have regular updates. I'm sure there's other hobby areas that you could explore. Maybe you could start it as a once a month video where a few people from LMG get together and explore some of their hobbies in a more channel super fun format instead of the more professional LTT format. Or start them out as written guides and transfer them to video guides after you gauge popularity.

@Bruce1Parsons

Жыл бұрын

They say the best way to get rich is to make people's problems go away. If you say there is a need for a comprehensive 3d printing setup, testing, and upgrading. Spend 20$ a week saving up and 5 hours a week learning or filming about how they work and make a channel for yourself and the people who share your interests. And maybe one day you can either work with LTT or even have your own group of people who's eccentric interests you want to highlight. My favorite part of LTT is the use and support of not going overboard unless you truly need it. It started with one person.

@Bad7Seal

Жыл бұрын

I actually love that they use the main LTT channel for stuff like this. That way it gets way more exposure for non techy people like me who the dive into niche topics like this in their free time. Just a thought.

@urmomsahoe1

Жыл бұрын

@@Bad7Seal Maybe feature it on LTT and then move it to a separate channel for long term videos. I know LTT will do something about a topic but only surface level information not really a how to video.

@urmomsahoe1

Жыл бұрын

@@Bruce1Parsons I'm not into the idea of KZread. Its just not something that interests me. Besides the point of LMG doing it is because they can get the views and they're already setup for it. It just makes sense. Especially with the new labs and all the new engineers being hired they could actually do really good DIY stuff for different hobbies.

@LeitvenRQ

Жыл бұрын

For 3D printer channels: CHEP, Teaching Tech, Maker's Muse, Thomas Sanladerer

Advanced mode: Install pfsense on an intel nuc, then use vlans to separate wan and lan. its a LOT easier to have one interface for wan and one interface for lan, but its totally possible to build a router with a single nic.

@LockonKubi

Жыл бұрын

some NUC-alikes have dual nics too. also Globalscale makes some embedded multi-NIC devices.

@snowyowlll

Жыл бұрын

best part about using pfsense is when your router gets hacked and your ip gets banned for being part of a bot net

@konzo5942

Жыл бұрын

@@snowyowlll best part of being a Muppet and misconfiguring it in some massive way

@Norweeg

Жыл бұрын

No need for different physical interfaces on a router. Connect it to a switch on a trunk port and go from there.

@jandorniak6473

Жыл бұрын

Check out videos by ServeTheHome. If you don't mind Chinese stuff, you can get a 200-300$ Atom/Celeron/Pentium box with up to six 2.5G NICs.

This was very interesting for me because I have very little knowledge on the subject. How ever a comparison vs an off the shelf ISP supplied modem would of been interesting to see the cost/benefit of building your own.

11:18 😂 omfg, YOU KILLED ME with that family photo. Like I can legit die happy right now because of how hard that hit my funny bone. Laughter aside, KUDOS! This was an amazing project. Even though I’m deep in the UniFi ecosystem, I thoroughly enjoyed this and would still love to try this build someday.

I would LOVE another separate video on this topic; maybe something like the live builds Linus does on occasion so we can follow/build along. I'm done and over with the internet issues we keep having and I myself would love something like that to help in the short term while I am learning/improving similar ideas for the future

@deviildogg1

Жыл бұрын

What are your exact pain points with your current setup? Personally, I feel like a decent router/ap unit will work for 99% of home users. Personally I use the Asus RT-AX82U (about $230) and that is enough to cover my entire 1600sq ft home plus back yard and front yard. I do have the device roughly in the center of my house. The Asus routers have an easy to use management UI and are extremely easy to set up. They are also loaded with semi advanced features as well that are pretty easy to use and configure (QOS, port forwarding, DDNS, Mac filter, wifi mesh, VPN client, parental features, etc.). There is also an app for mobile that makes management even simpler. I had a dyi router at one point using a Dell optiplex 7060 w/ i7-8700T 32GB ram + Netgear 802.11ac access point...which the dell was over kill I know. I had 4 of them as part of my home lab and pulled one to build a "better router". I honestly didn't get any noticable gain over the an older Asus ac router I had. When it came time to upgrade to 802.11ax I just bout the Asus I mentioned and the Dell rejoined my lab.

I still think it's not for most people unless they know what they are doing (considering half of my friends don't even know what is WAN and LAN) but I love this kind of tutorial video and have been using pfsense on a mini server for the last 5 6 years super stable and with way more features than the ISP router (VPN, DDNS, traffic monitoring, comprehensive firewall rule, and more).

@j.ballsdeep420

Жыл бұрын

If you don't know WAN v LAN you're not even watching this, or: A: Checked out within anywhere from 15sec (or 0.25min) into the video or atmost 420s (7min) just staring at the screen B: You thought doing it cheap versus a $400 mid-to-top tier consumer router was too much and there had to be a way to DIY, five minutes in already checking out on the $350 router and paying $50 for install to match that $400 including the cost value of doing nothing C: Ask their friend/friend-zone friend/family member/tech friendly colleague to do it after a variable amount of probing and driving towards asking for help while doing your best to avoid directly asking for help

@TheFeriner

Жыл бұрын

I think I'm a great example of the target, I was a young soon-to-be computer scientist, and videos like these expedite the process of finding all these cool ways to set up the tech around me, and give me a good foundation of information for learning further things. That being said, I think LTT's target has never been the absolute laymen, but it's great when everyone has even a passive interest in this kind of stuff :)

@maxieboy

Жыл бұрын

That’s because, contrary to popular belief, pfsense is a firewall.

Their sponsor ads are longer then their tutorial.

I put my serial connector away a few years ago, but i still love this type of video. Thanks!

I switched off dedicated routers and built a pfsense box with a separate AP a long time ago and never looked back. Not only is it feature rich, but there's a huge benefit to being able to reset the wireless AP without killing the internet entirely. You also can do fun stuff like use VLANs and easily separate out your wireless traffic or guest network.

@andrew_koala2974

Жыл бұрын

When referring to switching it is ON OFF {ALL CAPS} and not on off on / off is used in an entirely different context 1. You failed to read and educate yourself 2. Your third-world education system failed you and lied to you and programmed you to become a ZOMBIE. YOU FAILED TO REALIZE IT. Check what is written on switches and pay attention to detail. Make sure you see exactly what it is you are L00KING at

@mitcHELLOworld

Жыл бұрын

did you have to do any extra configuration for your WAN cable to connect into PFsense and just start working, or did you have to get additional settings info from your ISP and coordinate?

@TheRjee

Жыл бұрын

@@mitcHELLOworld I did have to make the wan vlam aware and tag a specific vlan

@0hleg

Жыл бұрын

So is this better than say a wifi 6 asus router for 700$?

@TheMrZ100

Жыл бұрын

Honestly the price of an Edgerouter and ease of use IMO makes it better than building a PFsense box but that's just my opinion. Though I did not do to much advanced stuff my fav part was how magical the Smart Queue setting was, I could download a steam game without lagging anybody else on the network at nearly full speeds.

Rocking opnsense for years now and glad you guys used it as well. I am also routing all my traffic through a VPN, blocked IoT devices from phoning home and rerouting all DNS requests to a pihole. Maybe do a follow up on this because there are great ways to DIY your home with stuff like that.

@WitchMedusa

Жыл бұрын

That would be an amazing video, I do something similar with PfSense but don't have any IoT devices. My smart tv is an old laptop running linux with a bluetooth keyboard & mouse, also an xbox controller for retro game emulators. Out of curiosity what VPN provider are you using? I am with IVPN just cause they seem the most privacy respecting but Mullvad seems pretty good too.

@kenhuffmanjr9919

Жыл бұрын

Some SD-WAN would be great too!

@sushimshah2896

Жыл бұрын

They already did a video on Pihole

Nice video. One thing. The speed test. Often it is more useful to measure PPS (packets per second). High PPS, that's what the gamer needs. Although speed test is also important.

That takes me back! Had one made with 1.44 MB disk using FLI4L. Later upgraded to 16 MB with a compact flash cards plugged into CF to IDE adapter.

Love that you took electricity prices into account! Prices are insane here in Europe. The energy consumption of my ISP router-combo-thing was for me a reason to replace it by something better and more energy efficient.

@giacomosmiderle9717

Жыл бұрын

yea it's terrible

@Coolguy992

Жыл бұрын

War prices.

@hailgod1

Жыл бұрын

no fucking way thats true, combo units are passively cooled and run under 10 watts.

@Dudinify

Жыл бұрын

@@hailgod1 yeah AVM Fritz!Box 7490 takes 8-11 Watts on average and 22 Watts max.

@oldtechnobodycaresabout

Жыл бұрын

@@Dudinify I have a Fritz box 7530?

Very cool to get this LTT scrapyard build after Wendell's Diy router video. I like the ecosystem of off the shelf products that help fill out the build. The MicroPC mentioned at the end is quite intriguing. I feel allot of people upgrading to the 5800x3d are going to have spare processors to use in projects like this. The debate of whether to use a spare processor for a dedicated stream-capture device, router, server, NAS, etc. could benefit from it's own guide, I imagine LTT could make a decision-tree about the optimal use cases of different generations and tiers of cpus. I love that the Optiplex has a 5.25" drive bay. Next time around you guys should Ball-out with a blinging 5.25" fan-controller/temperature-monitor from last decade.

@lostintechnology1851

Жыл бұрын

A powerhungry desktop plattform for router is kind of overkill. If you are building a server thats going to be on 24/7 anyway install some router OS in a VM and use a dedicated switch so you can utilize that hardware instead of 24/7 running a desktop at 5% load.

As of Nov 11 in USA, TP-Link TL-SX3008F is ~$260 for a 10G all-fiber managed switch. If your DIY router have optical 10Gbps ports (that is, if you are using cheap second-hand server network cards, for example the Mellanox CX311A,) consider this over the 10G copper options. Fiber also permits longer runs.

for those planning to go with this, just stick with the 4th gen or later sff pc and get the power consumption under 10-15watts (10watts while idling and under 15 watts during 1gbit NAT traffic) though this is just for the sff pc alone, adding a switch and 3 mesh wifi kit usually gets this power consumption around upto 25watts overall.

@123dodo4

6 ай бұрын

Can 2nd gen intel cpu work? Im thinking of i5 2400 to i7 2600

@mudit1

6 ай бұрын

​@@123dodo4na it's less efficient, there are dirt cheap 6th gens out there they should work fine

@united1super544

4 ай бұрын

@@mudit1I wonder, would a laptop work with PF sense. because I’m thinking, I have a laptop with a i5-1035g1, 8GB of ram and a 256 GB ssd. Laptops are also power efficient as well, so I’m just wondering what you think

This is actually what got me intrested in Networking as a hobby. I have been running pfSense for years now, recently during work from home I got another Internet connection from another ISP and have been running 2 WANs in Failover. Edit: I was introduced to pfSense (and Unraid) by LTT!

@mitcHELLOworld

Жыл бұрын

you should try to configure some sort of aggregation to achieve higher internet speeds.

@shreyasdharashivkar8027

Жыл бұрын

@@mitcHELLOworld Not in South East Asia

After getting really frustrated about ISP router and its wifi I purchased from ebay a old juniper srx firewall with 16x1Gbit ports and a decent refurbished wifi router. It costed me total 100 bucks with the shipping. Set the wifi to AP and all is really nice. Only issue was that at that pricepoint the firewall doesnt have PoE so I need to use separate swich for the cameras. Oh yeah and the another issue I had was that the firewall needed a console cable.

Also, if you used a reasonably modern, non-mini PC for the router, and you have the know-how, you can virtualize the rig and make it do more than just the router. One of the VMs would be the router, and you can have other tasks like NAS, game server, even your blog hosted on the single box.

@r.r.n8998

Жыл бұрын

Does recently modern include those dell optiplexes?

@amirlator

Жыл бұрын

Do you know any guid to how to do this ? I want host my opnsense router on my main pc on a VM and get that router to my pc internet

Thank you for including the chapter about power usage. This was sorely missing from previous videos, for example homemade NAS.

This is a great idea one thing to note is alot of older machines are lower power usage but you are still using alot more power for a desktop than a router.

@TheNpcNoob

Жыл бұрын

If you combine & virtualise it, it can actually make sense power wise (eg; router, NAS, Print sever, VPN, pihole etc)

@RineyCat

Жыл бұрын

@@TheNpcNoob I was gonna say, a router/NAS combo alone feels like this would make the power cost worth it. Adding additional things such as a printer location really does seal the deal though.

@TheNpcNoob

Жыл бұрын

@@RineyCat exactly and say you had a server running 24/7 for projects and/or labs then the above running in their own dockers only adds to the value prospect.

@final0after0image

Жыл бұрын

@@TheNpcNoob Agreed but that's assuming you already using those things. Most users typically will have a 10watt router from their ISP. So for the average user let's say typicall older desktop maybe will draw 200w with the ap aswell that's a substantial increase during some of the peak power pricing. I'm from the UK and alot of lower income family's are worried about heating their homes. So for anyone seeing the video the jump to high power consumption is worth the note. Probably would be a great video for LTT how to get the most with the least power budget.

@TheNpcNoob

Жыл бұрын

@@final0after0image Being from the UK too, I completely agree.

somehow I feel like German authorities would not appreciate me doing this, so I know what my next project is

Very cool video. I'm running a similar setup with a micro pc. The cool stuff is that you can really set up everything including vlans, reverse proxies, etc. Of course it's not as easy to use as some of the unifi devices, but on the other side you have endless ways to configure (if you know how to or find at least the right videos)

I remember building my first router firewall in the late 90s with a pair of 3c509bc and a compaq deskpro with a 150mhz pentium Pro. Great to see this video, the configuration has got much more straightforward

@WhiteG60

Жыл бұрын

3c509s were the BOMB back in the 90's. They were the default ethernet card in everything i had.

Everytime I think of a project I want to take on, LTT comes out with a video exactly on the topic like if they read my mind. Awesome stuff.

I'd like to see a video like this expanded to have a roundup comparison between a DIY router and a similarly priced router. Include comparisons of power usage over time and under load, does the purpose built have performance issues over time as it heats up, does it throttle, etc. etc.

@Freakinkat

Жыл бұрын

Are you kidding you know how quick 90% of companies who make routers would flag and black list this video to keep people from finding out how much they could Not give to the already made routers that are super cool sounding at the low cost of $399! Its a Gaming Router!!! That's also part of our sale point we have to add stickers too! Yes stickers and "For Gaming" everywhere!

@zach3893

Жыл бұрын

@@Freakinkat I can't tell if your a troll or not. If that was truly the case with companies being able to flag videos they didn't like, KZread wouldn't have any videos that are critical of items, or suggestions on DIY ways to not funnel money their way. Sure, in some conspiracy theory kind of way the videos could have issues, but its doubtful. Once you ioen that box on the internet it doesnt go away, NVidia and Hardware Unboxed. My comment would be something that falls under WHY LTT Labs was started, to offer full, in-depth, unbiased reviews

@Freakinkat

Жыл бұрын

@@zach3893 😮‍💨just trolling, brother, plus rambling. That would be stupid rando and on a semi funny note just imagine a company literally like trying to stop someone from making a diy comparison video hating it and attempting to flag it as idk slander or copy rights claim just to curve viewers from seeing it like its some super omega secret that must never be seen or spoken 🤣, I don't know that would be nanners. Plus my comments like going one way then shifts to like some left Field rant.... It entertains me from time to time, it was like 3am I was pretty bored and tired, lemme make it l, pleeesseeeee? Or do you have any thoughts 🐱 ?

@zach3893

Жыл бұрын

@@Freakinkat all good no worries.

Woah. I actually just did this exact thing at my house by buying a used Protectli FW-1 off of eBay. I wanted better control of my network and performance than my eero Pro 6 was giving me. What really blew my mind was how much faster my network got after I installed opnsense and offloaded the routing from my “router”. Even a $600 like eero experienced a significant speedup. Honestly makes me disappointed how consumer routers are so intentionally crippled. Glad I discovered this world. (Fair warning there is a learning curve and lots of googling to go down this path. LTT users are more sophisticated than most but still would not recommend using a custom x86 router for most people unless you already consider yourself pretty network/tech savvy or are willing to suffer some headaches and enjoy the learning. Cheers!)

So you're replacing a 24h/7days a week 5Watt device with a 100+Watt device at a time when electricity prices are soaring? Running 100W constantly would cost nearly £300 a year. I realise there's a section in the video that touches on this but it doesn't really go into much detail and the "low power" alternative costs more and STILL uses more energy than a dedicated router. Use your ISP box as a modem, disable its wifi, and then use a Google Router (or similar) for solid wifi connectivity.

@DarrenLewarne

Жыл бұрын

Yep exactly why years ago I moved my home server from an old pc to an rpi. No way I want 100w on 247 with energy at 34pkw!

@danielk4630

Жыл бұрын

I would never use an old PC as a 24/7 Router. For testing ok but nothing more. The Intel NICs mentioned here are old and power hungry too.

@soulfinderz

Жыл бұрын

You can install it on a 10-15w device

@GreedoShot

2 ай бұрын

but then what would you have learned

This was the best thing I could do for my house. PC Engines board running OpenBSD, and a Ubiquiti access point. Couldn’t be happier

My ISP has a 2GB fiber option, so I bought a n100-based mini PC with multiple i226 2.5gb NICs off Aliexpress. I installed OPNsense and it's been rock solid and very fast. It's just far more complex than an off-the-shelf router, and I've needed tutorials to even wade into something like port forwarding, which was far easier on consumer devices.

Problem with using an old computer as a router is that it is directly connected to the internet and exposing the Intel management engine to the web. This can allow remote takeover of the router and your LAN. Only way to prevent that is to figure out how to flash coreboot onto the old computer.

@mintymus

Жыл бұрын

Sure, technically someone could "takeover" your router and LAN. But for your average home user, I'd be willing to bet you're more likely to win the lottery than to have that happen.

@cuppacheese

Жыл бұрын

@@mintymus Modern tools allow the whole IPV4 space to be scanned in minutes by any malicious actor. When someone finds a vulnerability or a weakness, they will scan the whole internet looking for targets. This is done programmatically, not manually. You don’t need to be special to be a victim of a script.

@mintymus

Жыл бұрын

@@cuppacheese Ok but have you ever met someone who had this happen to them?

@cuppacheese

Жыл бұрын

@@mintymus First off, I wouldn’t base my network security around anecdotal evidence. Secondly, if I did, I would have to ask everyone that has had a security compromise to allow me to do a postmortem investigation to determine the initial access vector. To answer your question, yes, I have dealt with machines that had been accessed in unauthorized fashion via the Intel AMT technology. Was it some kid trying to run PFSense on his Dad’s old computer, no. Still, security through obscurity is not security. Do things the right way the first time.

@mintymus

Жыл бұрын

@@cuppacheese So do you never use your smart phone when you're not at home? In that long winded response, you still didn't say if it was someone you knew.

If you have more than two ports, you can make the admin port one of those so you can make it harder to crack. The admin interface is only available via that port.

Coincidentally, I just did this myself (though I went with a quieter HP SFF). Not my first rodeo with it but decided to go back to a dedicated hardware solution having previously virtualized it (along with truenas and my homelab). Makes it much cheaper to upgrade to a 10Gb network as well if you only need to service a few clients. Between using hardware I had lying around and picking up used enterprise adapters I'm only in for about $80 (USD) on the whole project.

For most non enthusiasts the ISP supplied box "just works" and makes their support easier to manage. I personally have always used my own setups but it does mean if things go wrong it's down to me to fix!😅

@Pseudynom

Жыл бұрын

You can also just buy a better one and use it instead of the provided one. Then you have more performance, more reliability and less power consumption than the DIY.

@lehoff

Жыл бұрын

@@Pseudynom that's what most people do who don't want to use the ISP supplied one. However it's still down to you to fix if it goes wrong as many ISPs at least here, won't support you unless you use their kit.

@cj.wijtmans

Жыл бұрын

they are not secure, look at pihole.

@lehoff

10 ай бұрын

@@Diddydudat what would that achieve?

@zNoah

10 ай бұрын

@@Diddydudat The ISP has nothing to do with the router you bought off Best Buy

Totally spit my coffee out when the family picture came up! Didn't expect that, but it was fantastic.

Would have been really nice to see how to set up specific features - such as a dedicated AP for IOT devices, or other features that are seldom used but really need to be for security

@stephen1r2

Жыл бұрын

look at Level1 Tech. They have a home automation series that may go into detail. It was a while ago but that doesn't move too fast.

@vstolpner

Жыл бұрын

@@stephen1r2 thanks I'll look into it

@jakubgt1

Жыл бұрын

Why on earth would you waste an AP and dedicate it to IoT devices? You'd want to setup a VLAN for them instead

@lighthawk95

Жыл бұрын

@@jakubgt1 I do both, I have an AP dedicated to the IoT devices and that entire AP is on it's own VLAN for IoT devices.

@jakubgt1

Жыл бұрын

@@lighthawk95 Why? Waste of an AP when you can use the IoT VLAN across all APs.

Totally a great idea to potentially reduce e-waste and have been doing similar things with thin clients and half length Lan cards for years … OS up to you to choose but both Pfsense and opnsense are great you can also opt to use MikroTik router OS for x86 to make it simple and have a shitload of features and potentially do the DYI ISP if you want :) other available options are also openwrt that also runs on x86 a damn lot faster

@benjaminrioual908

Жыл бұрын

and potentially become the DYI ISP* :D By the way, Mikrotik hardware is quite chip and powerfull, crazy feature for the price

Someone mentioned this earlier, but if you need something that does NBASE-T, the X550T is a good option, but if you need an alternative to that one, the X710-T2L or X710-T4L will also do it. The key thing to look for is the "L" at the end because that indicates they use a newer PHY that both supports NBASE-T and consumes much less power than the standard "T" versions.

Love this, more videos showing what we can use old machines for please

Here in Germany we actually got FritzBoxen. These are manufactured by a German company named AVM. These things often outperform even the Asus or Ubiquiti Router combos. Most ISPs bundle these with their services, so at least that is one good thing about Germany's internet PS: These seem not very common other than the countries directly around Germany :c

@DarthFresse2

Жыл бұрын

FritzBox FTW!!!

@11ELFs

Жыл бұрын

FritzBox sind scheiße, my bad but it's true.

@ReneOne111

Жыл бұрын

Just got the 7590AX from my Provider. Even the NAS function is usable.

@kimasbeck3349

Жыл бұрын

Only once I had a router by another company than avn and I was shocked that I couldnt even activate wifi (it was blocked by the provider, you had to extra pay for it). Best thing about those fritz boxes is, that even the most basic ones can be manually configured as you want them to be. Yeah one good thing about Germany.

@pecros

Жыл бұрын

yea, the routers are "fine", but provide shitty wifi and the real issue is that our actual internet speed and quality is kinda awful in most rural areas.

8:25 The "this guy" switch is an Edimax 8 port model. I like them because they are a) cheap (but they are all quite cheap these days, so yeah) and b) (this is the big one for me) THEY HAVE THEIR LITTLE POWER PLUG ON THE SIDE OF THE RJ45 PORTS. This makes it so much easier to cable manage by not having a cable stick out on BOTH long edges. Also, it runs on 5V and draws a maximum of 3 watts, so you can probably run it off a USB 3.0 port.

I used an old Barracuda x100 firewall unit with no licensing, works brilliant and still has plenty of resources for my 1gb internet, excellent device for this, just difficult to crack the original bios and OS to allow me to install custom anything, definitely worth buying a used one if you want a small, but performant device for opnsense or pfsense

Really enjoying this kind of videos coming back to LTT - tbh was missing them as LTT shifted away from their 2015-2016 content.

I've been running a similar combo for a few years. One thing to note is if you need to replace the case fan, you will need to find one with matching RPM specs. I replaced the case fan with an 80mm noctua and the bios had a hissy fit as the ran RPM was a lot lower. (You can't permanently bypass the warning). Optiplex 9020 with an Intel 4570, 8gb ram and 256gb SSD with an Intel quad gigabit NIC. You definitely need to take power into account though, the 4th gen Intel CPUs were a fair bit more power efficient then 3rd gen. However even I'm considering replacing this with something more efficient. My setup uses around 30-40w and costs around $90-100 AUD per annum. Opnsense is cool and super powerful for nerds who want to run a homelab, but its overkill for the average user.

I’ve been running this exact configuration for years and it’s been great!

Also, be cognizant of CPU type if enabling SPI (Stateful packet inspection). You can get close to wire speed but you'll need the CPU to carry the additional load.

The heck with Linus. Jake Tech Tips gets 10/10. I love these kind of videos. They make me want to go out and buy stuff I don't need just to try it.

Love this, always wondered how to do it. Only issue I have is, x86 is far less power efficient than the routers we get provided by ISP's. With energy costs sky rocketing (particularly here in the UK), every little bit of extra efficiency is critical at the minute.

@enzo.albornoz

Жыл бұрын

Just use ARM devices. They use way less power. LTT is just ignoring openwrt, which is in my opinion, the best cost-effective alternative

@indianhawker

Жыл бұрын

A mini pc should be good enough for your requirements. There are a lot out there which consume way less power (from 5watts to around 25 watts). Openwrt is not a full fledged firewall and the AP hardware may not be good enough to run all firewall features (I have both openwrt and Opnsense).

@manolisponiris7045

Жыл бұрын

I’ve just bought a used Synology router for £35 since I want DDNS functionality for watching tv abroad without paying for a VPN. I suppose ultimately it depends on what your use case is, this for me is fine. However if you want better Wi-Fi I know that virgin is giving out new Wi-Fi 6 routers for free to customers that have the gen 3 hub or older.

@neomaster341

Жыл бұрын

Repurposing a tower as a router is nice if you have cheap energy, but here in the UK thin clients are your friend. Google Parkytowers, this one person has put a lot of effort into documenting most of the thin clients you can find used for cheap, including their idle and running power draw. I'm currently running an IGEL M340C with OpenWRT as my home router, which I got off eBay for £20. It has an AMD Jaguar quad core, draws 7-12 watts while in use, and works perfectly with a Realtek gigabit ethernet USB adapter for the WAN connection. I also run a 10ZIG 58xxQ as an adblocker/VPN gateway. With the powersave governor enabled in Linux, it only draws 4-5 watts from the wall while fully saturating my ISP's download speed.

@Ghfvhvfg

10 ай бұрын

Arm sbcs exist…. So get a box and set it up……

If you're not going to route in software, and aren't setting up packet queues, than you should probably just stick to openwrt flashed over cheaper hardware. You'll get the same configuratbility, and the same network performance. Using a full pc should be done when you want to improve network prioritization, filtering, and detection using kernel processed packets

I use a RPI4 with OpenWRT along with a Netgear poe AP. Works great and both are powered PoE via my switch. RPI4 has plenty of power, sips power and handle gigabit fine.

Been running opnsense for years on one of those protecli-type appliances and it's been rock solid. Opnsense's gui is really sleek and it's been rock solid

I’m incredibly surprised they didn’t mention the alternative to making this unit. This is a power hungry, unreliable solution to something that can be had for $60-90 getting a standalone router. The ubiquiti edge router x and tp link Omada router are 4 port routers without an all in one setup so you can buy separate high end access points

@ObeliskAG

Жыл бұрын

An OPNsense firewall has quite a few more features...

@bbekkaa365

Жыл бұрын

Edge router and gigabit up/down yeah right

@gabiroli86

Жыл бұрын

i wouldnt say unreliable I bypassed my bell canada fibre modem. With a dual 10 gbit network card with sfp modules over 2 years ago. I use it for my 1.5 GBIT bell fibre connection. i bought the optiplex for 40$ I added the smallest cheapest ssd i could find. I have yet to get an outage that was fault of the equipment or pfsense

@tw3145wallenstein

Жыл бұрын

I would not describe this solution as unreliable, power-hungry. That largely depends on the hardware you choose to run it on. I have had pfsense or similar running for almost 10 years now and have had very few issues that I did not inflict upon myself LOL. These platforms offer even more officially supported flexibility than edge router x for sure. I can not speak to Omada but as it's more or less a clone of Unifi, my bet is pretty good it is also limited in flexibility. now could most home users be served just fine by one of these devices of course. quick side note, while I am aware solutions like this support more, features if you are willing to go poking around in the Json configs it's not officially supported and could break with a system update or clicking the wrong thing in the web interface so I don't count them. No hate just adding my thoughts to the matter, I won't be giving up my pfsense box anytime soon tho. Hope you have a wonderful day.

@JireSoftware

Жыл бұрын

Neither can handle non-offloaded 500/500, nevermind gigabit, without buffer bloat.

Bold of you to assume I don't already have pfSense running on a miniPC for my router. Absolutely love it.

Bitdefender reminded me of the video Linues mentioned once which never came out: Testing the stuff from your sponsors.

Wow...... finally someone who knows what they are talking about. 0:45 when it comes to combo modems. Any ISP provider ive had, ive always disabled all of those services and had a separate firewall to do the job. My downtime is 0%

0:17 This is Linus Tech Tips where we actually do the things we talk about ...for very little pay! And we're damned good at it too!

I'm loving this videos. They'll be really useful when people starts upgrading the motherboards on their Framework Laptops or something similar. I have a Framework and I always wondered what would I use the motherboard for if I upgrade it in a few years. So thanks for the ideas

@WitchMedusa

Жыл бұрын

Oh poop that's a genius use case. It's amazing how much use old technology has.

I've been using OpenWRT for almost 2 years now. Its yet another option for OS. I'm sure it is a bit more restrictive in some ways, but it has plug in support and I've barely scratched the surface of what it can do. Been using a basic system with 8gb of ram and a haswell Pentium 2 core. Temps are great and CPU usage is minimal at most, with the highest ram usage I've seen at 70-80MB. I built the system in a sff chassis with a titanium rated psu. Great customization and I'm in the process of adding fiber connections with Intel SFP NICs. Even using software switching has been pretty solid. I can support well over 20 devices with zero performance degradation, even using a basic combo router as an AP. Granted my internet connection is only 300mbps, so even at full tilt there's not a ton of utilization.

Don't forget you can get a "t" class lower power processor for $8-$12. Such as i5 3470t or i3 3240t, also available in Pentium and from 2nd-12th gen (4th gen and up highly recommended). But you can also disable hyperthreading and turbo in BIOS to get less power usage as well. And shut off anything you aren't using in the BIOS to save some more power. Run it off an Intel Optane 16gb NVMe drive in a PCIe adapter if you can. Use the USB for Clover bootloader if needed.

Another good budget option for a NIC on OpnSense is the HP NC364T. It's a quad port gigabit card, so you can even set up additional interfaces for guest networks or for failover if you have a cellular network backup. You can frequently find them on eBay for pretty cheap, I think I got mine for $25ish USD.

@ChristopherHammond13

Жыл бұрын

+1 for the NC364T. I tried 2 other 4-port Intel GbE NICs (one Dell and one other ancient Intel 4 port card, probably Dell too) and had all sorts of issues including the motherboard not POSTing. Threw the HP NC364T in and all sorted 🙌

@Darkk6969

Жыл бұрын

@@ChristopherHammond13 Yep. I use this model card as well. Works great with pfSense.

@LtdJorge

Жыл бұрын

And don't forget Mellanox cards on eBay, for 10G or higher.

@Darkk6969

Жыл бұрын

@@LtdJorge Yep, I bought several of these off of e-bay. Great value!

its a strange space we're in. just a few years ago it was obvious to reuse these old computers as servers rather than generating e-waste, but in a couple years it will be ludicrous to run these power hungry devices, especially considering rising energy costs and arm (fingers crossed for riscV) making real progress in the IT space

*Really* pleased to see you opted for OPNsense. I've ran it now for 6 years, and absolutely love it. Also FWIW their IRC channel is great for quick help. I've upgraded and upgraded and upgraded, without issue.

Just a note, if this I225 is the same I225-V that's packaged with many motherboards, multiple people have had many issues with the chip. I would not really recommend it.

Unless you want to run a hypervisor and virtualize the firewall, SSD and an i7 is overkill for home users. On a side note, thin clients with pcie ports can take care of being power efficient.

@LMojzis

Жыл бұрын

SSD helps to reduce the power consumption.

@Wrenchmonkey1

Жыл бұрын

​ @LMojzis You'll save like ~8watts. Depending on how much electricity costs in your area, the purchase price of a $15 SSD could break even in less than 6 months. For me, averaging on-peak and off-peak power costs for running it 24 hours a day, it would take me a little over 2 years go break even. Most people are going to get more than 2 years of use out of a PfSense/OPNsense box like this, and even if they end up changing to a new box, the drive is still useable for other purposes, so it's still probably worth it in the long run if you don't mind paying the energy costs upfront. There's also the probability that the cost of electricity will increase over time, so you may end up seeing a faster ROI on the purchase of an SSD. And not that it's really that big of a concern, because you likely won't be rebooting the firewall that often, but significantly faster boot times are also a nice bonus of solid state storage.

@PaulWebsterLincoln

Жыл бұрын

well they are going BSD sop bhyve it is :P

Those Optiplex 7010s are excellent little machines for budget-building things like routers and NAS boxes. I'm using the tower version to run TrueNAS, and it's been fantastic.

@fmlazar

Жыл бұрын

Those also are the core for those Walmart Photo Kiosks.

@Printerpenguin

Жыл бұрын

Also good for cheap low end gaming pcs

Two Linus videos in a day? What is this, Heaven?

@GH05TYPLAYz

Жыл бұрын

I think we all died

@TechPewGuy

Жыл бұрын

Calm down, thirsty.

@KevinFreyMD

Жыл бұрын

@Unauthorized D035 lol

@TulkOrkan

Жыл бұрын

Lol god comment

@ebin326

Жыл бұрын

Don't forget we didn't have one yesterday

I love these "find another way to use your computer" videos. I want to make them all! I don't know what I don't know, so keep showing me new ideas!

I have tried to do this last year, And i can say, Deco’s work great i worked with the Deco M4. Its an amazing work base

You should make a video about Ventoy, this is a bootloader for USB sticks, where you can just put your ISOs on the drive and can select them during booting from the stick. I use mine to install servers, Windows pcs as well as fiddling around in live Linux distributions like Kali or gParted. Would be an awesome topic for a video that hasn’t really been covered (as I know)

@ya2131

Жыл бұрын

Thank you for that info, was wondering why I was never able to do that and was tired of having 19 USBs lying around Upvote this please

@joelrodriguez9611

Жыл бұрын

I'll give it a try. I've tried some others that claimed the same but the results were not what I expected.

@Grocel512

Жыл бұрын

Ventoy + a fast 256GB stick = a hell of a tool box. 💪

One of the current issues is that in many places, you still can't do anything about the modem part of the device, which is the thing that actually takes the super weird and proprietary fiber connection that the ISP runs to your home and turns it into Ethernet. In some places ISPs will give you a fiber-to-ethernet wall thingy that you can then plug to your preferred router (usually upon much bothering them and telling them that yes, you have a legal right to demand it), but it's anything but assured.

@Mad-Lad-Chad

Жыл бұрын

If I understand what my ISP told me, the fiber to ethernet wall installation is their standard way of doing things. It's what we got from them without me even knowing at the time I wanted it. Starting to like my ISP more and more as I learn how crappy others can be.

A nice project for folks to learn about networking but I wouldn’t recommend people use this kind of setup at home for no apparent reason. Considering the amount of different parts people require to do this, if faster networking is the goal just go with a smaller business focused router. Very happy you mentioned the extra energy requirements of running a setup like this at the end - its a huge reason not to do this if you pay the bills, but security is also be a big issue. This project may be better targeted at those interested in hosting online servers for their friends or those in shared student accommodation that may want a secure subnet as a setup like this can make security zoning very easy.

@Wrenchmonkey1

Жыл бұрын

The cost difference can be immense though. Buying a business-focused router is going to be expensive, and suffer from the same upgradeability path restrictions. And security is a non-issue here. You're going to have better security from this setup than from just about any off-the-shelf option, running outdated firmware with massive security exploits that never get patched...

#1 Make sure DHCP is disabled on the modem or router that the ISP provides! This will cause random internet disconnects on devices if dhcp is also enabled on another device on same subnet. Ideally ISP modem can be set to BRIDGE MODE. Either by you or by asking them to do it on their end.

I’d definitely be interested in learning about VLANs with this system, as well as VPNs and installing pi-hole, to have a single box handle all of the networking for a house.

@lostintechnology1851

Жыл бұрын

Trust me you do not want VLANs in your home network. It is just not worth the additional headache of setting it up and troubleshooting in the future.

@og_tokyo

Жыл бұрын

@@lostintechnology1851 it is if you care about network design, but yea, your average joe, the 99.9% of people dont need that, and that includes most people who watch these videos too. lol Also@OP if you're interested, jsut google what vlans are, literally if you're interested you'd look it up vs posting and waiting for Linus Corp to make a video about it. Off the bat, not what it takes.

@carabooseOG

Жыл бұрын

Fun fact - with OPNSense you can install Adguard on it and it does exactly the same things as does pi-hole, but without needing a pi..

@cmdbill

Жыл бұрын

Yeah VLAN at least the IoT devices including cellphones to their own VLAN as those use casting and what not to other IoT devices. IoT is a massive issue with security updates and not worth taking the chance if you local fileshare and have PC's that are on all the time. So no VLANs aren't a big deal if you have just a few devices like a phone and a Firestick, but if you have a robot vacuum and smart outlets or wifi lightbulbs... Yeah VLAN that.

@og_tokyo

Жыл бұрын

@@cmdbill you'd be amazed how many iot devices reach out to China, especially smart bulbs.

For the price of the components (not to mention power consumption) you can have new allin1 wifi router that is way better than what your ISP has provided and is much simpler to manage. For home users this is like a hammer to kill a mosquito.

@maxwellmelon69

Жыл бұрын

Eaxctly what i was thinking. 24/7 power usage adds up. I also bet the ping delay is less then going though purpose built hardware made to do the job then a universal computer

I considered this option as well, but in the end I stuck with my old ASUS router that has OpenWRT support. it's still plenty configurable, practically didn't cost me anything since I already had it, can handle a gigabit connection and the power consumption is nowhere near an x86 PC. I also have a dual WAN option and configured my LTE router as a fallback for the case of outage on my landline provider. so before going down the OPNSense way, you should also check for a router which has OpenWRT/DDWRT/other custom firmware support. you can still disabel the WiFi part if that doesn't suit your needs and just use the router+switch functions.

I built mine with an HP T620 PLUS Thin Client Quad Core GX with a 4 port gigabit nic. It kicks butt...It's also small and quiet since it is fanless.

Good vídeo, OPNSense is great. Also, you can buy a Mikrotik router. Double than Cisco professional capabilities, one hundreth the price, 10 gigabit ports configurable as router or switch, 15 watts, outstanding community support.

@herberteisenbei8112

Жыл бұрын

The thing is: Microtik has tons of options, more than you will ever need in fact - but is geared towards professionals. It is absolutely not user friendly.

If your internet is not more than 1G you could also get an ubiquity edge router which is very configurable and relatively cheap depending on the model you get.

@stephen1r2

Жыл бұрын

Yes, one of those, a switch and a couple of APs. I ran a powerline link to an upstairs section as well (apartment, so no holes allowed.)

Now how do you set up your devices to work on this router? Left the most important part out for the layman who understands what you did somewhat but doesn’t know why or how to use it past the optiplex unit. Setting up devices to use this is important to understand for the security minded. We need a part 2

I have a SonicWall firewall at home and a Buisniess switch(I think). This video was great❤

In Germany we have AVM and their Fritzboxes and their amazing devices. Not upgradeable but very strong when it comes to compatibilty, perfomance and features. They often cost some euros extra to your contract but they are definitly worth it.

@DiverseGreen-Anon

Жыл бұрын

some are a little bit upgradeable ^^ as avm doesnt differentiate the hardware between some models but releases them with different firmware, you can sometimes "hack" a different firmware onto it to unlock 100mbit to 1gbit on more ports or usb3 instead of usb2 I did that with my fritzbox 7520 and flashed a 7530 firmware onto it to get all its benefits. I see that as an upgrade of sorts (but not intended yes)

@el_chaot254

Жыл бұрын

@@DiverseGreen-Anon yes indeed or what i also saw where some large Antennas people put on some models 😂

One important piece left out of this video is that the ISP "router" is also a modem. so you cant just chuck it out. you need it to do the modem stuff. you can put it in bridge mode and connect it to your pfsense.

@greenreaper898

Жыл бұрын

Or just buy a Motorola surfboard modem and ditch their equipment fee and garbage equipment.

You could run your router and Jellyfin + TrueNAS + etc server of that machine at the same time if you use virtualisation. I've done it in an old HP with the same specs as that Dell. In your virtualisation software, assign one of the NICs to a virtual LAN interface, and connect all the VMs to it. Assign the other one to a virtual WAN interface, and connect only the OpnSense VM to it. Set up OpnSense as a VM in the same way as described in this video, set up Jellyfin and TrueNAS as described in other videos.

@GreedoShot

2 ай бұрын

and then when one comes down they all come down

@katrinabryce

2 ай бұрын

@@GreedoShot If one VM goes down, that doesn't affect the others. If the host goes down, then obviously that affects everything.

@GreedoShot

2 ай бұрын

@@katrinabryce didn't say vm

My old E8400 Untangle box was unable to provide full gigabit speed, pretty sure it was related to the super janky trash NIC's I was using though... Settled on an E3 1220L V2 - thing is solid. Love OPNSense, been using it for years.