I host a nextcloud instance, a NAS, and a few content portals for things like ebooks and music (internal only). I’ll be migrating Smartthings to Home Assistant eventually. We’re going to be upgrading to fiber soon and I have the opportunity to rebuild my wife’s network with a long term outlook (we’ll likely be here for years). Currently we have an older eero mesh system over cable internet. My desk is right where the cable currently comes in so all my Ethernet devices can live near the router.
My question is this:
What am I missing out on as a self-hoster by using whatever equipment metronet gives me?
What am I missing out on as a regular internet user by using the default equipment.
Am I likely to be annoyed about where the fiber comes into the house?
If it makes sense to buy my own router or access point(s), what is a reasonable balance between “daddy Bezos please read all my emails” and “you’ll never be secure until you build a router from custom circuit boards you custom ordered and hand assembled in a secure area”.
I’d like to avoid complex configuration, but if I can surface advanced options when needed, that would be great.
My Linux knowledge is intermediate.
My networking knowledge is begintermediate.
I went through this at the beginning of the year, it get 900/900 fibre, settled on openwrt running on a nanopi r4s. My other options were a nanopi r6s with openwrt, or nuc type hardware/server running something like pfsence/opnsence etc. The openwrt install took about 5mins then a couple of hours of exploring various menus options etc, which I didnt end up changing.
Performance and how configurable things are, plus ease of use.
For instance, my default router/modem device from my ISP was super clunky and confusing. I needed to set up some custom port forwarding and firewall rules. The aftermarket router I bought was faster, had way better wireless coverage, and the UI was so much easier to set up the configs I needed.
So it’s up to you, from what you said, seems like you probably would be good with the default from your ISP.
Typically a Fiber ISP will run Fiber optics only to your DEMARC (or Demarcation) point. This will be usually where your main cable (before any splits) or DSL line used to come in (in the US they’ve been using Orange tubes to indicate this and it will usually run to a panel in some closet or laundry). At the DEMARC they’ll install one of two things: a basic fiber to ethernet converter which will provide you a single ethernet port and a pure tap to the internet, or a Gateway device that will convert the fiber to multiple eithernet with NAT (usually providing other capabilites like TV, Phone, etc).
If you have the latter, you may not get much say in what you can do with your connection, and would be limited to a DMZ mode that is configured on the Gateway. What you put behind the converter or gateway is up to you.
What am I missing out on as a regular internet user by using the default equipment.
You miss an understanding about what your devices do. Including the devices you got from your provider.
As a consequence, you remain clueless when your devices get attacked and taken over.
What am I missing out on as a self-hoster by using whatever equipment metronet gives me?
You miss the chance of securing your network.
As a self hoster, you are a little bit more attractive, and there are more possibilities of attacking your devices, than a typical PC or mobile user.
My suggestion is an extra router with OpenWRT between the metronet device and all your other stuff. You will get some better understanding just by configuring your OpenWRT for the first time. Their documentation is very good.
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !selfhosted@lemmy.world
A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.
Rules:
Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.
No spam posting.
Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it’s not obvious why your post topic revolves around selfhosting, please include details to make it clear.
Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.
Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).
No trolling.
Resources:
selfh.st Newsletter and index of selfhosted software and apps
I went through this at the beginning of the year, it get 900/900 fibre, settled on openwrt running on a nanopi r4s. My other options were a nanopi r6s with openwrt, or nuc type hardware/server running something like pfsence/opnsence etc. The openwrt install took about 5mins then a couple of hours of exploring various menus options etc, which I didnt end up changing.
Performance and how configurable things are, plus ease of use.
For instance, my default router/modem device from my ISP was super clunky and confusing. I needed to set up some custom port forwarding and firewall rules. The aftermarket router I bought was faster, had way better wireless coverage, and the UI was so much easier to set up the configs I needed.
So it’s up to you, from what you said, seems like you probably would be good with the default from your ISP.
Typically a Fiber ISP will run Fiber optics only to your DEMARC (or Demarcation) point. This will be usually where your main cable (before any splits) or DSL line used to come in (in the US they’ve been using Orange tubes to indicate this and it will usually run to a panel in some closet or laundry). At the DEMARC they’ll install one of two things: a basic fiber to ethernet converter which will provide you a single ethernet port and a pure tap to the internet, or a Gateway device that will convert the fiber to multiple eithernet with NAT (usually providing other capabilites like TV, Phone, etc).
If you have the latter, you may not get much say in what you can do with your connection, and would be limited to a DMZ mode that is configured on the Gateway. What you put behind the converter or gateway is up to you.
You miss an understanding about what your devices do. Including the devices you got from your provider.
As a consequence, you remain clueless when your devices get attacked and taken over.
You miss the chance of securing your network.
As a self hoster, you are a little bit more attractive, and there are more possibilities of attacking your devices, than a typical PC or mobile user.
My suggestion is an extra router with OpenWRT between the metronet device and all your other stuff. You will get some better understanding just by configuring your OpenWRT for the first time. Their documentation is very good.