OpenWRT

[IamNoone]

I am thinking of securing my network a bit more.

I installed OpenWRT on a Raspberry Pi to test and the setup was easy enough but unfortunately my network speed sucked because of the limited capability of the Pi. I considered using an old PC for the same purpose but would that need 2 LAN ports, 1 for WAN and the other for my internal network? I do have an AX3 WIFI adapter that I can use to connect my mesh. Tested it before and my speeds are fine as I have a 50mbps fibre line and get full rate. Internal network is sufficient for us.

What I liked about the OpenWRT is that I could add a network wide VPN with Wireguard. My worry is that setting this up will affect my remote access to my Jellyfin/NextPVR server that I access via a domain pointed to my ISP DDNS for access.

All my devices have ProtonVPN set up on them individually which would be eliminated by just running it through the router. My current router does not have the ability to run a network wide VPN, just to create a VPN to remotely access my network.

My main concern is access to my the media server. I have a basic firewall setup but think I need to up the anty a bit.

 

[netstrider]

Yes. You would need a minimum of 2 ports.

I currently have it running on an Intel Atom CPU and it works great.

Running wireguard will not limit your ability to port forward and use DDNS. Not entirely sure what your intention is with the VPN. Don't know anything about ProtonVPN.

You also have the advantage of being able to run AdGuard on OpenWRT and the ability to mitigate bufferbloat.

 

[IamNoone]

Yes. You would need a minimum of 2 ports.

I currently have it running on an Intel Atom CPU and it works great.

Running wireguard will not limit your ability to port forward and use DDNS. Not entirely sure what your intention is with the VPN. Don't know anything about ProtonVPN.

You also have the advantage of being able to run AdGuard on OpenWRT and the ability to mitigate bufferbloat.

Proton is a VPN provider. I can add up to 10 devices on my plan to use their VPN service. It would be much easier to just have a wireguard config set up from Proton for a network wide VPN instead of every device with an app.

VPN is used for nefarious purposes of course. To hide me on my IPTV service and remove geoblocking on Netflix etc

 

[InvisibleJim]

I've been thinking of picking up a cheap Mikrotik or similar router specifically to experiment with OpenWrt. I see Cudy routers are quite cheap and have compatibility with OpenWRT.

 

[netstrider]

Proton is a VPN provider. I can add up to 10 devices on my plan to use their VPN service. It would be much easier to just have a wireguard config set up from Proton for a network wide VPN instead of every device with an app.

VPN is used for nefarious purposes of course. To hide me on my IPTV service and remove geoblocking on Netflix etc

The Wireguard that would be running on OpenWRT is a Wireguard server, allowing you to access your home via Wireguard client on another device.

You are looking for the ability to connect to a remote VPN which I am sure is doable. I have done it on TP-Link to ExpressVPN, for example.

If it is not natively available there should be a plugin for it on OpenWRT.

 

[IamNoone]

I've been thinking of picking up a cheap Mikrotik or similar router specifically to experiment with OpenWrt. I see Cudy routers are quite cheap and have compatibility with OpenWRT.

I have a stack of routers and none of them can be flashed with OpenWRT unfortunately

 

[netstrider]

I've been thinking of picking up a cheap Mikrotik or similar router specifically to experiment with OpenWrt. I see Cudy routers are quite cheap and have compatibility with OpenWRT.

Fine for testing but the more things you want to run on it the beefier it needs to be.

 

[IamNoone]

The Wireguard that would be running on OpenWRT is a Wireguard server, allowing you to access your home via Wireguard client on another device.

You are looking for the ability to connect to a remote VPN which I am sure is doable. I have done it on TP-Link to ExpressVPN, for example.

If it is not natively available there should be a plugin for it on OpenWRT.

When I played with it on the Pi, I was able to set it up using a proton config file for outgoing connections. I found the plugin in the applications list.