Comment on How do I securely host Jellyfin? (Part 2)
tychosmoose@lemm.ee 1 week agoThat isn’t what I would choose for your situation. CRS3xx switches are fast at switching (layer 1 & 2), but not as a NAT router, which you probably need.
Better to pick something from the Mikrotik Ethernet Routers range, assuming you don’t want your personal LAN to have WiFi. The L009 or basic RB5009 are both good options in the same price range. Choosing depends on your upstream connection speed. Both are fanless.
Or pick a Home/Office Wireless device if you are permitted to have your own WiFi access point. The hAP ax2 is small, affordable and performs well at 1Gbps. If your upstream connection is 1Gpbs this is probably what I would choose even if you don’t want WiFi as long as this is enough ports. Just turn off its WiFi radios to use it wired-only. If you have a 2.5Gbps upstream port then hAP ax3 is a better choice.
All the Mikrotik choices will require some learning if you want anything beyond a basic router configuration. But once you get it like you want it they are very solid and reliable.
OpenWRT and OPNSense are easier to jump into without a lot of effort, so if you don’t want a networking hobby I would use one of them. Pick up pre installed device if you want it easy. Or get a mini PC with a few network ports and install the OS yourself to get more power for the money.
Scrath@lemmy.dbzer0.com 1 week ago
Wow, that was a lot more comprehensive than what I was hoping for. Thanks.
I was particularly interested in the CRS310 because it had 2.5G ports with the ability to eventually later even expand into 10G. 10G speeds aren’t really relevant for me (for now) since I mainly want the speed advantage for slightly faster transfers to my NAS but I would be interested in 2.5G capability. Do you think it makes sense to pick one of the devices you recommended, specifically the hAP ax2 and then if I want to get into 2.5G territory to buy an unmanaged 2.5G switch? Speeds of 2.5G and more are only interesting for transfers between my own local devices for me. I don’t need the rest of the network to have fast access so I guess the hAP ax2 makes more sense to buy than ax3. The ability to open my own WiFi network is also quite attractive so I can have local access even from my laptop or phone which I guess is another point in favor of the Home/Office AP route.
tychosmoose@lemm.ee 1 week ago
Sure. That plan would work. You might want to be sure that this is permitted at your university.
Universities often have strict rules about what should connect to their networks.
Scrath@lemmy.dbzer0.com 1 week ago
Ah I may have misused the word dorm. It’s more of a shared appartment rented by multiple students so there aren’t any limitations in that regard fortunately.
tychosmoose@lemm.ee 1 week ago
Ah, got it. That plan should be great. You can segment your own wired+WiFi network with that hardware, and even do Wireguard from the hAP ax2 to get whole-network egress via an outside VPN service at a good data rate, if you want.
The other devices you might consider as the router are the GL-iNet Slate series. They will be slower as a VPN router, but they’re pretty small and light. They come with a skinned OpenWRT, but in most cases you can install a build of the unmodified OS if you want.