Comment on swapping out the router maybe?
muusemuuse@sh.itjust.works 4 days agoI have a smart switched. It’s kind of got man managed features like villains and stuff like that but it’s not a full managed switch
Comment on swapping out the router maybe?
muusemuuse@sh.itjust.works 4 days agoI have a smart switched. It’s kind of got man managed features like villains and stuff like that but it’s not a full managed switch
irotsoma@piefed.blahaj.zone 4 days ago
If configured properly, it can usually bypass the router altogether. In my setup I have several VLANs for different traffic, so for me it’s important to have a Layer 3 switch that can handle the routing between VLANS. But if you don’t use VLANs, a layer 2 switch will build a mac address table and bypass the router once it knows where the traffic is going. That way only your DNS queries and similar get sent to the router for internal traffic on the LAN. Then the issue is just traffic going to the internet.
For the internet side you just need to configure the firewall to drop packets on ports (not reject, just drop/ignore) you don’t use and use something like fail2ban or crowdsec to make your router outright drop malicious and LLM bot kinds of traffic to ports you do use that otherwise have to be processed. That generally will reduce processing load unless you have self-hosted services that really generate a ton of traffic in which case you can move those to VPSs outside of your network.
Those are my general strategies at a very high level.
muusemuuse@sh.itjust.works 4 days ago
I do use VLANs. But in testing even without them going laptop->server->WAN and nothing else it could not do it.