I continue to make my home network even more complicated. The cool thing about having dedicated hardware for each function (modem, router, Wi-Fi) is that I'm now at the point where I can add arbitrary Wi-Fi access points as nodes to my mesh network and my client devices seamlessly switch between them while still automatically being protected by the DIY VPN I described in this article.

https://blog.lopp.net/how-to-protect-your-home-network-with-a-gigabit-vpn/

Reply to this note

Please Login to reply.

Discussion

Hey Lopp, this is creammm. 👌🏻

Have a similar setup, but DYI router. Can recommend!

I really like your article! Isn't a drawback of running your own VPN server that the size of your anonymity set decreases to 1? If twitter knows you're behind 1.2.3.4, then they know all traffic from that ip is yours. They can sell/share/leak that info to anyone.

Isn't that a good reason to use Mullvad or other shared VPNs?

Pros and cons.

While you're no longer hiding in a crowd, it also means the reputation of that IP address won't be tainted by abusive actions perpetrated by randos. So less likely to be blocked.

Excellent thank you!

I have been looking at making my house smarter, but I do not like all the cloud and internet connections. Are there any decent LOCAL smart home devices/applications?

There are tons of Zigbee-/Z-Wave-based smart devices that integrate with Home Assistant (which is open-source and selfhosted), which don't need any internet access. For example I use all kinds of Philips Hue and Ikea smart devices with Home Assistant and they work perfectly without any cloud/internet access.

Would disabling the routing functionality on the wifi device be necessary if you used a wifi access point instead of a wifi router for that piece of hardware? Cheaper too.

Does Tor run OK over a VPN?

Great article - need to get on that at home after reading it months ago.