• 1 Post
  • 7 Comments
Joined 2 years ago
cake
Cake day: February 13th, 2025

help-circle



  • All my servers are routers, I have a mesh network. OpenWRT routers do not participate in the mesh since that is a pain to set up and maintain, that’s part of my desire to move the routers to my unified NixOS config. Since my repo is larger than the available storage on most consumer routers, you’re right, I’d need a small custom box, be it a small pre-built NUC-like thing or something I build myself.

    I dislike OpenWRT because it does not have automatic updates, and updating remotely while keeping all the packages required for the network to work is extremely risky.

    I did it once

    by pre-downloading the newer versions of the required software and putting in the launch script a bunch of commands telling it blindly to basically to install all those packages, use the configs, and reboot. The update seemed succesful, but a few weeks later it turned out that sometimes (like for an hour every three days) wireless clients could not connect to one of the APs because DHCP failed for some reason. Nothing in the config looked wrong, and the only thing that fixed that was completely wiping the router and then applying the configuration again from a backup. I did not like that at all since I had to send a relative with a laptop and different router (remember how no network without the router) to try to troubleshoot that remotely, that quickly failed due to taking too much time to reproduce the issue so I ended up just replacing the router.

    I can’t just ignore the updates due to all the zero-days we are getting almost weeky with the LLMs and my ISP or someone on the network is trying to actively get into my stuff. The routers behind CG-NAT are getting almost the same kind of obnoxious port scanning and ssh login attempts as my servers with public IPs, drastically less volume though.

    USB adapter sounds extremely flaky, I agree, and that would never be something I’d use here, but! my first NAS was a windows 8-era tablet with an HDD connected via USB 3.0 adapter. It was way more reliable than you’d think.

    I also got the impression that you think that I’m messing with people’s routers just for the fun of it. That is not the case, the problem is that there’s no internet without VPNs provided by my routers (that’s a simplification of the situation, but just accept this explanation). JetKVM would also not work for that reason. My goal is to be able to monitor that the heating and water supply still work and my 80 year old grandmother will not freeze to death because her CNG supply ran out and she has too much pride to ask someone to do something about that.