Yeah, and most of the front end task runners like gulp and grunt have plugins which do it automatically while watching for changes.
Let’s base our build process on javascript also! 
I am going to be so lost doing this, but I have my resources and google to help me…LOL If I get 4 or 5 references deep and lose my place I may raise my hand and ask for help.
I would like to get away from big tech and also harden the home network. More for fun rather than paranoia (its not paranoia if they ARE watching you) lol. I also want to learn about these processes. I’m fairly well versed in VM creation and operation. Instead of having different hardware I may attempt this virtually.
I also have another issue of the infrastructure of my network I think will effect how I do this. I have 3 Wifi nodes. ASUS RT-AX92U wifi 6 router/nodes for a mesh network. This means some devices are not hardwired to eachother. One that acts as my router which has a number of features I need to investigate along this guide to see if I can implement them such as https for the home network. I have to see if VLANs passthrough this device or not. I also have 2 managed cisco switches I can use for VLAN’s I may attempt to use.
I also need to learn network adapter teaming and see if I can activate that on my router/nodes because I believe it is a feature for my LAN. Then activate it on both the Ryzen server (MAIN) and the test server Dell Poweredge T420. Once this is better understood, and working I will attempt a 10G network with my servers through my switch.
So, thank you so much for all of this documentation for reference and as a guide for people to review.
3 Likes
if you scroll up wendell mentions 2.5G or 5G ethernet being a cheaper endeavor if you dont want to go full 10GBE…
My upgrade a decade from now will probably be 40 GBE and wifi standard at the time hopefully an open board somewhere like I have.
I stuck with all open source at first for a meme but it became a thing and actually way nicer than I thought
1 Like
Thank you for this. I currently have a Cisco SG500X-24 24-Port GB with 4-Port 10-GB Stackable Managed Switch - Cisco I picked up for cheap. (Discovered a faulty fan connector throwing codes do rigged it in true @GigaBusterEXE fashion with external USB fans. I’ll post pictures sometime. It has 4 SPF+ 10G ports. I’m sure I can find something reasonable to use. I only plan to connect my two servers and possibly a gaming PC for game downloads from a steam cache I hope to create.
Here is a general map of the network.
Alot of that needs to be updated. This is a work in progress because i want to switch from the default net structure once I learn more about how to do it properly.
I guess my big question is should I plan on a firewall device pre my first ASUS RT-AX6100 RT-AX92U Router OR can I route traffic through one of my other servers to protect it? Also, The Pi services IE Pi-hole and OpenSense, can they be ran on a server as well? Can I use the managed servers in some way to help secure the network? I dont think WRT will work on my nodes/router… can I use any of my other devices to make up for this functionality? Virtualize it?
I attempted to look up the RT-AX92U and I cant find if it is able to passthrough VLAN tags and traffic if that’s another way I can secure the network traffic.
I know these are very general questions and I may not be using the correct terminology, but I am just planning at this point and LEARNING. I am still doing a lot of reading.
I appreciate the amazing write-ups again, and I’m still planning. I’ll attempt some more education before I attempt too much to try to ask more educated questions. Sorry to waste your time.
2 Likes
Not wasting my time at all. I’m just mobile and in the mountains so my answers are limited to my phone and how much I can write texting lol.
So this depends on how complicated you want to get. There are devices called trunk firewalls where you dedicate a port on your switch to trunkating all data up and down that way for your firewall or you may place it inline
Here is the key, you do not want your routers/mesh doing ANY network address translation or NATing. Does that make sense?
You want the firewall device to handle all the routing, NAT etc. Making the APs just dumb mesh APs
If that makes sense to you. Otherwise tell me where I lost you.
1 Like
Makes sense. I just wonder how much horse powers needed… also the network structure is FAR from ideal as I have to use 3 wifi aps because my wife won’t let me run ethernet cables in the walls. I have a image of it some where… yeah it’s in a above post. That’s a general outline… I will be adding in 10G in the office between 2 servers and a pc.
Just wanted to see how you feel about this wifi/mesh node. Its what I use as a router/node throughout my house (I have 3). I chose it because it was wifi-6 and uses that as the backhaul band to connect the AP’s because I do not have hardline ethernet through the house.
1 Like
They are pretty solid from what I know but they won’t have any third party firmware if that’s a concern. (ASUS+Broadcom)
Not as long as security on them is fairly good… if not I add a pfsense or something in there to make it better. I am still using it for ip configs etc. I can move to another device though.
Yeah I can do the firewall, but the wrt router I can’t ditch my wifi nodes…wifi 6 cost me a arm and leg lol
1 Like
then dont ditch them. If you are worried about them phoning home then block them from accessing their “home” upgrade the firmware manually. If this is a concern otherwise just run the wifi 6 nodes into a switch then into a firewall
(im assuming they are all part of the same LAN)
1 Like
Well yes and no… lol more on that tomorrow lol time for sleep for me…
1 Like
No worries explain when you want
1 Like
I don’t have ethernet through the house… so I have to use wifi connections between rooms and to connect to the internet. My lab equipment is all in the man cave. I’d need to figure out how to make these dumb APs or best encrypt traffic over them… I also have two managed switches I’d like to use for isolation or vlans maybe but I don’t know if the wireless aps can send traffic with that tag on the data. I’ve been doing some more reading on networking as I am very weak in that area.
I know I can’t use the wrt trick like you did, but maybe I can do some of the same things with my routers in the mesh network…? I’m not too sure yet.
Could always use MoCA adapters from switch to other rooms, that way your nodes are wired backhauled without the need of actually running cable throughout the house.
2 Likes
Sadly there isn’t that in any rooms either… yeah wife was stingy when it came to having outlets in the rooms when she had the home built…before I was in the picture… I tried power-wire networking but its dodgy and too slow for my needs… one connection was at 35 Mbits… 
MoCA runs off coaxial. So your existing cable run. If the home was built anytime before streaming services are as popular as they are now, coaxial would of been ran.
1 Like
Nope, not there only in livingroom. She’s never had cable. She used to use one wireless router in her office in the front of the house.
Its basically a bridge… Or dumb switch … If they have bridge mode it might function as this but it will remove every single advanced feature
1 Like