this post was submitted on 03 May 2026
27 points (96.6% liked)

Selfhosted

58927 readers
463 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

  1. Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.

  2. No spam posting.

  3. Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.

  4. Don't duplicate the full text of your blog or github here. Just post the link for folks to click.

  5. Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).

  6. No trolling.

  7. No low-effort posts. This is subjective and will largely be determined by the community member reports.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 2 years ago
MODERATORS
 

I'm trying to make my first server (Immich + Navidrome + Nextcloud running on Debian, will use WireguardVPN for remote access), but my crappy XFinity router (XB7) just won't port forward at all to my server machine. I've tried so many things to make it work, so the best thing I can do now is buy my own router so that I can just use the Xfinity router as a bridge. Do you guys have recommendations for a secure, customizable enough, and long-distance router good for 6 people?

top 26 comments
sorted by: hot top controversial new old
[–] HiTekRedNek@lemmy.world 4 points 6 hours ago (1 children)

Used SFF PC: $40

Pcie 10gbe network card: $30

OPNsense: free

Done.

[–] dubyakay@lemmy.ca 1 points 1 hour ago

Where can I get SSF PC for $40? What am I looking for in particular?

[–] Ferawyn@lemmy.world 3 points 8 hours ago (1 children)

If you want a complete unit with custom hardware and tuned custom software, look at MikroTik. Solid hardware, dependable software, good support, good community.
If you want to build your own, grab any multi-ethernet micropc from aliexpress and install OPNsense. Cheap and flexible. But you'll be on your own once (not if) something fails.
Both of these are essentially pro-level options with lots of headroom to build up to advanced services. I'd stay away from OpenWRT which is essentially just an open source consumer grade wifi router image. You'd be replacing your crappy (but supported) router with the same thing just without support.
One other option I would mention if you like nice centralized web ui's, have a look at Ubiquiti's Unify. If you can afford to go all-in on a Unify router, backbone switch and wifi access points, the combined management is really a step above the competition.

[–] dubyakay@lemmy.ca 1 points 1 hour ago

How do you find those micropcs on Ali?

[–] French75@slrpnk.net 4 points 10 hours ago

I bought a minipc and put OPNsense on it. Its been just over a year now. Very flexible, very easy, and rock solid.

[–] turbowafflz@lemmy.world 18 points 15 hours ago (2 children)

keep in mind it may not be your router's fault you can't accept incoming connections, you may be behind cgnat. if you are, you need a reverse proxy like cloudflare tunnels

[–] cravl@slrpnk.net 10 points 12 hours ago

Cloudflare tunnels is more than just a reverse proxy, but agreed. That might be the better option regardless. If you're Cloudflare-averse, you can use Tailscale funnels, or spin up your own rproxy+tunnel solution (there are plenty out there, such as Rathole, Zrok, or frp).

[–] ranslite@pie.dasneuland.de 1 points 14 hours ago

I am behind cgnat and my fritzbox buildin wireguard allows me to connect to my home network from outside.

[–] utjebe@reddthat.com 7 points 13 hours ago (1 children)

You can get dirt cheap routers on eBay (like $30, for Tp-Link) that have active support on OpenWrt. Great little devices to get you started and if it won't be enough you will know more / what you need to upgrade.

However if your XB7 isn't doing / allowing port forwarding, you will still needed that for things to work.

[–] grue@lemmy.world 4 points 12 hours ago* (last edited 12 hours ago) (1 children)

I second the recommendation for TP-Link running OpenWRT (that's the important part).

I've been using a few Archer C7s for going on a decade at this point. (So long that they went from "OpenWRT" to "LEDE" to back to "OpenWRT", LOL!) They've been working fine that whole time, and the only thing that annoys me about them is that they're a funny shape instead of being rack-mountable.

[–] eutampieri@feddit.it 2 points 10 hours ago (1 children)

Beware! Now there’s a hardware revision for a TP-Link router (I think the C7) that is not supported by OpenWrt and never will

[–] adarza@lemmy.ca 1 points 5 hours ago

we were looking awhile back for one, but none of the tplink models at walmart (the only retailer with routers within 50 miles) supported flashing with a third-party firmware and i didn't want to shop online for one.

we sorta lucked-out, though.. ended up just using the one from our old provider since they never asked for it back or charged us for it. it's dual band, has wpa3, guest ssid and vlan. enough for us for now. all we had to do is flip a setting from dsl uplink to wan uplink.

[–] pulsewidth@lemmy.world 10 points 14 hours ago (1 children)

I use very popular router by Gl.Inet called Flint 2 (GL-MT6000). Goes on special for about $125 USD. Great specs, solid device.

Fully supported by OpenWRT, and I recommend flashing to that so that you have completely FOSS software with no possibly hijinks from the manufacturer's OEM OS.

You'll need to read some guides or watch some vids to get you set up on OpenWRT, bit of a learning curve, but it has everything you could possibly need. Check it out.

[–] Nawor3565@lemmy.blahaj.zone 3 points 14 hours ago

I also vouch for GL.inet routers, they also have a 5th gigabit port that was nice to have since all 4 of the ones on my old router were full.

[–] Shimitar@downonthestreet.eu 8 points 15 hours ago* (last edited 15 hours ago) (1 children)

Anything that supports OpenWRT I would say....

Or even better buy a mini PC with many net ports and install opnSense, but in this case you will need a separate wifi router and/or dedicated switch since any opnSense device will only work at perimeter level

[–] irmadlad@lemmy.world 1 points 13 hours ago

Or even better buy a mini PC with many net ports and install opnSense, but in this case you will need a separate wifi router and/or dedicated switch since any opnSense device will only work at perimeter level

I went with this option except using pFsense in lieu of OpnSense. My own modem, router, and managed switches.

[–] xep@discuss.online 7 points 15 hours ago (2 children)
[–] tychosmoose@piefed.social 2 points 9 hours ago

Same. Moved from OpenWRT through OPNsense to Mikrotik. The performance per watt and per dollar is great.

[–] IsoKiero@sopuli.xyz 2 points 14 hours ago
[–] Cyber@feddit.uk 1 points 10 hours ago

If you're not wanting to customise too much, the Frtizbox equipment is good.

Plenty headroom for normal use.

However if you have 6 people all streaming 4k netflix and need 1mSec ping for gaming over a 10Gb link, you'll probably need to build something.

[–] Eldritch@piefed.world 6 points 15 hours ago* (last edited 13 hours ago)

OpenWRT. It's got a slight learning curve. But if you want something guaranteed to do what you want while still being upgradable. It's the solution for you. You can find pre-made Hardware that will run it. Or any old business waste computers that you can gut and rebuild any way you like to make a beast of a router if you want.

[–] Telodzrum@lemmy.world 1 points 11 hours ago (2 children)

OpenWRT gets a lot of love around here, incorrectly.

If you are willing to flash custom software to a router you bought for that purpose, you may as well just pick the better option and put pfSense or (better) OPNsense on a mini PC with two Ethernet ports.

[–] cmnybo@discuss.tchncs.de 1 points 6 hours ago (1 children)

The router running OpenWRT will usually be a lot less power hungry than a mini PC, ethernet switch and access point.

[–] Telodzrum@lemmy.world 1 points 2 hours ago

That really depends. And whether or not it matters at all depends on the cost of electricity where OP is.

[–] hendrik@palaver.p3x.de 1 points 10 hours ago* (last edited 10 hours ago) (1 children)

I think the added benefit of an OpenWRT router is, you get 3 more ports (for your TV, Playstation and PC), plus a Wifi network. And it's really hard to break it. But a MiniPC with OPNsense, of course will be more powerful. And some more advanced things have been notoriously difficult to set up in OpenWRT, maybe OPNsense does it a bit better.

[–] nitrolife@hikki.team 2 points 9 hours ago* (last edited 9 hours ago)

if you have an uplink of 1 Gbit/s or less, you can easily solve the problem of ports by purchasing a switch for $3. By the way, there is a mini PC with 4/6/8 ports and even with optical fiber.

and in general, if topic starter build own server, he can just build a router out of it too. the set of programs is not very large: kea-dhcp, radvd, iptables. that's all. for WiFi, you will need a compatible card in the server or a separate access point like ubiquity.