Hello selfhosted.

My router just burnt up and instead of buying a new one, I’m thinking of turning my own built NAS/home server into a router. Is this possible?

The server in question is a normal computer running debian, where I have a few disks in RAID and host some web services. The motherboard only has one RJ45 port, so my guess is that I have to at least get a network card that supports 2 ports. I’m no stranger to linux but physical networking is not my home field, though I’m very interested.

If someone could point me in the right direction, I would be more than happy.

  • rtxn@lemmy.world
    link
    fedilink
    English
    arrow-up
    11
    ·
    edit-2
    21 days ago

    You can use OPNSense inside a virtual machine. You can use QEMU or install the Proxmox toolkit over Debian to manage it. I’ve been using this setup for years without issue.

    You’ll have to create a bridge network for the WAN and the LAN interface, connect them to the VM, then configure the virtual interfaces inside OPNSense.

    • Toralv@lemmy.worldOP
      link
      fedilink
      English
      arrow-up
      3
      ·
      21 days ago

      Ah I see, did not think of that. A network card with two ports would be enough right? One for the modem, and the other for clients, which ideally could be a switch, for more ports. That’s possible right?

      • rtxn@lemmy.world
        link
        fedilink
        English
        arrow-up
        6
        ·
        21 days ago

        Yes, that will be enough. You can also use a single port on the NIC and the one on the motherboard if it can handle the ethernet speed you want.

        This is my network setup on Proxmox:

        vmbr0 is a bridge that has a single port going to the modem. The OPNSense VM’s first virtual interface is connected to this and configured as a WAN interface. Nothing else connects to this bridge as it is exposed to the internet.

        vmbr1 also has a single port that goes to the physical switch. OPNSense’s second interface connects to it as a LAN port, as well as every other VM and container running on the server.

    • Dultas@lemmy.world
      link
      fedilink
      English
      arrow-up
      2
      ·
      edit-2
      20 days ago

      Only issue I’ve had with this setup is if you’re running in a cluster and you have to restart the cluster then you run into a deadlock. The cluster won’t start VMs without a quorum and it can’t form a quorum without the OPNSense VM up. So you have to manually intervene.

  • talkingpumpkin@lemmy.world
    link
    fedilink
    English
    arrow-up
    11
    ·
    20 days ago

    Not sure if others already said this (I seem to see mostly comments explaining how to do it, but didn’t read them all), but, while it’s certainly feasible, you may not want to do that.

    A router is the cornerstone of your network (if it goes down, so does the network) and if you are a self-hoster you’ll probably fiddle endlessly with your home server, and of course break it from time to time… the two things just don’t go well together.

    Personally, I’d recommend getting some second-hand router appliance that can run openwrt and use that (make sure to check the flashing procedure before deciding what to buy - some are easier than others). Or you could get a dedicated x86 machine… probably overkill though.

    • Toralv@lemmy.worldOP
      link
      fedilink
      English
      arrow-up
      2
      ·
      20 days ago

      I truly understand this sentiment, and if I ever find it troublesome to maintain, I will do just that, but right now I just want to use this as an excuse to fiddle around haha ;). I don’t run anything high-profile and my server uptime is still on par with the frequent power outages in my area

  • suicidaleggroll@lemmy.world
    link
    fedilink
    English
    arrow-up
    6
    ·
    20 days ago

    OPNSense is a great option for turning x86 hardware into a router. That said, I would not recommend combining your router with other functionality. The router should be a dedicated system that only does one thing. Leave your NAS and web services on another machine.

  • ObM@lemmy.world
    link
    fedilink
    English
    arrow-up
    3
    ·
    edit-2
    21 days ago

    First question. Was your router also your modem? As in describe each connection/device from street until you get to your router. (Do you also know your connection type? Some flavour of DSL, HFC, Fiber?)

  • boydster@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    2
    ·
    edit-2
    21 days ago

    First thing I’d troubleshoot… Is your router the issue, or the modem that decodes the signal from your ISP?

    Last I checked, router/AP stuff is pretty easy to DIY (OpenWRT, PFsense, etc). But that’s the step after the modem has done what it needs to do.

    • Toralv@lemmy.worldOP
      link
      fedilink
      English
      arrow-up
      2
      ·
      21 days ago

      Sorry I was probably not very clear on one part, I’m looking to run a router additionally to my already existing debian installation. OPNsense seems very nice, but that would require me switching to FreeBSD, which I’m not very keen on right now.

      • bacon_pdp@lemmy.world
        link
        fedilink
        English
        arrow-up
        1
        ·
        21 days ago

        Well all Linux systems can easily be turned into routers if they have 2 or more networking ports.

        All you have to do is enable routing, the firewall rules for routing internal traffic and restrictions on external traffic, and dhcp services to the internal network (assuming that you don’t have a dedicated dhcp server)

        Here is an example: https://github.com/dhenkes/router

        Basically any Linux router guide (for any Linux distribution) can be used with minimal translation as they are all going to be using the exact same software with virtually identical configurations.

  • Avid Amoeba@lemmy.ca
    link
    fedilink
    English
    arrow-up
    2
    ·
    20 days ago

    As others have mentioned this is practical with a VM. It might also be doable with Docker, saving some resources.

  • rmrf@lemmy.ml
    link
    fedilink
    English
    arrow-up
    1
    ·
    20 days ago

    I’ve gone down this path.

    You want an archer c7 with OpenWRT. I got one for 5 dollars on marketplace, flashing it took all of 2 minutes, and it kicks ass.

  • ftbd@feddit.org
    link
    fedilink
    English
    arrow-up
    1
    ·
    20 days ago

    A router is not a network switch is not a wireless access point. Using the machine as a router works with one ethernet port.

    I would still not recommend this approach, as your network will be unusable when this machine goes down.

  • ObM@lemmy.world
    link
    fedilink
    English
    arrow-up
    1
    ·
    20 days ago

    Hey there! Sorry, I got busy with work today.

    I was just noticing that you have plenty of replies. I think you seem to have enough to go on with.

    If you still need anything, hit a reply to this one and I can give you my 2-cents worth of opinion.