Building my own border router + a wireguard love story
summary
Builds a home border router on a PC Engines APU4d4 running Debian 10 with a PCIe SSD, PPPoE over VLAN2 to NBN HFC, bridged ports for a small switch and jumbo frames, and kernel sysctl tuning to fix conntrack and SYN handling. Uses iptables/ipset with early mangle prerouting, geo and bogon feeds, DNSmasq tied to an ipset so only DNS-resolved IPs egress, and policy routing to a remote WireGuard VPN endpoint for geo-tunneling. Includes configs and scripts on GitHub.
AI-written summary · about
chapters (26)
- 0:00Introduction
- 1:45What Im doing
- 3:55Software
- 6:45Disk Layout
- 9:18Interfaces
- 10:55Internode
- 12:48Kernel
- 14:58ARP Filter
- 17:27More stuff
- 18:59IP tables
- 21:27Syn Proxy
- 22:14Logging
- 23:21Prerouting
- 26:00MBlock
- 28:59IPset
- 30:35Input table
- 33:04Forward rules
- 34:46DNS mask
- 36:10IP mask
- 37:14Wireguard
- 38:33Config
- 39:25Roaming laptop
- 40:51VPN host
- 41:15Policy based routing
- 42:22Priority rounding
- 43:28Questions
related talks
45mBuilding my own border router + a wireguard love story
01h 14mTutorial: Securing Access to and from Remote Systems with WireGuard and Linux- 01h 14mTutorial: Securing Access to and from Remote Systems with WireGuard and Linux
20mConnecting, Securing and Optimising Enterprise Networks with Free Software
57mOur path to open-source routers
07mHome Lab for fun & profit
41mModding Security & Privacy
30mRunning an OpenThread Mesh Network with Linux and Zephyr