Building my own border router + a wireguard love story
summary
Builds a fanless Debian 10 border router on a PC Engines APU4d4 with 4x Gbit ports and PCIe SSD, using PPPoE over VLAN2 for NBN and kernel sysctl tuning to survive floods. Implements iptables + ipset prerouting drops, country block feeds, and DNSmasq that only permits outbound IPs previously resolved by DNS. Runs WireGuard as an always-on VPN (client and remote endpoint in the Netherlands) with policy-based routing for geo-tunnelling and example configs and connection limits included.
AI-written summary · about
chapters (26)
- 0:00Introduction
- 1:45What Im doing
- 3:55Software
- 6:45Disk Layout
- 9:18Interfaces
- 10:55Internode
- 12:48Kernel
- 14:58ARP Filter
- 17:27More stuff
- 18:59IP tables
- 21:27Syn Proxy
- 22:14Logging
- 23:21Prerouting
- 26:00MBlock
- 28:59IPset
- 30:35Input table
- 33:04Forward rules
- 34:46DNS mask
- 36:10IP mask
- 37:14Wireguard
- 38:33Config
- 39:25Roaming laptop
- 40:51VPN host
- 41:15Policy based routing
- 42:22Priority rounding
- 43:28Questions
related talks
45mBuilding my own border router + a wireguard love story
01h 14mTutorial: Securing Access to and from Remote Systems with WireGuard and Linux
20mConnecting, Securing and Optimising Enterprise Networks with Free Software- 01h 14mTutorial: Securing Access to and from Remote Systems with WireGuard and Linux
57mOur path to open-source routers
41mModding Security & Privacy
09mDIY security and privacy: roll your own VPN in 10 minutes
37mWireGuard and the Future of Cloud Networking