Live data from Hacker News

Avoid ISP Routers (2024)

routersecurity.org

121–130 of 210 posts

Re: Avoid ISP Routers (2024)

#121
post #9

At home I go from the modem to a Firewalla and then break out to the WiFi. Our needs at home are pretty simple though. https://firewalla.com I have been quite happy with the experience.

i hope so at $100-$125/port

> i hope so at $100-$125/port

Ooof. pfSense on retired hardware is cheap, like free. Using them since 1.2.something. Mid 00's.

Re: Avoid ISP Routers (2024)

#122
post #66

Often hard to use your own stuff with fiber systems. I get AT&T fiber which is pretty good service but no way to use your own “modem” (optical network terminal). I think their gateway suffers from some kind of buffer issue which affects me even w/ “ip pass through” to my own Synology router.

> Often hard to use your own stuff with fiber systems.

This is the 2nd time I've heard this in this thread and it baffles me. Setting up a fiber connection is how I know I won't have to fight for control at the edge.

> I get AT&T fiber...

Okay, okay. AT&T excepting but that goes without saying. Wherever they are you want to be elsewhere.

Re: Avoid ISP Routers (2024)

#123
post #98
post #19

I run my own homelab and have a Ubiquiti gateway (UDM). I would have loved to have the fibre connection come directly into my box uninterrupted but the ISP's modem is required to associate the connection with my account (or something to that effect). Deeply disappointing.

That’s pretty normal for fiber. They usually want their own device at the end of it

Funnily or tragically enough I opted for the 3gig service from my provider and they require their modem however the same provider on the 1gig service supports using your own ont so long as you use their gpon / SFP whatever.

Re: Avoid ISP Routers (2024)

#124

What about: I use the ISP router for support convenience then I turn off its wifi and daisy chain a second router I set up?

This is my solution, although my ISP box has no WiFi, thankfully. Their box is a totally locked down, "business" service bridge. Behind that is my MikroTik RB5009UPr+S+in, doing packet filtering, NAT, VLAN, PoE to access points, etc. I don't really care about the ISP box.

Re: Avoid ISP Routers (2024)

#125
post #74
post #19

I run my own homelab and have a Ubiquiti gateway (UDM). I would have loved to have the fibre connection come directly into my box uninterrupted but the ISP's modem is required to associate the connection with my account (or something to that effect). Deeply disappointing.

More and more I see articles and videos about programmable SFP modules which can be used to directly connect devices like UDM to GPON/XG(S)-PON networks, completely bypassing the ISP provided ONT. You may well find something that fits your situation with a little searching.

I have looked into it but I'm a little nervous to touch the hackjob fibre install they did and they cut the cable WAY short. I even asked the tech to leave cables as long as possible but

FWIW their box isn't bad once you put it in bridge mode. I have 10gig on my lan and 3gig to the edge and the connection is impressively stable at 3gig. I get 1 ping sometimes when playing Fortnite -- I'm on Vancouver Island. Comical if not inaccurate.

My only real issue with having their box is it sucks maybe 30watts ... Removing it would give me an extra 20 or so minutes on my UPS.

Re: Avoid ISP Routers (2024)

#126

I wish. I own my own modem and router, but Comcast won’t let me use them unless I pay a whole bunch of extra fees or accept a stupidly low monthly data cap. I’ve got my router downstream of theirs which is a bit annoying, especially considering their modem-router combo overheats and needs to be rebooted via unplugging power at least once a month. Sadly I have no other options here in San Francisco. My house is not wi…

> needs to be rebooted via unplugging power at least once a month.

This (or a memory leak, anyway, something) is why I have my ISPs modem (I luckily can disable the router part; I think that might actually be EU mandated) on a smart plug. When my internet fails, I check to see if the modem is reachable, if it’s not, I go to Home Assistant, turn it off for 10 seconds and then turn it on again.

I guess I could automate it, but every 1-1.5 month is not enough to make me bother.

Re: Avoid ISP Routers (2024)

#127
post #105

Xfinity (Comcast) is uploading their own firmware to my netgear which I have purchased on amazon. So one may (rightfully) assume that they have their own backdoors there too; otherwise why would they bother doing that.

But how do they do that? Doesn't this require basically root access to the router? If you give it to your ISP, then the router is ISP's as much as yours, until they cut your root access off %)

Re: Avoid ISP Routers (2024)

#128
post #83
post #66

Often hard to use your own stuff with fiber systems. I get AT&T fiber which is pretty good service but no way to use your own “modem” (optical network terminal). I think their gateway suffers from some kind of buffer issue which affects me even w/ “ip pass through” to my own Synology router.

There are ways now (as in, very recent) to bypass the ONT for AT&T, people have developed custom GPON SFP module firmware that lets you connect directly. There are also multiple ways to bypass the gateway authentication, be it extracting the certificates or doing Ethernet proxying of the authentication frames.

That’s cool to hear! Sounds like it will need a weekend project some time

Re: Avoid ISP Routers (2024)

#129
post #37

Earlier quoted context omitted.

I live in SF and Comcast doesn't charge me to have my own router. I pay $130 for 1.4gbit and unlimited data. It's expensive but I also have no other choices. Sonic stops only one block over and we haven't been able to convince them to wire up my block.

he said modem... he also have own router dowstream.

Sorry yes I meant modem

Re: Avoid ISP Routers (2024)

#130

I wish. I own my own modem and router, but Comcast won’t let me use them unless I pay a whole bunch of extra fees or accept a stupidly low monthly data cap. I’ve got my router downstream of theirs which is a bit annoying, especially considering their modem-router combo overheats and needs to be rebooted via unplugging power at least once a month. Sadly I have no other options here in San Francisco. My house is not wi…

Manwhile i live in a rural area 10kms away of a little town in the south of Chile with FTTH with 1gbit symetrical with Static ip address really unlimited (no CAP of anytype) with one deco for my tv for 24 usd a month with an installation that cost me 30 usd. Should i add i hace to use rainwater because no potable wáter Is available?

Same here (except Chile). It's weird/sad/expected because of Comcast & others that the US are still not reliably connected everywhere. From the country that brought us the internet!? In my (European) country, you have to live in a swamp far away from everything to not have FTTH legibility, in the same ballpark prices as the comment above. Static IP as a (free) opt-in.
Post reply on HN