Live data from Hacker News

Avoid ISP Routers (2024)

routersecurity.org

71–80 of 210 posts

Re: Avoid ISP Routers (2024)

#71

Some of the comments here about ISP behaviour are crazy. Australia has had our fair share of fucking up the national internet infrastructure but at least I can pick pretty much any ISP and use any router I like. Haven't used an ISP supplied router in something like 15 years.

All over the US I have always been able to use my own cable modem and router. OPs situation is unusual, I am guessing its some bundle they have for a discount but if they were paying standard (ie ripoff) rates they could use their own equipment.

This thread made me realize dslreports.com has "closed".

Used to be you could find out there what works and what doesn't down to the chipset variations. My experience was same as yours, as long as I matched provider capabilities, it worked.

Re: Avoid ISP Routers (2024)

#72
Yep, I just run my own Linux build on any SBC with at least a single gigabit port, currently that's Quartz64-A. I've never been happier with my home router and flexibility of configuration/what I can do with it, than just running a regular fully fledged Linux distro on it.

Re: Avoid ISP Routers (2024)

#73
post #56

Any desktop computer + Intel dual GB NIC + opnsense and you have an amazingly powerful router. Add in a Raspberry Pi running the Omada controller software and some Omada access points and you have an inexpensive and very robust WiFi network. Don’t forget to turn on auto updates for opnsense.

I run OPNSense inside Proxmox on a cheap fanless Intel N100 box. VM-level snapshots and backups are heavenly. Can't believe I avoided it for so long.

Same. I pass through a QSFP+ nic that I bought for 15$ or something and I have been very happy with the VLAN set up.

Now if i can find a soundproof server rack so i can put my noisy servers without noise seeping through the house.

Re: Avoid ISP Routers (2024)

#74
post #19

I run my own homelab and have a Ubiquiti gateway (UDM). I would have loved to have the fibre connection come directly into my box uninterrupted but the ISP's modem is required to associate the connection with my account (or something to that effect). Deeply disappointing.

More and more I see articles and videos about programmable SFP modules which can be used to directly connect devices like UDM to GPON/XG(S)-PON networks, completely bypassing the ISP provided ONT.

You may well find something that fits your situation with a little searching.

Re: Avoid ISP Routers (2024)

#75
post #39

Sadly I am not able to outright get ride of my ISP router. I am here in Canada on Shaw, well it recently was taken over by Rogers, and we can not just use our own. We can put the modem into bridge mode and connect to it but not get ride of it completely. I am not sure if bridge mode would stop much of the security concerns but my gut says no.

Once in bridge mode it's no longer acting as a router, so it should mostly be fine. The firewall on your actual router will be present between the modem/internet and your machines.

Great thank you for the information. I've held off on getting a half decent router as there is so much to know. I've always wanted to get one I can put my own firmware and the benefits they have but just not sure the best route. I also have lots of people in the house so want something that can handle many connections at once like 10 devices says. The isp router only has 4 Ethernet ports which a couple more would be handy so that is also a wish list. Anyways thank you I will look into it a bit more.

Re: Avoid ISP Routers (2024)

#76
post #59

AT&T Fiber's routers have, in the past, had a tendency to overheat, offered false promises like "DMZ Plus" mode and have had a host of issues that led to a black market of people selling stolen AT&T certificate files [0] on the internet so you could bypass them, because they use 802.1x between their "Router/gateway" combination device and their ONT, when they're separate devices. The AT&T XGS-PON network is mostly co…

As someone who has done this I take issue with characterizing the certificates as stolen. I exploited a security vulnerability in the device's web UI to extract them, from a piece of equipment I paid for. Its my equipment the provider required me to buy it for service, I can do with it as I please.

I would be in agreement with it if we were using all this to steal service, we just don't want to use their unstable and unacceptable equipment.

Re: Avoid ISP Routers (2024)

#77

Earlier quoted context omitted.

I'm so jealous of SF internet options. In LA I pay $105 for "supposedly" 2-300mbit, but this week I've been seeing 30. I keep looking for alternatives but haven't found any in my area.

I'm guessing a 5G mobile option is too expensive. In the UK I have a 3Mobile (Smarty unlimited data) 5G connection, using an MC801, for £20/m and I get around 1gb/100mb with it - until the tower hits a busy period, then it drops to about ~500mb/20mb

I'm guessing a 5G mobile option is too expensive.

It's more about availability.

I have 5G for home internet, and it's $55/month, including taxes. I get 100 to 300 mbps, though during lunch on weekdays that can slow to 50.

There are two other 5G Home Internet providers in this state. One wants $100/month for 5-100 mbps. The other won't let me sign up because it doesn't have the capacity where I am.

Re: Avoid ISP Routers (2024)

#79

Some of the comments here about ISP behaviour are crazy. Australia has had our fair share of fucking up the national internet infrastructure but at least I can pick pretty much any ISP and use any router I like. Haven't used an ISP supplied router in something like 15 years.

I've never had an issue with using my own hardware here. It's definitely one of the only good things about australian internet.

Regionally is a total crapshoot as to ISP choice, in my experience. Even in the massive regional cities it's often appalling. People living in rural or remote areas might as well not exist. If I moved somewhere that only telstra serviced I'd seriously consider just not having internet at all. It's roughly equivalent in internet access as paying telstra but it sure is cheaper!

Post reply on HN