Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #231528

Re: Security: OpenWRT vs. Debian [Was:] Re: Linux router AP with reserved IPs on wlan0?

Show all headers | View raw

On Mon, 8 Feb 2021 11:03:35 -0500
Dan Ritter <dsr@randomstring.org> wrote:

> Celejar wrote: 
> > > I can be glad that OpenWRT has improved their security practices
> > > and simultaneously not be interested in using it.
> > 
> > I think we are really in basic agreement. The reason I use OpenWRT is
> > that I use a residential all-in-one WAP / switch / router, which Debian
> > is unsuitable for. If I ever go the separate WAP / switch / router
> > route, I'll probably use Debian on the router for the reasons you
> > give: good support, a system I'm familiar with, etc.
> 
> Debian works well in this situation. You just need to arrange
> for enough NIC ports to meet your needs.
> 
> If you are OK buying used equipment, Intel-based gigabit NICs, 4 ports
> to a PCIe slot, cost about $35 (or $70 new). If you've got a 5 year old

My understanding - please correct me if I'm wrong - is that with those
types of cards, the ports are distinct and aren't actually switched in
hardware, so switching occurrs at the OS / kernel level. I don't know
how much of a load this puts on the system in practice, but my
understanding is that it's certainly not an ideal way to design a
switch.

> desktop sitting around with 2GB or more RAM and 3 available PCIe slots,
> you can use it as a WAP and have nine switched/routed gigabit ports,
> counting one on the motherboard.  If you only need 5 ports, you only
> need 2 PCIe slots -- one for a WiFI NIC and one for the ethernet NIC.

My understanding, although I could not find solid documentation of this,
is that consumer wireless chipsets designed for client use don't make
particularly performant APs. They'll work, but purpose built APs will
perform much better, especially with their AP optimized antennas. I
don't really know if this is true, though, and to what extent it's an
issue, if it really is one.

And the power usage on a five year old desktop (which I don't actually
have) will be much higher than a purpose-built AIO AP / switch / router.

> Debian has hostapd and dnsmasq packages.

But again, I don't really disagree. If I had the hardware lying around,
and I determined that the power consumption wasn't a factor, it would
certainly be tempting to consider this route.

Celejar

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Linux router AP with reserved IPs on wlan0? conover@rahul.net (John Conover) - 2021-02-06 11:30 +0100
  Re: Linux router AP with reserved IPs on wlan0? <tomas@tuxteam.de> - 2021-02-06 11:50 +0100
  Re: Linux router AP with reserved IPs on wlan0? Dan Ritter <dsr@randomstring.org> - 2021-02-06 13:10 +0100
  Re: Linux router AP with reserved IPs on wlan0? Stefan Monnier <monnier@iro.umontreal.ca> - 2021-02-06 16:20 +0100
    Re: Linux router AP with reserved IPs on wlan0? conover@rahul.net (John Conover) - 2021-02-06 20:10 +0100
      Re: Linux router AP with reserved IPs on wlan0? Tixy <tixy@yxit.co.uk> - 2021-02-07 10:10 +0100
        Re: Linux router AP with reserved IPs on wlan0? conover@rahul.net (John Conover) - 2021-02-07 10:40 +0100
  Re: Linux router AP with reserved IPs on wlan0? Gregory Seidman <gsslist+debian@anthropohedron.net> - 2021-02-08 03:30 +0100
    Re: Linux router AP with reserved IPs on wlan0? Dan Ritter <dsr@randomstring.org> - 2021-02-08 12:50 +0100
      Security: OpenWRT vs. Debian [Was:] Re: Linux router AP with  reserved IPs on wlan0? Celejar <celejar@gmail.com> - 2021-02-08 14:10 +0100
        Re: Security: OpenWRT vs. Debian [Was:] Re: Linux router AP with  reserved IPs on wlan0? Dan Ritter <dsr@randomstring.org> - 2021-02-08 14:40 +0100
          Re: Security: OpenWRT vs. Debian [Was:] Re: Linux router AP with  reserved IPs on wlan0? Celejar <celejar@gmail.com> - 2021-02-08 15:40 +0100
            Re: Security: OpenWRT vs. Debian [Was:] Re: Linux router AP with  reserved IPs on wlan0? Dan Ritter <dsr@randomstring.org> - 2021-02-08 16:00 +0100
              Re: Security: OpenWRT vs. Debian [Was:] Re: Linux router AP with  reserved IPs on wlan0? Celejar <celejar@gmail.com> - 2021-02-08 16:30 +0100
                Re: Security: OpenWRT vs. Debian [Was:] Re: Linux router AP with  reserved IPs on wlan0? Dan Ritter <dsr@randomstring.org> - 2021-02-08 17:10 +0100
                Re: Security: OpenWRT vs. Debian [Was:] Re: Linux router AP with  reserved IPs on wlan0? Celejar <celejar@gmail.com> - 2021-02-08 21:40 +0100
                Re: Security: OpenWRT vs. Debian [Was:] Re: Linux router AP with  reserved IPs on wlan0? Dan Ritter <dsr@randomstring.org> - 2021-02-08 22:50 +0100
                Re: Security: OpenWRT vs. Debian [Was:] Re: Linux router AP with  reserved IPs on wlan0? Celejar <celejar@gmail.com> - 2021-02-09 00:30 +0100
                RE: Security: OpenWRT vs. Debian [Was:] Re: Linux router AP  withreserved IPs on wlan0? Michael Grant <mgrant@grant.org> - 2021-02-09 13:00 +0100
                Re: Security: OpenWRT vs. Debian [Was:] Re: Linux router AP with reserved IPs on wlan0? Stefan Monnier <monnier@iro.umontreal.ca> - 2021-02-08 17:30 +0100

csiph-web