Best Router with VPN Firewall and AdGuard Home

Synology:

• Some users raised concerns about increasingly anticonsumer practices.
• It has limitations such as only allowing root to do NFS auth, making it insecure.

Docker:

• Users mentioned root requirements and potential complications with volumes over NFS.
• Suggestions included using iSCSI to store volumes on a compute server and setup backups on Synology.

OPNsense:

• Recommended for a setup involving WireGuard VPN and VLAN isolation.
• Advised for a secure homelab setup without compromising VLAN isolation on the Wi-Fi network.

pfSense/UniFi:

• Mentioned as options for firewall appliances with VLAN support and VPN capabilities.
• UniFi was described as more plug-and-play while pfSense was recommended for those looking to learn.

Managed Switches:

• Recommended for VLAN setups and tagged port configurations.
• Cisco, Dell, and Aruba switches were suggested for learning networking concepts.

General Recommendations:

• Using older hardware for cost-effective setups, such as Lenovo ThinkCentre or ThinkStation.
• Suggestions for Managed Switches with web interfaces or console interfaces for learning and budget-friendly options.

Tailscale:

• Some users expressed confusion about installing a VPN client like Tailscale on NAS.
• Mentioned as enabling secure connections and hosting websites through Tailscale Funnel.

DNS over TLS (DoT) and DoH:

• Recommended for secure DNS methods alongside VPNs.
• Users advised against double NAT setups for security reasons.

Additional Points:

• Consider using Ubuntu server instead of desktop for server setups.
• Keep hardware setups simple and avoid overcomplicating setups for home networks.
• Virtualizing router/firewall appliances was discussed, with varying opinions on bare metal vs. virtualization.

Pros and Cons:

• Pros of UniFi included ease of setup, while cons included limitations in customization.
• Pros of OPNsense and pfSense included advanced networking features, while cons included a learning curve for beginners.
• Pros of Tailscale included ease of use for secure connections, while cons included potential complications with network setups.
• Pros of Docker included flexibility for container management, while cons included security concerns with root access.

These recommendations cover a range of options for setting up a router with VPN firewall and integrating AdGuard Home in a comprehensive and secure way.