Setting up an internet connection for a home network... Ideal for enjoying Minecraft with children.
Setting up an internet connection for a home network... Ideal for enjoying Minecraft with children.
I don’t want to set up a Minecraft server because it limits you to just one option. I like the freedom to explore other ideas. The more I research, the more I realize I should opt for a monthly subscription instead of committing to a single game. Yuck...
You may face slow UDP attacks that disrupt your network intermittently, making it vulnerable to further exploitation. Even with ample bandwidth for these packets to reach your firewall without overwhelming your switch, they can still overwhelm your defenses. Using a proxy server to mask your IP through DDoS scrubbing is advisable if you expect multiple users due to conflict. For example, an admin who believes they were unfairly demoted might launch a DDoS attack on the server. If your device lacks sufficient LAN power to handle packet processing, even minor attacks can cripple it. Hardware routers offer greater capacity and can endure IPv6 DOS assaults. Additionally, exposing certain ports can expose you to risks like smurf packets. With a correctly set firewall, specific threats can be reduced.
Various self-hosted VPN solutions are available depending on your budget. To keep your computer online only when necessary, consider using a 1GB Raspberry Pi 4 with full gigabit ports as your VPN gateway. Ensure it’s configured to block all traffic except for a specific account with a strong password or better yet, implement certificate-based authentication. Searching online provides detailed instructions, including how to forward ports—often using non-standard ports for added security through obscurity.
It might not be optimized for full gigabit performance, but it should work well under typical conditions. The average speed seems around 200 Mbps, which is sufficient for Op’s requirements.
For the VPN I prefer is less than AES-256-GCM, though I’m curious about the typical performance and latency.
I own a unit with an active fan, which means it can vary in volume depending on the model. Adding to this, there are cases such as the flirc case that feature a metal body connecting directly to the CPU, serving as a passive cooling solution. I’m leaning toward that option more. The model I currently use remains quiet thanks to its fan, while another is extremely loud. It’s disappointing because they’re identical fans and cases. However, since I have servers at home, I can install this equipment when required. I mainly play with Pi boards, which are enjoyable to experiment with. Still, the Pi hole is essential, and with a 4GB Pi 4 you could integrate IDS/IPS systems if you have access to data (like via a span port). *more talking* Personally, I’m trying to set up my own SIEM at home using ELK. If I can achieve proper correlation, placing an IP ID before and after the router would be ideal. If I manage to configure an MX sandbox, it could monitor incoming emails. All I need is to ensure emails route correctly into O365. Security matters, but for a teenager it’s almost essential.