From 1077f37c53460c86a6dba3203d210e3617bb7e70 Mon Sep 17 00:00:00 2001 From: Julien Dessaux Date: Mon, 25 Jul 2022 00:31:54 +0200 Subject: Added home blog article --- assets/base.css | 4 ++++ content/blog/miscellaneous/gitolite-cgit.md | 2 +- content/blog/miscellaneous/home.md | 31 +++++++++++++++++++++++++++++ static/static/home.drawio.svg | 3 +++ 4 files changed, 39 insertions(+), 1 deletion(-) create mode 100644 content/blog/miscellaneous/home.md create mode 100644 static/static/home.drawio.svg diff --git a/assets/base.css b/assets/base.css index 9cec5e4..d60d821 100644 --- a/assets/base.css +++ b/assets/base.css @@ -53,3 +53,7 @@ h1, h2, h3, h4, h5 { .fullwidth { width: 100%; } +img[src*='#center'] { + display: block; + margin: auto; +} diff --git a/content/blog/miscellaneous/gitolite-cgit.md b/content/blog/miscellaneous/gitolite-cgit.md index b480082..9ef67fa 100644 --- a/content/blog/miscellaneous/gitolite-cgit.md +++ b/content/blog/miscellaneous/gitolite-cgit.md @@ -19,7 +19,7 @@ The installation is documented in the following docs articles on this website: - [gitolite]({{< ref "gitolite" >}}) - [cgit]({{< ref "cgit" >}}) -If you are following these installation notes as a guide, there is one important thing to know: I wanted to keep gitea links mostly working (at least redirecting to the correct repository), so I create all my publicly available repositories under an `adyxax` folder. This shows mostly in the cgit and nginx configurations. +If you are following these installation notes as a guide, there is one important thing to know: I wanted to keep gitea links mostly working (at least redirecting to the correct repository), so I created all my publicly available repositories under an `adyxax` folder. This shows mostly in the cgit and nginx configurations. ## Challenges diff --git a/content/blog/miscellaneous/home.md b/content/blog/miscellaneous/home.md new file mode 100644 index 0000000..b2d3b54 --- /dev/null +++ b/content/blog/miscellaneous/home.md @@ -0,0 +1,31 @@ +--- +title: My home network +description: wifi setup with transparent roaming +date: 2022-07-24 +--- + +## Introduction + +This week I have upgraded my OpenWRT access points. The new release had non compatible changes so I had to wipe the routers and reconfigure everything from scratch. I took the opportunity to document the process and will write at least two blog articles about this. This first one describes my network and the design choices, the second one will be about the OpenWRT configuration to implement these choices. + +## My home network + +This is a simple lan network: + +![home network](/static/home.drawio.svg) + +My FAI's router acts as a very basic firewall and as a dhcp server for the lan. Most other functionalities are disabled, especially its wifi since I wanted to do cool stuff this router does not support at all. + +## The wifi setup + +There are two wifi access point on my network. One might just be enough if placed at the center of the house, but I then would have no reception in the garden. Besides I very much prefer having two access points emitting at low power instead of one at high power. + +I chose to run OpenWRT on these two access points in order to do the following cool stuff: +- use 802.11r aka transparent roaming +- have one wifi network bridged with my lan +- have a second wifi network isolated from my lan with a restricted firewall and adblocking +- manage the configuration with ansible + +Roaming wifi is fantastic once you experience it: never again will your network go down for a few seconds when disconnecting from an access point and reconnecting another. You always have the best signal and your connection never loses a packet! + +Having your wifi network bridged with your lan is very comfortable if you need to ssh from your workstation to your wifi devices like laptops or phones, especially coupled with the roaming. But devices like TVs, sound bar or game consoles need to go onto an isolated network. It allows me to hide devices from each others on wifi, run dns adblocking on it and ban some weird spying traffic all these "smart" devices do. diff --git a/static/static/home.drawio.svg b/static/static/home.drawio.svg new file mode 100644 index 0000000..9192653 --- /dev/null +++ b/static/static/home.drawio.svg @@ -0,0 +1,3 @@ + + +
Public IP
Public IP
Internet
Internet
192.168.1.0/24
192.168.1....
.2
.2
.7
.7
.3
.3
Hero
Hero
wifi1
wifi1
Nas
Nas
Phoenix
Phoenix
FAI's router
FAI's router
.6
.6
.1
.1
.5
.5
wifi2
wifi2Viewer does not support full SVG 1.1 \ No newline at end of file -- cgit v1.2.3