It needs to “just work” - Whatever solution I chose needed to be out-of-the-box or widely supported.While you can install an extension on a desktop browser, such ad blockers are often resource intensive, easy for advertisers to restrict, and do little for mobile devices where I do most of my “fun” browsing, not to mention, cannot restrict IoT tracking. Ads - Blocking intrusive, targeted, and malware-laden ads across devices.Beyond manufacturers’ lax security practices and general lack of hardening, updates are rare, and are often a manual process, earning minimal trust in my book.

Don’t trust internet of things (IoT) devices - Smart home devices have a notoriously poor track record when it comes to security (and privacy).Security - Block access to malicious sites to minimize the risk of human error, better understand how devices on my network are (mis)behaving, detect compromised devices, and limit their blast radius.

Privacy - Minimize sites, device manufacturers, and my internet provider’s ability to track my activity or monetize my information across all my devices.

While most home networking setups generally do a decent job of protect you from threats from the outside trying to come in, they don’t often do a great job of managing risks originating from within your own network. I’d been a Wirecutter devotee for almost as long as the site’s been around and would have normally just grabbed their top pick, but I had just received my SSCP (information security) certification, and was looking for something a bit more advanced than the traditional plug-and-play setup to put my newly learned skills into practice. Please do read on here, but rather than clicking through to the individual Pi-Hole or Cloudflared setup instructions on other sites, I recommend you check out my newer post which automates things for greater reliability instead.īack in April, when it looked like we were going to be spending some more time at home for a while, I decided to take on the project of upgrading my home Wi-Fi beyond an off-the-shelf consumer router. Everything here remains true, but after having relied on, optimized, and upgraded this configuration for a while, I decided to re-over-engineering how I setup, maintain, and manage my home network using Docker Compose, Ansible, and Caddy.

Raspberry pi tor proxy lan