u/saint_hwanii

Image 1 — Running my own ASN from home: dual-WAN lab, MikroTik core, Proxmox cluster, and a /48 waiting to be announced
Image 2 — Running my own ASN from home: dual-WAN lab, MikroTik core, Proxmox cluster, and a /48 waiting to be announced
Image 3 — Running my own ASN from home: dual-WAN lab, MikroTik core, Proxmox cluster, and a /48 waiting to be announced
▲ 236 r/homelab

Running my own ASN from home: dual-WAN lab, MikroTik core, Proxmox cluster, and a /48 waiting to be announced

The centerpiece here isn’t the hardware. It’s that I’m standing up my own Autonomous System (ASN + IPv6 /48) to announce from home over BGP. Paperwork is signed. I’m waiting on the final invoice and my ISP’s go-ahead to light up the BGP session. The lab underneath already runs 24/7.
Connectivity
• WAN 1: ~900 Mbps (PPPoE)
• WAN 2: 150 Mbps symmetric, dedicated, with a /29 (3 usable public IPs)
• Dual-WAN in OpenWrt. One link for domestic, the other as the public/lab link
• Own ASN + IPv6 /48. Signed, BGP session pending
Network
• Router: TP-Link ER605 on OpenWrt. Dual-WAN (mwan3), SQM/cake on the public link
• Core switch: MikroTik CRS326-24G-2S+RM (24x GbE + 2x SFP+)
• Border/BGP router: still deciding between an RB5009 and an x86 mini-PC running VyOS/FRR. Opinions welcome
• Spares: Asus RT-AC1200, TP-Link Archer C64, T4U Plus USB adapter
Compute (Proxmox cluster)
• node1: i3 / 24 GB RAM. Always-on, runs the persistent services
• node2: powered up on demand for ephemeral labs (AD, deliberately vulnerable VMs)
• Raspberry Pi 3 as the QDevice for quorum
Workstations and misc
• MacBook Air M3, Asus VivoBook K3500P, ThinkPad E14
• PC #1: i5 / RTX 3060 / 32 GB / 256 GB SSD + 2 TB HDD, liquid cooled
• PC #2: i3 / GTX 1660 Ti / 16 GB / 256 GB SSD + 1 TB HDD
• 2x ESP32 + LoRa RYRR30D, still in the someday pile
Services running now
• AdGuard Home for network-wide DNS filtering
• Tor middle relay
• Prometheus + node_exporter + Grafana, alerting to Discord
• RIPE Atlas probe, spinning up
• The usual *arr media stack
• Considering a low-power SBC as a dedicated contribution node (Tor + RIPE Atlas + NTP)

u/saint_hwanii — 14 hours ago
▲ 4 r/HomeNetworking+1 crossposts

How to setup my TPLink ER605 with OpenWrt to manage a gigabit connection

My network has two WAN connections. One connection is limited to 150 Mbps by SQM, while the other connection is fully capable of 1 Gbps. However, when I performed a Speedtest on the unlimitted connection, it provided a speed of 160 Mbps. Upon activating software flow offloading, I was able to reach a speed of 600 Mbps. Nevertheless, I am eager to achieve the full 900 Mbps speed.

reddit.com
u/saint_hwanii — 1 day ago

My ER605 con wan port is negotiating just to 100mbps

I am trying to configure a wan port on my TP-Link ER605 v2 for using a gigabit connection, however, is just negotiating to 100mbps. I force to advertise 0x02f with ethtool but is not working.

On the other end there is a 2.5 gigabit port from my ISP. I am using OpenWrt v25

reddit.com
u/saint_hwanii — 5 days ago

How to have fun with your own AS in home?

Next week I will finish the setup of a dedicated optic fiber on my home, and I will also have my own AS and a IPv6 pool from Lacnic. How would you have fun with this infra in your home.

reddit.com
u/saint_hwanii — 9 days ago
▲ 8 r/TOR

First exit relay on my own ASN (Colombia/LACNIC), what should I lock down before flipping the exit policy?

Moving from a middle relay to my first exit relay and want to do it cleanly. My setup is a bit different from the usual first-timer, so I'm hoping the operators here can point out what I'm missing.

Setup:

  • Jurisdiction: Colombia (LACNIC)
  • My own ASN, own IPv4 pool + IPv6, dedicated line, own physical server, ~100 Mbps
  • Already running a middle relay, comfortable with Linux/networking/BGP

Since I control my own ASN and address space, WHOIS, abuse contact and reverse DNS are already fully in my hands. So my questions are about the parts that aren't solved by owning the IP space:

  1. Upstream transit — feels like my real external dependency. For those running exits on their own ASN: how did your transit provider react? Anything I should square away with the upstream before enabling the exit policy?
  2. LACNIC specifics — good practices for abuse-c, rwhois, and adding remarks to inetnum/aut-num hinting at anonymization use? Working examples welcome.
  3. rDNS + exit notice — planning tor-exit.<domain> PTRs + the standard exit-notice page on :80. Anything else that actually cuts complaints when you own the range?
  4. Exit policy — starting with the reduced exit policy instead of the default. Still the go-to in 2026, or are people tuning the port list?
  5. LATAM reality check — own hardware, so I care about this: how have abuse complaints / the rare LE contact actually played out for operators in Latin America?
reddit.com
u/saint_hwanii — 11 days ago