asuswrt-merlin.ng VS nextdns

Any way to tell if these issues affect the community-developed, third-party "Merlin" firmwares?

1: https://www.asuswrt-merlin.net

I think you need VPN director from Asuswrt Merlin https://github.com/RMerl/asuswrt-merlin.ng/wiki/VPN-Director

Not an answer, but I have the AC5300 and like it. And if you're not aware, there's open source firmware for a lot of the Asus routers here. I use it and once again seems fine. Disclaimer, I'm not a power user, so probably can't answer anything more specific about VPN setup on the router itself, but from my understanding it is possible.

However, I am struggling with how to route the site-to-site client's WAN traffic through its own OVPN client connection. If I set up a rule routing all client subnet traffic through the OVPN connection, then the Wireguard rule never gets processed, because all OVPN rules are processed before any Wireguard rules.

Many (all?) of the ASUS routers supported by the Merlin firmware https://www.asuswrt-merlin.net/ have OpenVPN built-in. If you have an ISP-provide modem/router, you may be able to put it in transparent bridge mode.

However, it looks like only the older model is on sale. Go for the Asus and do research if you want Merlin or not.

Here's the official website. It has a list of supported routers: https://www.asuswrt-merlin.net/

If you are somewhat good with computers, get an Asus router with a broadcom chipset that can run Merlin WRT. They are rock solid and feature packed (you can even adjust the wireless power level, since you're having wifi issues). There's a list of supported routers here: https://github.com/RMerl/asuswrt-merlin.ng/wiki/Supported-Devices

NextDNS [0] has proven very useful for me on iOS. Firefox is 99% ad-free. Only for YouTube do I switch to Brave Browser.

My home router (Draytek) is also configured to force any connected devices to use NextDNS too.

Definitely worth the €20 annual subscription.

[0] https://nextdns.io

https://nextdns.io ওয়েবসাইটে যান

Head over to nextdns.io and click on "Try it now".

uBlock Origin still works in Firefox. https://addons.mozilla.org/en-US/firefox/addon/ublock-origin...

And you can, I believe, still just modify your hosts table to block out ads in Chrome. https://github.com/StevenBlack/hosts

Or your router's DNS using something like NextDNS. https://nextdns.io/

Ads suck. Support content where you can, but even when you pay they still serve ads / tracking scripts. So fuck 'em. Block all the ads.

I've used NextDNS for years to keep our home internet safe for the kids and it works really well. Fortunately NextDNS offers API access that you can use to automate turning different internet filters on and off. Unfortunately their API docs are horrible.

I think that we'll need to adopt network-level filtering if we want to outsmart the browsers. I haven't looked back since adopting NextDNS and configuring my router to filter all traffic through it. It does a great job of stripping ads out of all my devices connected to it, and that's something I don't mind paying a few bucks for a year (I think it's like $19/year).

Check it out here: https://nextdns.io/

NextDNS is very much alive, although progress is measured and calm¹ as compared to Control D. But it's also been rock-solid for me for years, where Control D seems to be less so².

¹ https://github.com/nextdns/nextdns/releases ² https://www.reddit.com/r/ControlD/comments/1irgehp/178ms_lat...

One of the most values I get out of a SaaS service is NextDNS [0]. There are competitors like ControlD [1] that are also very good. At the end of the day they both check all the boxes for me.

But, the piece that really got me with NextDNS when I started using it was the unlimited number of profiles. This allows me to target any device, no matter where it is (this is fantastic for mobile devices) and keep my filtering lists in place. I selfhost a lot but still find the annual cost of NextDNS more than fair.

[0] https://nextdns.io/

Use NextDNS (https://nextdns.io) on your mobile phone as a Private DNS provider, and switch as many apps as allow it to be web apps, i.e. https://m.uber.com works just fine, and use Firefox on mobile and enabled about:config as it's at chrome://geckoview/content/config.xhtml , from there switch beacon.enabled to false.

Far less requires an actual app than most people imagine. It's the apps that leak so much.