core VS wireguard-vyatta-ubnt

dnsmasq can be used for wildcard domain aliases in OPNsense firewall, https://github.com/opnsense/core/issues/4145#issuecomment-12...

Firmware's like Asuswrt-Merlin or OpenWRT can support dynamic-dns, or you can do like I do and run something like OPNsense in an x86 VM with a NIC passed through, or buy an inexpensive firewall appliance (up to 500mbps/1gbps/10gbps).

The easiest solution is to buy your own router, set it up, disable the router functionality on the Fritzbox 7590 and plug your router into it. It'll be cheaper and easier than a Cisco Firewall, but if you want to go the dedicated firewall route then I would recommenced OPNsense

Much searching lead me to a possible patch Unbound.inc for how it was handling aliases for 23.7 -> https://github.com/opnsense/core/pull/5925

[2]: https://github.com/opnsense/core/issues/2544

BSDs may not have a significant presence on desktops, but they're well known in the networking world for their reliability. They also were the foundation used to build OSes for specific applications. OpnSense and XigmaNAS, for example, are two excellent FreeBSD based applications aimed at firewalling/security and NAS/services.

https://opnsense.org/

https://xigmanas.com/xnaswp/

WireGaurd

As for remote access, you will need another computer to install tailscale or wireguard vpn to access your local devices https://www.youtube.com/watch?v=AkKz7Vza1rw and the official docs for up to date advice https://www.wireguard.com/ this doesn't require much to run, you can use any old family computer or some old quad core 2nd-4th gen intel desktop for 30 bucks off facebook marketplace. You can also use that same computer to run klipper if you install proxmox and have two separate linux virtual machines.

Um modo mais avançado de se proteger é utilizando protocolos de VPN mais modernos, como o WireGuard. Muitos provedores de VPN oferecem suporte a este protocolo, que além de muito simples de usar e além do mais é open source.

here u find out how wireguard works https://www.wireguard.com/

WireGuard is a VPN protocol developed several years ago which is exremely fast, lightweight, and uses state-of-the art cryptography. Its performance blows legacy VPN's out of the water.

Try vanilla. It solved all my problems bar none.

WireGuard has much less code than OpenVPN meaning that it has much less opportunities for bugs/vulnerabilities — "WireGuard is extremely simple... already it might be regarded as the most secure." So no, just because you weren't aware of something or don't agree with it doesn't make it "disinformation."

At home, I've been playing around with Shimo, but haven't bought it and may not. I also just replaced my home WiFi with Ubiquiti. The Dream Router has a VPN built into it that I'm just now playing with, so once set up, I can use an open source client like OpenVPN or Wireguard to VPN straight into my home network.