Today I received an email from one of our neighbors, actually their son! He’s a gamer, super technical, and after replying, I thought it would be better to document my recommendations here and update based on feedback from Rob and others.
First, determine whether you need to replace the cable modem. Once you know it needs to be replaced, I recommend buying separate devices for each layer of your home network – cable modem, security device, then switch/wireless. This lets you buy the most cost-effective device with exactly the features and performance you want for each layer of the network.
Cable modem
I like the Arris/Motorola cable modems, reference link below for Wirecutter recommendations. I wouldn’t go crazy. I have an old ARRIS SURFboard SB6183. It Just Works. Also, I have 100Mbps service and it’s not a bottleneck. It’s DOCSIS 3.0, but if you get a new one, make sure it supports the latest DOCSIS 3.1 standard. That’s all you need – match the rated performance of your cable modem with your Internet connection speed. There’s no advantage to getting a 1Gbps cable modem for a 200 Mbps connection.
Security
I use a Meraki security appliance, but only because I got it free through a certification program. When I replace it, I’ll probably buy a Ubuquiti USG or similar. You would be appalled at the stuff it blocks and attempted connections I see on a regular basis. Reference links below and note that you would buy the USG with a Cloud Key for management (detailed in how-to link below).
Switch
Get a good, 1Gbps switch with 8 or more ports to connect your laptop and other devices as needed. Make sure the switch does *not* have a fan, you want everything to use passive cooling and be silent. Early switches required fans, they all go bad, and they all make too much noise.
Wireless
I have a Google WiFi mesh which works well. I bought three access points, but only need two for our house (two story colonial with a basement). If you live in an apartment, I would just get a reliable access point and locate it to get the best coverage in the apartment. Make sure anything you buy supports WPA2/3 and use a complex admin password to secure your AP.
Bonus Tip
If you don’t already have a spare Raspberry Pi, buy two or three and configure one to run PiHole. PiHole can provide DNS services, but more important is it is a very effective ad filter for your home network. You will notice it on your phone immediately and you also benefit from having a local DNS server that you control. On my network it’s filtering >30% of the DNS queries from our Roku TV to our phones and laptops. I’m using a Model 3B Raspberry Pi and be sure to buy a reliable power supply like the Anker Elite Dual Port 24W ($11 from Amazon!).
Reference Links
The Best Cable Modem
https://www.nytimes.com/wirecutter/reviews/best-cable-modem/
Ubuquiti USG security gateway –
https://www.amazon.com/Ubiquiti-Unifi-Security-Gateway-USG/dp/B00LV8YZLK
How To: Deploying a Ubiquiti UniFi Home Network including Multiple WiFi Access Points (Part 1) UPDATED
https://freetime.mikeconnelly.com/archives/6241
Pi-hole® – Network-wide Ad Blocking
Dashboard from Paul’s PiHole
I recommend you keep your Windows OS patched and be sure to update all the…
With more people streaming and general Internet use increasing, I get questions about measuring home…
Friends and family have asked about antivirus and security recommendations. This is a quick summary…
I avoid frequent changes to my home network. My stated goal is to design and…
Attempting to update PiHole from the command line, I received the error below: [i] Downloading…
Maureen A. Begley (nee Burchill), age 91, of Chillicothe, Ohio, formerly Moorestown and Mount Laurel,…