This New Device is 10x Better Than Your Router
Source: YouTube · NetworkChuck · published Aug 14, 2026 · 23:04
Replace your insecure ISP router with an OPNsense firewall on a mini PC to gain full network control, ad-blocking, and advanced security features 2:15.
Key Takeaways:
• Standard ISP routers are often insecure "goblin gateways" with vulnerabilities that expose home networks to hackers, prompting government bans on future models 1:32.
• OPNsense is a 100% open-source firewall OS preferred over pfSense due to its transparency, and it can run on various x86 hardware, not just the specific mini PC used in the video 2:05.
• Setting up OPNsense involves flashing the OS to a USB drive using Etcher, installing it on the hardware, and configuring interfaces via the command line before accessing the web GUI 8:05.
• The initial GUI wizard configures basic settings like DNSSEC and DHCP, but users must manually enable DNS-over-TLS and add blocklists (e.g., AdGuard) for effective whole-house ad blocking 15:00.
• An AI agent (Hermes) can manage the firewall via API, successfully executing complex tasks like adding DNS servers, setting DHCP reservations, and blocking entire countries via GeoIP 18:00.
This setup provides a robust, secure alternative to consumer routers, with the added benefit of AI-assisted management for advanced configurations. Future steps include integrating a managed switch and wireless access point for a complete network overhaul.
Sources:
- 2:15 Overview of the OPNsense solution and its benefits over standard routers.
- 1:32 Explanation of the security risks associated with ISP-provided "goblin gateways."
- 8:05 Step-by-step process of flashing and installing OPNsense on hardware.
- 15:00 Configuration of DNSSEC and ad-blocking blocklists within the GUI.
- 18:00 Demonstration of an AI agent managing firewall rules and DNS settings.
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
Your home router still sucks. Wait. You still haven't gotten rid of it yet? Get it out of here. It sucked six years ago, and now
it's even worse. The government just banned it. Turns out some
Chinese hackers were living inside of it. Slow, insecure, boring, and now illegal. That's exactly
what I told my editor Mike this morning. You see, he's
moving into a new house, and his ISP is handing him one of these. Not on my watch, dude. By the
way, this is the first video in
a series where I'm building out Mike's whole network. Stay tuned. So we're gonna
replace Mike's router and yours with this, a
mini PC that I bought in Japan. Wait. What? You'll see. And it's running the most secure
and fun firewall OS out there, OPNsense. Whole house ad
blocking, a real firewall, free open source, and you're …