My current internet setup is like this (which is common for most people).

fiber line from ISP <-> ISP fiber modem <-> Personal wifi router <-> switch

This is working fine with no issues. But I need to power two devices. I want to reduce this to a single device.

fiber line from ISP <-> Modem+Firewall PC <-> Switch <-> AP1,AP2...

From my initial research, what I need is an SFP module which can be attached to a PC which supports SFP. OPNsense should be able to handle most SFP modules.

What is the community’s take on this? Is this worth the effort? Can I find a mini-PC which supports SFP? Will it be cost effective?

  • FlexibleToast@lemmy.world
    link
    fedilink
    English
    arrow-up
    28
    ·
    9 days ago

    Those two devices are likely very low power arm devices. I wouldn’t be surprised if a mini pc consumes more power than those two devices. If power is your concern you should probably measure how much they’re actually pulling.

    • hendrik@palaver.p3x.de
      link
      fedilink
      English
      arrow-up
      5
      ·
      edit-2
      9 days ago

      Maybe correct? Though my cable modem gobbles down some 15W… Without even doing the Wifi… So, I bet this isn’t a universal truth, as a Mini-PC will comsume less and provide all kinds of extra services, networking, NAS…

      • FlexibleToast@lemmy.world
        link
        fedilink
        English
        arrow-up
        3
        ·
        9 days ago

        Wow, that’s a power hungry modem… But, look into the power usage of those sfp modules. They can be ~10w on their own.

        • hendrik@palaver.p3x.de
          link
          fedilink
          English
          arrow-up
          1
          ·
          8 days ago

          Yeah, they often get quite warm. Some day I’ll be in the same situation as OP. And I can’t wait to throw out that supid modem. No clue, though what kind of SFP the fiber provider requires. I mean there’s quite a selection available…

    • Onomatopoeia@lemmy.cafe
      link
      fedilink
      English
      arrow-up
      4
      ·
      9 days ago

      I dunno, my newest cable modem chews up a boatload of power for no good reason - really pisses me off.

      It uses more power (50w) than my 2019 SFF desktop I run as a server, with an 8TB drive (20w).

      I know because they both sit on their own smart switches.

    • xavier666@lemmy.umucat.dayOP
      link
      fedilink
      English
      arrow-up
      3
      ·
      9 days ago

      This is something I completely forgot to account for. I heard that some SFP modules (10G) can consume a lot of power. I think the devices are pretty low powered. I’ll have to get a smartmeter and rethink the setup. Thanks a lot!

      • FlexibleToast@lemmy.world
        link
        fedilink
        English
        arrow-up
        1
        ·
        8 days ago

        Older 10G SFP+ models were definitely power hungry. I think they’ve gotten better since then, but I haven’t really looked into how much better.

  • chocrates@piefed.world
    link
    fedilink
    English
    arrow-up
    22
    ·
    9 days ago

    Just use the fiber modem, it’s gonna be a huge pain and fight with your ISP to use your own modem likely.

    • DaGeek247@fedia.io
      link
      fedilink
      arrow-up
      8
      ·
      9 days ago

      It very strongly depends on which ISP they have. There’s a few that make it easy. There’s a much larger number that can be hacked by a competent pc person (which I’ve done). There’s also a small amount who have worked to make it impossible / hard to do, and don’t have any public info on the process.

      My ISP is att fiber, and all I had to do was change the vlan id on the outgoing side and match the ip settings to make it work. I used the guides from https://pon.wiki/ to do it, and the discord is also incredibly helpful.

      Of note, this used to be impossible / very difficult so you’ll still find forum posts saying it can’t be done. However, a couple nerds have changed that over the past two years so make sure your info is up to date before deciding it can’t be done for your specific setup.

    • xavier666@lemmy.umucat.dayOP
      link
      fedilink
      English
      arrow-up
      1
      ·
      9 days ago

      I checked this route but fiber modem are currently rare. There are only few WiFi 6/7 routers which accepts fiber. My ISP on the other hand is quite friendly. They initially provided me with a fiber modem, which sucked as it was quite old, so I told them to give me a simple modem as I have my own ethernet wifi router. They replaced it the next day.

  • CallMeAl (Not AI)@piefed.zip
    link
    fedilink
    English
    arrow-up
    11
    ·
    9 days ago

    This is working fine with no issues.

    It seems like a lot of time and effort with no upside except having one device in the place of two. Is there more you are hoping to accomplish with this proposed change?

    • xavier666@lemmy.umucat.dayOP
      link
      fedilink
      English
      arrow-up
      3
      ·
      9 days ago

      I eventually want to learn OPNsense, play with VLANs, per-device monitoring, adblocking right at the firewall itself. I will purchase a PC for the firewall for sure. So was thinking would it be better if adding an SFP to it would future proof it. But power is a concern.

      • CallMeAl (Not AI)@piefed.zip
        link
        fedilink
        English
        arrow-up
        2
        ·
        8 days ago

        You can certainly do all that learning with or without directly connecting the fiber to your firewall pc. For a mini pc you will likely need to get a USB to SFP adapter. If you want to go that route I suggest searching for compatible hardware recommendations and get a USB to SFP that has worked well for others.

        Personally I would stick with the ISP modem. In any case, happy learning!

  • Clusterfck@lemmy.sdf.org
    link
    fedilink
    English
    arrow-up
    6
    ·
    9 days ago

    You cannot just buy any SFP module and have it work. Most ISPs deploy a “special” (at least compared to normal point to point fiber links) that lets them serve multiple customers out of one port in their office. This is called a Passive Optical Network and requires specialized modules on both ends. There are ways to make a specific SFP work as an ONT and by cloning certain identifiers from the ONT to make the ISP think their box is still there.

    This is a lot of effort and from my research, could stop working randomly in some cases.

    • DaGeek247@fedia.io
      link
      fedilink
      arrow-up
      3
      ·
      8 days ago

      Mine has been running flawlessly for nearly two years now. ISPs are lazy and only change things when they’re forced to.

  • tal@lemmy.today
    link
    fedilink
    English
    arrow-up
    5
    ·
    9 days ago

    Is this worth the effort?

    In terms of electricity cost?

    I wouldn’t do it myself.

    If you want to know whether it’s going to save money, you want to see how much power it uses — you can use a wattmeter, or look up the maximum amount on the device ratings to get an upper end. Look up how much you’re paying per kWh in electricity. Price the hardware. Put a price on your labor. Then you can get an estimate.

    My guess, without having any of those numbers, is that it probably isn’t.

  • rossome!@lemmy.ml
    link
    fedilink
    English
    arrow-up
    3
    ·
    edit-2
    9 days ago

    Follow the guides at https://pon.wiki/ for replacing your ISP modem with a sfp module running custom firmware. The sfp module will require some sort of active cooling, I bought a 3D printed bracket and fan from their discord server. You can also get a sfp to Ethernet media converter if your firewall does not have sfp: https://www.amazon.com/gp/aw/d/B0FCFWGWHT

    These work great as a firewall: https://www.ebay.com/itm/358186631570 8 cores with the n355. I split up the cores to run multiple VMs and docker containers. I passed through all the network interfaces to the opnsense VM. It also has 2 m.2 slots(pcie 1x) I use for mirroring 2 64GB intel optane ssds in a zpool.

    • xavier666@lemmy.umucat.dayOP
      link
      fedilink
      English
      arrow-up
      1
      ·
      9 days ago

      Excellent resources! Both the wiki and the miniPC! Thanks.

      I was once thinking of virtualizing OPNsense but heard it’s a lot of pain during the setup and throughput can suffer. But I shall keep this is mind.

    • non_burglar@lemmy.world
      link
      fedilink
      English
      arrow-up
      1
      ·
      9 days ago

      Most fiber services register the sfp/sfp+ module. it is much cheaper, easier and usually not against the terms of service to just use the isp-provided sfp in your own routing device instead of messing with OLT settingw and custom firmware on a $160 WAS.

  • eleitl@lemmy.zip
    link
    fedilink
    English
    arrow-up
    2
    ·
    9 days ago

    Protectli sells opnsense firewalls with SFP+ support. Make sure these can handle gigabit data rates.

    You can also terminate SFP with a switch and route that at L2 (VLAN) level to your firewall’s NIC.