[{"_1":2,"_155":-5,"_156":-5},"loaderData",{"_3":4,"_13":14,"_21":22,"_134":135},"root",{"_5":-5,"_6":-7,"_7":8,"_9":-7,"_10":11,"_12":-7},"currentUser","primaryEmail","siteVerification","6LeIxAcTAAAAAJcZVRqyHh71UMIEGNQ_MXjiZKhI","toast","enableDev",false,"incidentStatus","routes/_layout",{"_15":-5,"_16":17,"_18":17,"_19":11,"_20":11},"username","isAskGordonEnabled",true,"isUsingNewTemplate","showMinimalLanding","showHoneypotTrap","routes/_layout.r.$namespace.$reponame",{"_23":24,"_25":-5,"_26":11,"_27":11,"_28":29,"_30":31,"_32":-5,"_33":11,"_34":35,"_85":-5,"_86":87,"_125":-5,"_126":11,"_127":17,"_128":11,"_129":-5,"_130":11,"_131":-5,"_132":133},"canonicalUrl","https://hub.docker.com/r/msjpq/router/tags","mcpServer","canSeeDockerfile","canSeeAutobuilds","namespace","msjpq","reponame","router","cloudBuildSource","isAutobuildsAvailable","repo",{"_36":37,"_38":39,"_41":42,"_43":44,"_45":11,"_46":47,"_48":49,"_50":51,"_53":31,"_28":29,"_54":55,"_56":40,"_57":58,"_59":60,"_61":62,"_63":-5,"_64":65,"_66":67,"_68":11,"_69":29,"_70":71,"_76":11,"_77":78,"_82":29,"_83":84},"categories",[],"content_types",[40],"image","date_registered","2021-04-18T10:53:59.279537Z","description","","is_private","last_updated","2023-10-26T00:44:07.134433Z","last_modified","2024-10-16T13:48:34.145251Z","media_types",[52],"application/vnd.docker.container.image.v1+json","name","pull_count",6910,"repository_type","star_count",3,"status",1,"status_description","active","source","collaborator_count",0,"full_description","# Docker Home Router\n\nYes, its a router that runs off of a single Docker image & 3 lines of script.\n\nYes, its packed with tons of features.\n\nYes, you can run it along side with other Docker images.\n\nYes, you only need to adjust [2 environmental variables to run](https://github.com/ms-jpq/docker-home-router/blob/whale/install/docker-compose.yml)\n\n---\n\n## Features\n\n### Cool & for everybody\n\n

\n Fairness & prioritization\n

\n\nBandwidth is balanced on a (per-computer -> per-stream) basis.\n\nShould help to alleviate any single computer from hogging the internet juice.\n\n

\n\n

\n Better ping!\n

\n\nAs traffic approach maximum bandwidth, latency shoots up.\n\nThats why we do traffic shaping. :)\n\n

\n\n

\n One way guest network\n

\n\nYou can talk to guests, guests can reply. Guest cannot initiate talks with you.\n\nPretty good to put all the untrusted stuff on the guest network.\n\n

\n\n

\n VPN (1 step set-up)\n

\n\nJust go to http://router-name.lan:8888/wg/ from (not your guest network) and BAM!\n\nThere are the QR codes you can scan on your phone, to add VPN profiles. (Need the official wireguard app).\n\nYou can add as many VPN profiles as you want!\n\n

\n\n

\n Port forwarding based on hostname\n

\n\nYub, who cares about MAC addresses? Not us humans.\n\n

\n\n### Cool & for nerds\n\n

\n Run it along side other Docker images\n

\n\nYou can run this along other Docker images!\n\nNeed I say more?\n\n

\n\n

\n DNS sinkhole\n

\n\nAll the outbound DNS traffic is redirected to a single server, your server.\n\nVery cash money for running DNS based adblock, such as [pihole](https://pi-hole.net/), or [adguardhome](https://github.com/AdguardTeam/AdGuardHome).\n\nDOT is also blocked.\n\n

\n\n

\n Wildcard LAN domains (*.<hostname>.lan)\n

\n\nSuppose you have a computer called name. Most routers will let you use name.lan to visit name.\n\nI go one step further. Everything under \\*.name.lan also goes to name.\n\nVery useful for reverse proxies.\n\n

\n\n

\n Simple split tunneling\n

\n\nAll you need to do is write down the IP ranges on the other side of your tunnel, the image will automatically assign non-overlapping local networks.\n\n

\n\n

\n Indepth Dashboard\n

\n\nGo to http://router-name.lan:8888/ (from not guest network), and you will see information on DHCP leases, forwarded ports, subnet assignment, firewall rules, HTTP cache performance, and packet scheduler statistics.\n\n

\n\n### Cool, but not that useful\n\n

\n Recursive DNS resolver (by default)\n

\n\nIf you are worried about your ISP fiddling with your DNS or something.\n\n

\n\n

\n Network wide HTTP cache\n

\n\nNot very useful these days, tbh, but kinda cool.\n\n

\n\n

\n Visit TOR dark-web with regular browsers\n

\n\nVisit .onion websites without having to setup TOR.\n\nDisclaimer: This is purely for convenience / fun, not privacy.\n\nOnly works on non-🍎 devices because 🍎 [locked this feature behind a VPN profile](https://developer.apple.com/documentation/devicemanagement/vpn/dns).\n\n

\n\n

\n NTP sinkhole\n

\n\nForce all your local devices to be in sync with your router's clock (and each other).\n\n

\n\n---\n\n## INSTALL.md\n\nSee [INSTALL.md](https://github.com/ms-jpq/docker-home-router/tree/whale/install)\n\n---\n\n## FAQ\n\n

What is the easiest way to get extra ports for WAN/LAN/Guest?

\n\nUSB 3 ethernet adapters are very cheap and are more than enough for sub gigabit speeds.\n\nGigabit PCIE adapters are also very cheap, but you need extra PCIE ports.\n\nYou can also get a VLAN capable switch, but those are slightly more $$$.\n\n

\n\n---\n\n## Netplan\n\n\n```yaml\n---\nversion: 2\nnetwork:\n ethernets:\n \"\":\n dhcp4: True\n dhcp6: True\n accept-ra: True\n ipv6-privacy: True\n # LAN ifs should be commented out\n```\n\n\n---\n\n## WTF, Why???\n\n### Docker\n\nBecause foremost, it's an amazing _immutable_ distribution format.\n\nClean install, clean uninstall, well known sandbox & runtime, popular configuration format, the upsides far out weigh the downsides for me.\n\nAlso works well with other Docker images, so I can justify spending $$$ on beefier hardware.\n\n### NAT66\n\nSame reason as NAT44, because you only need 1 ::/128 address.\n\nEven tho in theory we have almost unlimited IP6 addresses, there are many situations, such as shared living arrangements, bad ISPs, normie landlords, etc, where you do not get a nice stable block of prefixes.\n\nKinda sucks, but it be like that sometimes.\n","has_starred","hub_user","immutable_tags_settings",{"_72":11,"_73":74},"enabled","rules",[75],".*","is_automated","permissions",{"_79":17,"_80":11,"_81":11},"read","write","admin","user","storage_size",637809881999,"orgData","recentTags",[88],{"_89":40,"_90":91,"_92":93,"_94":95,"_96":97,"_98":99,"_46":114,"_115":91,"_116":29,"_117":52,"_53":118,"_119":120,"_121":105,"_122":114,"_123":62,"_124":17},"content_type","creator",8286385,"digest","sha256:877c5f3773dad1fd518ea64c6c7178766b60c3584931dc68e307fff48b4c386b","full_size",302938044,"id",146048500,"images",[100],{"_101":102,"_92":93,"_103":44,"_104":105,"_106":107,"_108":109,"_110":44,"_111":-5,"_112":95,"_59":62,"_113":-5},"architecture","amd64","features","last_pulled","2026-09-24T14:13:39.671241228Z","last_pushed","2023-10-26T00:44:07Z","os","linux","os_features","os_version","size","variant","2023-10-26T00:44:06.971473Z","last_updater","last_updater_username","media_type","latest","repository",12375215,"tag_last_pulled","tag_last_pushed","tag_status","v2","sbxKitMetadata","isPotentialSpam","isHubSbxKitsEnabled","showSbxLogoOverride","sbxTrademarkText","displaySecurityMetadata","tagAttestations","tagsHaveAttestations",[],"routes/_layout.r.$namespace.$reponame.tags",{"_34":136,"_143":144,"_132":153,"_154":11},{"_36":137,"_38":138,"_41":42,"_43":44,"_45":11,"_46":47,"_48":49,"_50":139,"_53":31,"_28":29,"_54":55,"_56":40,"_57":58,"_59":60,"_61":62,"_63":-5,"_64":65,"_66":67,"_68":11,"_69":29,"_70":140,"_76":11,"_77":142,"_82":29,"_83":84},[],[40],[52],{"_72":11,"_73":141},[75],{"_79":17,"_80":11,"_81":11},"tags",{"_145":60,"_146":-5,"_147":-5,"_148":149},"count","next","previous","results",[150],{"_89":40,"_90":91,"_92":93,"_94":95,"_96":97,"_98":151,"_46":114,"_115":91,"_116":29,"_117":52,"_53":118,"_119":120,"_121":105,"_122":114,"_123":62,"_124":17},[152],{"_101":102,"_92":93,"_103":44,"_104":105,"_106":107,"_108":109,"_110":44,"_111":-5,"_112":95,"_59":62,"_113":-5},[],"canDeleteTags","actionData","errors"]

msjpq/router

Tags for msjpq/router