all 2 comments

sorted by: hot top controversial new old
[–] 1 point 7 months ago (1 child)

From the project's site, an eBlockerOS-powered device allegedly uses ARP spoofing to hijack as the default gateway and serving as a second hop in the internal network. Behaving as an NGFW can have some benefits over just DNS filtering that services like PiHole achieve. Things the project lists it is capable of include global VPN tunneling, DNS request masking, parental controls, content blocking.

It could be technically better than just PiHole (assuming the project is legitimate), but I will argue so would a router running OpenWRT or similar. Depending on the SBC used with it, I would be concerned with network throughput performance (both Ethernet link speed limits and CPU utilization from certain services). Additionally, its configuration would mean it being a full second-hop device on the local network, which may cause its own category of issues. The main use case I could see for this project is if you're completely stuck with your ISP's router and cannot touch much about it.

  • source
  • hideshow 1 child comment
  • [–] [S] 1 point 7 months ago

    Touche.

    And yeah thank you for the info. I didn't get much of a chance to dig into it at work, but I did config the rasp pi for blue. Will mess more tomorrow.

    Given it's doing far more than DNS, it makes more sense to run on a beefier RPI. The banana pi is there group behind the eblocker hw, and those boards are custom diy routers and industrial type setups.

    I'm excited to see what it's capable of. Right now, I run a pihole at work for about 400 devices handling 1m+ queries in a 24 hours period without breaking a sweat. Arpi is about as equipped as a basic home router anyway, so here's hoping is promising!

    https://www.banana-pi.org/web/index.php?topclassid=16&classid=273&id=81&lanstr=en&wap=1

  • source
  • parent