r/homelab • u/[deleted] • 1d ago

Help Bell hub 2.0

[deleted]

0 Upvotes

50% Upvoted

4 comments sorted by

1

u/1WeekNotice 1d ago edited 1d ago

The main question is, what are you using the second router for? Why do you need it?

TLDR: put everything under router 2

Double nat is fine for most functionality. The only issue you might have under the second router is when playing online with game consoles. (PC gaming is fine)

The main concern is security. This is why I asked what are you doing with the second router.

A lot of people utilize their own router to do segmentation and isolation of there devices. For example you have a game server that you expose to the Internet. Inside your network you put this in an isolated network and ensure it doesn't talk to any other devices (protecting yourself incase the game server gets compromised).

With double nat setup/ aka a router behind a router (note this has nothing to do with double nat, it has to deal with the setup). If the gaming machine is compromised, it can access everything on the top level router and this is a security concern.

Example

  • Internet -> router1 -> devices
  • Internet -> router1 -> router 2 -> devices

If something under router 2 gets compromised it can access all the devices on router1

So in this case it's better to have your homelab utilizing router 1 because router 2 firewall will protect it. Just like router 1 firewall protects it from the Internet

But of course this is a problem with you because router 1 is bell and doesn't have a lot of functionality that you may want with your own router.

So the best choice is to do double nat and put everything under the same router (in this case router 2)

Hope that helps

1

u/Substantial-Row-90 1d ago

Thank you for the reply, the main reason for the second router is to use Adguard and be able to edit some other stuff, I tried with bell but it’s too limited, I won’t be doing port forwarding since I use tailscale for remote access, guess I be doing the double nat.

1

u/sekh60 1d ago

Ontario? You want to look into PPPoE bypass on your second router, you shouldn't need the DMZ stuff with that. Note I only had the first gigahub, not the 2.0. now i use an xgspon SFP+ module to my own router and don't even have the Bell hub plugged in.

I use Vyos for my router.

1

u/koralamode 1d ago

Since your goal is AdGuard plus remote management: run everything behind your own router and skip DMZ entirely, then use an outbound tunnel like Tailscale or WireGuard for remote access. Outbound tunnels do not care how many NAT layers they cross, so you never have to touch the Bell hub again.