Brainstorming remote connections safely with SSL

[Santiag0 10]

For our internet it's a 1.5gig speed from the modem and we have an asus router with wifi 6e which also has the mesh and vpn options on it which is up our driveway a bit at my brothers house. There are three homes on our property we all connect to one hotspot which is the asus wifi 6e router and it works great for years. I run the emby server and one of my brothers has all the media set as shared hard drives that I connect to emby with our family videos and the movies he copies from disk to his pc and the rest of our family connects with nord vpn meshnet for now until Dec,1. The first thing I wanted to do was buy another asus router to play with so I'm not disturbing anyone's internet and setup proton vpn right on the router itself and with a different computer test out other options again not disturbing anyone's tv watching but before I buy I wanted to know (is wifi 6e better than wifi 7) I read this online but wouldn't wifi 7 be better since it is newer? Once I get the router I will start playing around with different options SSL reverse proxy ngnx maybe even linux and some software's to see what works best. Please feel free and join in to this convo I would love to hear other people's setup and what you have running that works for you, thank you.

So first wifi 6e or wifi 7 which is better to buy?

[Santiag0 10]

Here is another question that I have if someone can answer, the internet modem before the wireless router has everything turned off upnp and the other ones so no port is open or can self open. The router connected to that modem if I port forward everything for doing SSL and reverse proxy and everything will it still work remotely even if the modem has all ports closed? Sorry if it's a stupid question.

[Luke 42077]

Quote

So first wifi 6e or wifi 7 which is better to buy?

Wifi 7 is obviously better, but currently has limited device support. If you like to upgrade your equipment frequently, like within 2-3 years, then you could save money and go with 6e for now.

But if you want to upgrade and then not touch it for 5 years, then I would just get wifi 7 now.

[Luke 42077]

Quote

The router connected to that modem if I port forward everything for doing SSL and reverse proxy and everything will it still work remotely even if the modem has all ports closed? Sorry if it's a stupid question.

Hi, that is a good question. I'm not exactly sure. I think you will just have to try it. 

Please let us know how it goes.

[Lessaj 467]

On 8/24/2025 at 3:33 PM, Santiag0 said:

Here is another question that I have if someone can answer, the internet modem before the wireless router has everything turned off upnp and the other ones so no port is open or can self open. The router connected to that modem if I port forward everything for doing SSL and reverse proxy and everything will it still work remotely even if the modem has all ports closed? Sorry if it's a stupid question.

No, every firewall in the path must have the port open - both your ISP gateway and downstream router likely have their own firewall, the ISP gateway definitely should. On the ISP gateway you just forward it to the IP address of the downstream router, then on that device you set up a similar port forward but to the real endpoint. For example if your ISP gateway is on a 192.168.0.0/24 network and it's providing your downstream router with an IP address of 192.168.0.10 on its WAN port you would open 443 towards 192.168.0.10. Then your downstream router may be running a 192.168.15.0/24 network on its LAN side and your end device is 192.168.15.20, you would open 443 towards 192.168.15.20.

Edited August 31, 2025 by Lessaj