Virtualized dual-WAN router
pfSense, Debian, KVM/libvirt, Linux bridges, PPPoE, DNS
I am the systems and network administrator in my home, pfSense runs as a virtual machine on a Debian host. A network card is bridged to split the network into a main LAN and a separate access point subnet. Two ISPs share the load with weights, and a tiered failover group handles latency sensitive traffic.
- The fiber link kept dropping
- I ruled out the cables and hardware first, then read the PPP logs and found the provider was rejecting the login.
- The upstream router blocked the virtual machine
- Its MAC whitelist did not match the bridge. I found the mismatch and fixed it.
- Browsing felt slow
- I traced it to a slow DNS resolver handed out by one ISP’s DHCP.
