Current TPLink TL-WDR4300 router with original firmware has parental control which is very limited.
It has only 4 entries for trusted devices. So, my ability is to either turn on parental control meaning only 4 devices can connect. What is not enough just for me, but I also need to give access to my wife, chromecast
I only know 3 options:
Better parental control features:
- more entries for trusted devices
- be able to limit traffic to kids. let's say from block from 9pm to 6am. With ability to quickly release that lock for 30/60/2h window.
- ideally an advanced filter to youtube for kids. Lets say I would like to block certain videos which have in their description certain words. There're some cartoons for kids which I'd like to block.
- some reports about what my kids are doing online. Ideally a table with next columns: Incoming traffic, outcoming traffic, time spent, resource category. Some details for each row would be nice and some advanced filtering for those details
intrusion detection and prevention, some immediate alerts if something is happening or reports for less important stuff.
vpn to my home network
a good QoS with ability to set priorities for different users.
as better as possible isolate my son from my network as he installs some stuff I don't trust.
What hardware I have:
- TPLink TL-WDR4300
- TPLink Archer C7(Provided by ISP)
- Mini PC 4 LAN Firewall Router Intel Celeron J1900 Quad-core 2.0Ghz Barebone Industrial Mini Computer pfsense Gateway Appliance (https://www.aliexpress.com/item/XCY-Celeron-Mini-Computer-J1900-Quad-Core-2-0GHz-Industrial-PC-with-4-Ethernet-Lan-USB/32695996956.html)
The last one I bought for pfsense. But honestly I would rather use it for Ubuntu running docker containers as it is quiet and low powered.
About me: A developer with limited knowledge about networks. Have good experience with Ansible/Docker and prefer scripts to the UI.
I tend to think to go with Openwrt using TPLink Archer C7(Provided by ISP as a gift for being with them 3 years). I think I should be able to flash it, in the worst case using UART.
The only thing is that I'm afraid spending time and find out that I had to go with pfsense and spend the time learning pfsense.