AX3600 AIoT Router

Hi everyone, I’m pretty new to networking and I’m trying to upgrade my home network setup to improve both my workstation/gaming connectivity and overall Wi-Fi stability for my family. Current setup: * Xfinity gateway/router (still acting as it's own Wifi, however it's currently not being used) * TP-Link Deco AX3600 mesh system * Second TP-Link Deco AX3600 node in my room TP-Link Deco: [https://www.tp-link.com/us/deco-mesh-wifi/product-family/deco-x68/](https://www.tp-link.com/us/deco-mesh-wifi/product-family/deco-x68/) What I’m hoping to do: 1. Put the Xfinity gateway into bridge mode so it acts only as a modem 2. Buy a dedicated router that works well with the Deco AX3600 system -- Preferably with APIs for observability/monitoring support so I can build my own dashboard/app 3. Add a network switch in my room so I can hardwire multiple devices This is the switch I’m currently considering: [https://www.amazon.com/gp/product/B00K4DS5KU/](https://www.amazon.com/gp/product/B00K4DS5KU/) If option #2 isn't possible I'd be open to running my own separate router/Wi-Fi network for my workstation and moving the second Deco node into my sister’s room instead I’d appreciate any advice on whether this plan makes sense, possible improvements, or better hardware recommendations. Estimated budget: $50–$150

I need some help deciding in what to do/purchase in my next network change in order to improve my home setup. Currently, I have a Xiaomi AIoT AC2350 with Openwrt, it's configured with dual WAN network, 1gbps + backup 500mbps. I have multiple Wifi networks, one for guests, another for IOT, and another for mobile/ laptop on total around 23 wifi devices connected, but that's is not the reason of this post. Everything works well and I am quite happy considering the limitations of the device. Also, my desktop is connected via 10GB SFP cable to a compatible switch, and the company laptop is also connected via CAT6 cable, there is also a NAS with 2.5GB port. There are a few limitations in the current system, the max throughput of the router to the internet is around 700Mbps, I believe due to the firewall rules, and some other configurations. I also had an Adblock configured, but due to the lack of RAM most of the time doesn't work. The last thing that I want to add, is Tailscale or some similar solution to expose Immich (running on a NUC with a celeron N3450 ) to my mobile phone. Naturally I need to upgrade, I am considering to one of those small routers with an N300 or N150 or N350 or an i5, which has 4x 2.5Gbps ports and 2/4 sfp+ ports, and ideally an 5G sim slot included for a third backup. I know it's a bit too much but some neighbors had their fiber broken, and since I work from home most of the time, I want that piece of mind. I would like to avoid something noisy, the HDD from the NAS already do enough noise. At this moment, I don't know what to choose, I have a too many questions in my mind. Should I running OPNSense in Baremetal or in a Proxmox? If I choose Proxmox which should be the minimum CPU that I should get to actually be useful to have more than one VM. What about RAM? For OPNSense on Baremetal 16Gb are more than enough, what if I then switch to Proxmox? RAM is becoming expensive every day. I also read that for these computers it is better to stick to one memory slot because they are single channel and consume less power, meaning less heat. I saw a few pc's with 5G sim slot from a brand named UDPTCP on Amazon, but I could not find any review, but for the brand CWWK there are good review, but none of the PC's had the Sim slot. Is it worthy to purchase an external 5G modem and plug it into the PC? Maybe I could migrate the Immich into one of the VMs? I would keep the same router to run the Wireless devices, but instead of being the heart of the network would be a secondary device. What are your thoughts? If you end up sharing other brands, keep in mind that I am based in Europe. Thank you P.S.: I am picking OPNSense because seems to be the most recommended, but further options are possible. I know my around these things, but I do not want to spend weeks to configure this.