Dependency removed: Centralized DNS providers, single-ISP internet access, and cloud-dependent routing - your network functions autonomously and survives WAN failure.
A resilient network is not just a faster or more reliable consumer setup. It is a deliberate architecture that continues functioning when upstream infrastructure fails. This means local DNS authority, multi-WAN failover, offline-first services, and segmentation that limits the blast radius of any single failure.
- Routing - how traffic moves between segments; static routes vs. dynamic routing for small networks
- DNS - name resolution; why self-hosted DNS is a foundation capability; Pi-hole + Unbound setup
- DHCP - address management; reservations for servers; DHCP failover
- VLANs - traffic segmentation; IoT isolation; production vs. lab vs. guest networks
- VPNs - WireGuard for site-to-site and remote access; split tunneling; kill switches
- NTP and time synchronization - local time authority; importance for logging, certificates, and coordination
- Addressing plans - RFC1918 planning for households and small communities; avoiding conflicts
- Multi-WAN failover - automatic switching between primary ISP and backup (cellular, satellite)
- Cellular backup - 4G/5G modems as failover WAN; data management and cost controls
- Satellite backup - Starlink and alternatives; latency characteristics; when to use vs. cellular
- Offline-first design - services that function without any WAN; local content mirrors; DNS that resolves without internet
- Private WAN and community intranet - linking multiple sites over VPN or radio; intranet-only services
- Local DNS authority - resolving internal names without upstream DNS; split-horizon DNS
- Segmentation for safety - isolating deception environments, IoT devices, and high-risk systems from production
- Home Resilient Network - pfSense/OPNsense with multi-WAN, local DNS, VLAN segmentation
- Community Network - linking neighbor nodes with WireGuard or AREDN
- Remote Site Networking - reliable connectivity for an outbuilding or second location
| Failure |
Result |
Mitigation |
| Primary ISP down |
Internet lost |
Cellular/satellite failover |
| DNS resolver down |
Name resolution fails |
Local recursive resolver (Unbound) |
| WAN down entirely |
Internet unreachable |
LAN continues; local services unaffected |
| Router failure |
Full network down |
Spare router with pre-loaded config |