I use a mikrotik RB5009 for my 2.5gb routing. It technically can hit 10gbps via routing.

Switching you can try https://mikrotik.com/product/crs305_1g_4s_in

Mikrotik RB5009 is my router.

Moving to OPNsense

USB inherently has latency issues and protocol overhead. Seems like you’re restricted to hardware unfortunately.

See if seachest is compatible with your drives. I think it’s only compatible with Exos.

Also are you running through USB?

What’s your HDD model?

Try this in your SMB settings in OMV.

socket options = TCP_NODELAY SO_RCVBUF=65536
SO_SNDBUF=65536
read raw = yes
write raw = yes
max xmit = 65535
dead time = 15
min receivefile size = 16384
write cache size = 524288
getwd cache = yes
max connections = 65535
max open files = 65535
min protocol = smb3
max protocol = smb3

What software are you using

I have a hot storage NAS that backups to a warm storage NAS.

I backup every week and scrub every month.

I have 2 x ZFS1 pools that contains 3 x 20TB disks each.

With ECC ram, scrubbing, and independent pools, it’ll take a house fire to kill my local storage.

I also have a constant backing to Backblaze and yearly encrypted backup that I ship to a friend across the world.

This is the exact script I use to install tailscale on my VPN server

Installing Tailscale

 curl -fsSL https://tailscale.com/install.sh | sh 

Enable IP forwarding

 echo 'net.ipv4.ip_forward = 1' | sudo tee -a /etc/sysctl.conf 
 echo 'net.ipv6.conf.all.forwarding = 1' | sudo tee -a /etc/sysctl.conf 
 sudo sysctl -p /etc/sysctl.conf 

Advertise subenets and exit node

 tailscale up --advertise-exit-node --advertise-routes=192.168.0.0/24,192.168.2.0/28,192.168.5.0/24,192.168.10.0/24

NUCs have an iGPU, you should be fine.

I use OpenMediaVault for my NAS

But if you don’t want to be the IT of your family, I’d just go with an easy solution like WDs my cloud or one drive

Encoding uses the iGPU. The iGPU should usually support 4k 60fps if it’s a recent CPU.

I’ve had this happen when I had ram issues. You can try doing a memory test if you want to take that out of the equation.

Adguard home

OpenMediaVault

JellyFin

I only know 2 passwords.

Bitwarden for all of my passwords. No OTP in bitwarden.

Bitwarden admin email’s password is not in bitwarden, it’s the only other password I know.

With all accounts supporting webauth I use yubikeys.

For accounts that don’t support webauth, I use Aegis that’s password secured with a static password on my yubikey so even I don’t know that password.

If I lose all 3 of my yubikeys, them I’m SOL.

I use a yubi key to do my static passwords for otp apps like this.

I think it’s 38 characters long.

I wish ageis uses keys or webauth but that requires online functionality.

I’ve bought about 600tb from server part deals.

Just got 20tb drives for about 250ish. Higher than what I wanted to pay, however $12.5/TB is good enough for me.