Pimeleon Architecture
Learn how Pimeleon router works, what services protect your network, and how everything fits together.
Pimeleon Architecture
Learn how Pimeleon router works, what services protect your network, and how everything fits together.
Network Architecture
Understand the network design and layout:
- Network Overview - Two-network design, security zones, traffic flow
- IP Addressing - How devices get addresses, DHCP vs static IPs
Core Services
Essential services that make Pimeleon router work:
- DNS Filtering - Multi-layer DNS protection and privacy
- DHCP Overview - Automatic network configuration
- Firewall Protection - Security and access control
Filtering & Privacy
Services that protect your privacy and block unwanted content:
- DNS Filtering and Ad Blocking - Network-wide ad and tracker blocking
- DNSCrypt Privacy - Encrypted DNS for privacy
- HTTP Filtering - Advanced web content filtering
- Proxy Caching - Speed improvements through caching
- Tor Anonymity - Anonymous browsing support
How It All Works Together
Pimeleon router uses a defense-in-depth approach with multiple protection layers:
Internet
↓
[Firewall] ← Blocks unwanted connections
↓
[DNS Filtering] ← Blocks ads/trackers at DNS level
↓
[DNSCrypt] ← Encrypts DNS queries
↓
[HTTP Proxy] ← Additional content filtering
↓
[Tor] ← Optional anonymity layer
↓
Your Devices
Layer 1: Firewall
- First line of defense
- Blocks unauthorized access
- Controls traffic between zones
- See: Firewall Protection
Layer 2: DNS Filtering
- Blocks ads and trackers at domain level
- Prevents malware C&C connections
- Protects all devices automatically
- See: DNS Filtering
Layer 3: DNS Encryption
- Prevents DNS snooping by ISP
- Protects DNS privacy
- Validates DNS responses (DNSSEC)
- See: DNSCrypt Privacy
Layer 4: HTTP Filtering
- Catches ads that bypass DNS filtering
- Content transformation and privacy
- Caching for performance
- See: HTTP Filtering, Proxy Caching
Layer 5: Anonymity (Optional)
- Routes traffic through Tor network
- Hides your real IP address
- Access .onion sites
- See: Tor Anonymity
Performance Characteristics
Understanding what to expect:
| Service | Latency Impact | CPU Usage | RAM Usage |
|---|---|---|---|
| Firewall | < 1ms | < 5% | ~50MB |
| DNS Filtering | ~5-10ms | < 10% | ~150MB |
| DNSCrypt | ~10-30ms | < 5% | ~20MB |
| HTTP Proxy | ~5-15ms | 5-15% | ~100MB |
| Tor | 500-2000ms | 10-20% | ~100MB |
Total typical overhead:
- Latency: ~20-50ms (without Tor)
- CPU: 20-35% average
- RAM: ~420MB
- Bandwidth: No reduction
Design Principles
Pimeleon router architecture is built on:
- Defense in Depth - Multiple protection layers
- Privacy by Default - All filtering enabled out of the box
- Transparency - Know what's happening on your network
- User Control - Easy to customize and configure
- Performance - Minimal impact on network speed
For Developers
If you're building on Pimeleon router:
- Developer Documentation - API reference and contribution guide
Related Documentation
- Getting Started - Install and setup
- Deployment - Hardware and deployment guides
- Hardware - Supported hardware and requirements
- Troubleshooting - Common issues and solutions
← Previous: Getting Started | 🏠 Documentation Home | Next: Deployment →