mtz_federico

No offence taken. I understand your situation well, I am just trying to understand why the print server is preventing Pi-hole's DNS queries from working. Pi-hole is not working when you run the print server and you have to change your device's DNS to something else. If the print server is not running does the issue still happen? if it continues then we can focus on something else. I am assuming that pi-hole is running on the same pi as the print server. and what upstream DNS is pihole using? btw, the reason I asked about your devices is because every device connected to the internet has to setup connections via the router. If there are many connections the router might not be able to handle new connections. In this situation the print server could be doing something sketchy or the port forwarding could be doing something.

the config looks good, I would just recommend only allowing TCP or UDP, depending on what is being used. Which print server are you using? is there a tutorial that you followed? Also, how many devices do you have connected? and how much are they used? I am looking at your routers spec sheet, and might not be able to handle too many connections.

If you still want to gain some experience, you could create a web server that let's you upload certain files to get printed. This page would have authentication. For port forwarding, you would need it for any approach (web server, vpn, print server, etc). could you share a screenshot of your router's port forward config?

This, and if the AP and all of the ethernet devices are connected to a switch, so that the router only gets traffic going to the internet, it should work fine. You could get a good AP from ubiquiti and if you are still having issues you could replace the router with a better business-grade one.

Check the Steam settings for a speed limit. The only other thing that I can think of is to clean the ethernet ports on both your motherboard and router.

Could you add a link to the cable

With the server running, try using a port forward testing website to see if it is open. Just to clarify, you changed the routers inbound and local ports to be 25565-25565, changed the server port to 25565, you are sure that the windows firewall is disabled or is allowing port 25565 on tcp and your friends are trying to connect to [your public ip]:25565? If all of that is true and they still can't connect, you might be behind Carrier grade NAT (CGNAT). To verify this, check if your routers public ip (WAN ip) is the same as the ip that you get when you google what's my ip. If they are different, then you are behind CGNAT.

Have you checked the adapter settings to see if your PC is using gigabit?

For the port situation you could use an SRV record. An SRV record let's you point a domain to an ip and a port. This means that something like bedrock.yourNoipDomain.com, would point to your ip and your port. It is also useful if you want to run multiple servers on the same machine but don't want to make a server lobby. no-ip has a tutorial for the java version here. According to this cloudflare forum post, for it to work in bedrock you need to change the record to UDP. Like: _minecraft._tcp to _minecraft._udp I have only tested it on the java version and it worked.

Exactly. The best thing to do is to ask IT to get the routers WAN MAC address whitelisted. They tend to offer that for things that can't open captive portals like gaming consoles, IoT, etc.

What do you mean here? I think that you are trying to say that there should be a configuration page (or something) where you can enter your login credentials for the captive portal (this is the page that opens when you connect to a network were you should enter credentials or just click on a button to continue to the internet). is this what you mean?

I am confused. When you created the wifi network, did your devices connected to the airport extreme's wifi have internet access? did the captive portal show up? You might have to ask IT to whitelist the airport extreme's WAN MAC address.

Try disabling DHCP on the tp-link router. Only one router should be handing out ips.

You might be able to use ipv6 to connect to your devices but you need to have ipv6 on the device outside your network. You could also use a VPN like tailscale or zerotier.

Check if you can try the t-mobile home internet and see how it performs for you, if it doesn't work well for you, go for cox. Cox is more expensive but it is wired and might be more stable and have less ping. I have heard bad things about the t-mobile home internet router (no port forwarding and the config resets) but also heard that they might be changing it.

You are not giving us enough info. Is the main router the only device doing DHCP for everything? on which ip range? how many devices are connected (the subnet mask might be to small)? what does the error say? when does it happen? You could set each router to act as a router just make sure that the ip range is different from the one on the main router. If the main router uses 192.168.0.x/24, each router could be in 192.168.1.x/24. The problem with this is that you would now have double nat, if that is a problem for you then you would want to consider having a single router (like pfsense) with 5 separate networks connected to each router in AP mode.

Have you considered a POE splitter like this one. It splits the POE connection into a DC power barrel and an ethernet port. You would just need a POE injector on the other end.

Try running a port scan to see if it is on a non-standard port. I have not used advanced port scanner in a while and don't remember how to do it but it should be easy.

I found this guide. I have never used that router but the guide looks accurate.

It might be a satelites issue. There might not be enough satelites and ground stations to handle the demand

How do you know that it thinks you are using a vpn? Does it not let you connect? if that's the case, what is the error message?

It is an error message for a timed out connection. In other words the MC client can't find the server. Make sure that the server is running and that the port is open in your computers firewall. Use a port forward testing website to check if it is working. Also, Make sure that the ip being used to access the server is not private. Private ip's are 192.168.x.x, 10.x.x.x, 172.16.x.x - 172.31.x.x, or 100.64.0.0 - 100.127.255.255 (this one is used for CGNAT. Let's hope it's not that). If the ip has letters, it is ipv6. In that case you need to make sure the mc server listens on ipv6 and that your friend has ipv6. This on Mojang's bug page

I have never used it but, openWRT might be a good option. You could even use the same router for your normal network and for the vpn network. What VPN provider are you using?

Does this happen in any other network?

Are there any pipes or electrical conduits in the wall? That could be a huge factor. Check if the same thing happens in other walls, even if the router is further away.