Private sub-WAN to a public WAN: implementation & security

[paul_51]

Hello there. This is my first post, so... please bear with me.

The apartment building I've moved into offers Internet access via an unsecured wireless network, being broadcast from a wireless router in the hall. A lousy thing to have, no doubt; c'est la vie, I guess.

I intend to set up a tiny wireless secured (!) LAN in the apartment, using a single wireless router (TP-Link TL-WR841N).

Questions being:
(1) how will it physically connect to its gateway, the buildings unsecured wireless network?
(2) what are the security risks of, say, shopping on eBay from within this "sub-network"?

I've been thinking of getting a wireless bridge, which would act as a client to the building's WiFi and then be plugged into the router's WAN port. That way, resources on the apartment's LAN will be secure from neighbors and passerby. However, it seems a bit... cumbersome and costly.
Are there no other options? And will Internet traffic be at all secure?

 

[CaptainSTX]

The only way to secure your WAN traffic is use a VPN.

By subscribing to a VPN service your traffic from your PC to your VPN providers server will be encrypted.

If you only need to secure communications on one device or at least one device at a time run the VPN on that particular device. If you need to run it on multiple devices then you will need to run the VPN client on your router.

Running a VPN on a router will reduce your upload/download speeds significantly. You need to buy the most powerful router possible to minimize the impact.

Look at running Merlin's firmware on the most powerful ASUS router( AC68U) . This will give you the option of running the Astrill VPN app.

If you want a turnkey solution also look at the routers from Sabai which run their customized version of Tomato. Other VPN providers also sell Sabai gear.

If you don't use a VPN all your WAN traffic can easily be intercepted by nearby neighbors.

If you go with the VPN router option you will also need to install a wireless bridge. Do not try and run both the bridge/repeater on the same device as the VPN, as the VPN will tax the router to its limits.