To keep a homelab reachable through a power cut, ISP outage, or failed firewall, protect the entire critical path—not just the server. Put essential network equipment and hosts on a properly sized UPS, configure a genuinely independent second internet connection for WAN failover, and add a redundant firewall pair only if its extra addressing and maintenance are justified. Then test each failure you expect the setup to survive.
What kind of outage do you need to survive?
Start by defining the outcome: an orderly shutdown, a short interruption without rebooting, continued local network service, or continued internet access. Those goals require different layers of redundancy.
As an Amazon Associate I earn from qualifying purchases.
Map the path used by the services you care about: ISP handoff or modem/ONT, router or firewall, switch, wireless access point, and the homelab host or storage. A backed-up server cannot remain reachable if its switch loses power, and a second ISP cannot help if both connections depend on the same failed upstream equipment.
Free tools Windows power users keep installed
One-click scans. No signup required.
| Approach | What it can protect | Key dependency or limitation |
|---|---|---|
| UPS on selected equipment | Connected devices during a power interruption, for as long as the UPS can support their load | Only equipment plugged into battery-backed outlets benefits; runtime depends on the actual load. |
| WAN failover | Internet access when the preferred WAN becomes unavailable or meets a configured health trigger | The alternate connection must avoid the failed path, and existing sessions may be disrupted when the public IP changes. |
| Firewall high availability (HA) | Firewall service when one configured firewall node fails | The design needs platform-specific addressing and synchronization, and shared switches, power, or upstream links can remain single points of failure. |
How do I add backup power to a homelab?
Choose the loads that must stay on
List the devices required for the outcome you chose. For internet access, that may include the modem or ONT, router/firewall, switch, and access point as well as the host running the service. If the goal is only an orderly shutdown, the server and the equipment needed to communicate with its UPS may be the priority. Keep nonessential devices off battery-backed outlets if they would consume runtime needed by the critical path.
#1 Best Overall
- 425VA/260W Standby Uninterruptible Power Supply (UPS): Uses simulated sine wave output to provide battery backup power and to safeguard home office, home entertainment including computers, gaming consoles, and broadband routers
- 8 NEMA 5-15R OUTLETS: Four battery backup & surge protected outlets; Four surge protected outlets; INPUT: NEMA 5-15P right angle, 45 degree offset plug with five foot power cord
- ADDITIONAL FEATURES: LED status light indicates Power-On and Wiring Fault, transformer-spaced outlets
- GREENPOWER UPS HIGH EFFICIENCY DESIGN: Reduces power consumption by utilizing a compact charger and power inverter to create an ultra-efficient backup power system for home and office use
- 3-YEAR WARRANTY – INCLUDING THE BATTERY; 75K USD Connected Equipment Guarantee; UL SAFETY CERTIFIED: Product has been tested in a UL certified lab and listed with UL as meeting or exceeding safety standards
Size for both watts and VA
Total the connected equipment’s real power draw, then check that the candidate UPS supports the load in both watts and volt-amperes (VA). APC’s UPS sizing guide recommends output watt capacity 20–25% above the connected equipment’s draw; that is a sizing recommendation, not a universal electrical-code requirement. APC also identifies routers and modems as suitable UPS loads. Do not select a UPS by VA alone: the connected load must fit within both output limits.
Plan runtime at the intended load
Decide how long the critical devices need to operate, measure or estimate their draw, and use the UPS manufacturer’s runtime information for that load. Adding more equipment to the same UPS reduces available runtime. A capacity figure by itself does not establish how long a particular homelab will stay online.
If a server should shut down cleanly when the battery is low, confirm that the specific UPS and server operating system support a management connection and configure the shutdown behavior. Compatibility and setup vary by equipment, so check both manufacturers’ documentation rather than assuming a particular protocol or feature.
Rank #2
- 1500VA / 900W RELIABLE BACKUP POWER: The highest VA capacity available for home use; delivers short-term battery power to keep essential devices powered during blackouts, surges, and unexpected power interruptions
- TEN PROTECTED OUTLETS: Power your entire setup with 5 battery backup outlets for essential devices, and 5 surge-only outlets for peripherals. Plus built-in coaxial and Ethernet surge protection for added peace of mind
- AUTOMATIC VOLTAGE REGULATION (AVR): Corrects low voltage brownouts (88V+) and surges (+/-13%) without draining battery. Boosts or trims to stable 120V. Extends runtime for blackouts; Active PFC compatible for gaming PCs
- REPLACEABLE BATTERY & ENERGY STAR UPS: User-replaceable battery (APCRBC124, sold separately) for zero-downtime swaps. ENERGY STAR certified for 92%+ efficiency, cutting energy costs vs standard UPS units
- LCD DISPLAY PANEL: Features an intuitive LCD screen that displays real-time status information including battery charge level, estimated runtime, load capacity, and input voltage for easy monitoring of your power protection system
How can I keep internet access if one ISP goes down?
Use a genuinely alternate WAN path
WAN failover needs a second usable connection that does not share the failure you are trying to avoid. Two services that rely on the same upstream device, physical route, or power source may fail together. Map the path of each connection before treating it as independent.
Configure and monitor the preferred and backup gateways
In pfSense, gateway groups define routing behavior when selected in the relevant routing or firewall settings. Lower-numbered tiers are preferred; separate tiers provide failover, while gateways in the same tier are used for load balancing. Netgate recommends a failover group for the default gateway. Its multi-WAN requirements also call out DNS and LAN-rule configuration, so a gateway group alone may not complete the setup.
OPNsense documents a similar tier-based approach. Its failover behavior can respond to a primary connection being down, packet loss, or increased latency, and traffic can return to the primary when it recovers. Choose monitoring targets and trigger thresholds that reflect what counts as usable service for your connection; a physically connected WAN does not necessarily mean internet access is working. Decide whether automatic failback is appropriate for the applications using the lab.
Rank #3
- 1500VA/1000W PFC Sinewave Uninterruptible Power Supply (UPS): Uses sine wave output to provide battery backup power for Active PFC & conventional power supplies; Safeguards computers, workstations, network devices, and telecom equipment
- 12 NEMA 5-15R OUTLETS: 6 battery backup & surge protected outlets, 6 surge protected outlets; INPUT: NEMA 5-15P right angle, 45 degree offset plug with 5 foot power cord; 2 USB charge ports (1 Type-A, 1 Type-C) quickly charge phones and tablets
- MULTIFUNCTION, COLOR LCD PANEL: Displays immediate, detailed information on battery and power conditions; Color display alerts users to potential issues before they can affect critical equipment and cause downtime; Screen tilts up to 22 degrees
- AUTOMATIC VOLTAGE REGULATION (AVR): Corrects minor power fluctuations without switching to battery power; UL SAFETY CERTIFIED: Product has been tested in a UL certified lab and listed with UL as meeting or exceeding safety standards
- 3-YEAR WARRANTY – INCLUDING THE BATTERY; $500,000 Connected Equipment Guarantee; FREE PowerPanel Management Software (Download)
Set expectations for sessions and inbound services
Failover does not guarantee that active connections continue seamlessly. Netgate notes that applications which bind a session to a client’s public IP can fail when traffic moves to another WAN. Review how your services handle public-address changes, including VPNs, DNS, and inbound connections; outbound failover does not by itself establish that inbound access will work through the alternate connection.
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Scan for outdated or missing drivers - takes under a minuteDriver Scan →Clear out junk files and repair common Windows errorsFree Scan →When is a second firewall worth adding?
A second firewall is useful only when the additional availability is worth the configuration and upkeep. It is a separate design from multi-WAN: a second internet path protects against some WAN failures, while a properly configured firewall pair can protect against failure of one firewall node. Neither one automatically protects shared equipment between the redundant components.
Understand the documented pfSense CARP requirements
Netgate’s pfSense CARP prerequisites specify three IP addresses in each subnet and a separate unused subnet for the synchronization interface. Its example uses primary and secondary nodes, a sync interface, virtual IPs, and a shared CARP address that clients use as their gateway. These are requirements for that documented pfSense design, not a universal specification for every firewall platform. Confirm the current requirements for your software, network, and ISP before planning addresses.
Rank #4
- 12 NEMA 5-15R OUTLETS: Six battery backup & surge protected outlets; Six surge protected outlets (Three ECO controlled); INPUT: NEMA 5-15P right angle, 45 degree offset plug with five foot power cord
- MULTIFUNCTION LCD PANEL: Displays immediate, detailed information on battery and power conditions
- ECO MODE: When the UPS detects a computer is off or in sleep mode, it will automatically turn off power to computer peripherals connected to ECO mode outlets, reducing power usage and lowering energy costs
- 3-YEAR WARRANTY – INCLUDING THE BATTERY; $100,000 Connected Equipment Guarantee and FREE PowerPanel Personal Edition Management Software (Download)
Look for shared failure points
Netgate’s example connects both WAN ports to the same WAN switch before the ISP equipment. That arrangement can support firewall-node failover, but it does not make the shared switch, its power, or the ISP path redundant. Apply the same check to LAN switching, UPS coverage, and any upstream device both nodes depend on. Redundant nodes do not remove a shared dependency unless the topology also protects it.
How do I test power and network failover?
Test one failure at a time while a client checks access to the services that matter. Netgate recommends confirming client internet access with both firewall nodes online before testing failover. Its guidance includes disconnecting WAN or LAN cables, removing power from the primary, running each unit alone, and observing client traffic during the transition. Netgate’s instruction is direct: “Since the goal of HA is high availability, thorough testing before placing a cluster into production is a must.”
Do these 3 things before closing this tab:
1Fix the driver behind crashes, sound loss and screen glitches2Clear out junk files and repair common Windows errors3Scan for outdated or missing drivers - takes under a minute- Record the baseline: With the normal setup running, confirm that a client can reach the local services and internet resources you depend on.
- Test the UPS path: Simulate loss of mains power safely and verify which devices remain on, whether the services stay reachable, and whether the configured shutdown process works.
- Test WAN failover: Make the preferred WAN unavailable or trigger its configured health condition. Check that traffic uses the alternate connection and note which existing sessions or inbound services are interrupted.
- Test firewall-node failover, if configured: Follow the platform’s procedure to disconnect or power down the primary. Verify that the secondary takes over and that the client continues to use the shared gateway.
- Test recovery: Restore the failed component and observe whether traffic returns as intended. Record the interruption, recovery time, and any manual steps required.
There is no universal recovery-time target established for a homelab: the result depends on its equipment, configuration, and services. Use your own measurements to decide whether the behavior meets your availability goal.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
