BTC — updated

Mining Network Setup Guide: From One ASIC to a Farm

A mining network does not need to be complicated. One ASIC plus a consumer router works. Five ASICs plus a managed switch and a VLAN works better. Fifty ASICs needs a real network design — segmentation, monitoring, redundancy. This mining network setup guide walks the scaling path from a single home miner to a small farm, covering cable, switch sizing, latency to pool, and the configuration choices that prevent the network from becoming the bottleneck. Each layer is reversible; start simple and add only what the next scale actually requires.

The minimum: one ASIC on a consumer router

At the smallest scale, a Bitcoin miner needs nothing more than a single Ethernet port on the existing home router. Plug in, get a DHCP lease, configure the pool URL through the miner’s web UI, hash. Bandwidth requirement is trivial — stratum traffic consumes a few kilobytes per minute. Latency to the pool matters more than bandwidth, but any reasonable home internet connection meets the requirement.

The decisions at this scale are about access control rather than performance. Default miner web UIs ship with default passwords (often “root” / “root” on Bitmain stock). Change them immediately. Disable any miner exposed to the public internet — never port-forward port 80 or 443 of an ASIC to the WAN. The miner only needs outbound access to the pool; nothing inbound from the internet. Detail on the firewall side lives at the companion piece on ASIC static IP and firewall configuration.

Two to ten miners: dedicated switch, mining VLAN

Above one miner, a dedicated unmanaged or lightly-managed switch starts to pay off. Reasons: cable cleanup, avoiding consumer router port limits, and keeping mining traffic off the same broadcast domain as the household devices. A basic 8-port or 16-port gigabit unmanaged switch from TP-Link, Netgear, or Ubiquiti runs USD 30–100 and handles small-cluster duty cleanly.

VLAN segmentation for mining traffic

A managed switch enables VLAN segmentation — putting miners on their own logical network, isolated from household devices. The benefit is twofold: misconfigured miners cannot scan or interfere with personal devices, and any future security issue in miner firmware is contained. A typical small-farm VLAN scheme: VLAN 10 for the household, VLAN 20 for miners, VLAN 30 for monitoring infrastructure. The router (or a managed switch acting as Layer 3) handles inter-VLAN routing where needed, with firewall rules controlling what can talk to what.

Managed switches with VLAN support start around USD 100–200 for an 8-port unit (Ubiquiti EdgeSwitch, Mikrotik CRS, TP-Link TL-SG3008). For mining-only deployments, an unmanaged switch is usually fine; managed makes sense when the mining network shares physical infrastructure with household or business networks.

Cable choices: Cat5e is enough

Mining traffic is small. Stratum work and response messages total a handful of kilobytes per second per miner under heavy load. Cat5e cable, rated for gigabit at up to 100 meters, is more than sufficient. Cat6 adds capacity that mining traffic will never consume. Cat6a and beyond are overkill outside specialized environments.

The cable choice that actually matters is shielded versus unshielded in environments with electromagnetic noise. Mining rooms are noisy: high-current PSUs, switching power supplies, sometimes generator output. Shielded Cat5e or Cat6 (S/FTP) helps in noisy environments. For typical home setups, standard unshielded cable is fine.

Cable length matters for management workflows. A 100-foot cable run across a basement might be necessary, but each connector and each meter of cable is another potential failure point. Plan cable routes deliberately — keep cables off the floor, away from power runs (cross at 90 degrees, never parallel), and labeled at both ends. A label maker is one of the cheapest farm investments available.

Ten to fifty miners: structured network, monitoring layer

At this scale, the network deserves real design. A managed switch is no longer optional. Per-port monitoring (link state, bandwidth, errors) helps identify the miner that has dropped offline before the pool dashboard does. Redundant uplinks between switches prevent a single switch failure from taking down the whole cluster.

Switch sizing

Count miners plus infrastructure devices (PDU management interfaces, environmental sensors, monitoring servers, IP cameras) and add 30 percent headroom. A 24-port managed switch supports up to 16 miners with margin for infrastructure. A 48-port supports up to 32 miners. Stacked or chained switches scale further. Power over Ethernet (PoE) is rarely needed for mining itself but can power IP cameras and access points cheaply.

DHCP versus static

At any scale, miners should have predictable IP addresses. Two approaches: DHCP reservation (the router or DHCP server hands out the same IP to a given MAC address every time) or static IP configured on the miner. DHCP reservation is easier to manage at scale — change the reservation in one place when an address needs to move. Static IP is more resilient (the miner does not depend on DHCP), but requires touching each miner individually to change. Most small farms use DHCP reservation; very large or highly regulated deployments use static.

Latency to pool: the only network metric that affects revenue

Pool latency drives stale share rates, which drive revenue. A miner with 30 ms RTT to its pool produces near-zero stale shares. A miner with 250 ms RTT produces 1–3 percent stales, which is 1–3 percent revenue loss. The geographic placement of the pool endpoint matters more than the internal network design.

For most operators, choosing a pool that runs an endpoint in the same continent solves the problem. Braiins Pool, F2Pool, Foundry USA, AntPool, ViaBTC, and Luxor all maintain regional endpoints. Configure the nearest endpoint as primary and a more distant region as failover. Pool selection ties into the broader pool model — PPS, FPPS, PPLNS — discussed at what is PPS, FPPS, and PPLNS.

Internal network latency is rarely a factor. A well-designed gigabit LAN adds well under 1 ms of latency between miner and upstream router. The 50–200 ms that miners actually see is almost entirely on the WAN side, between the home or farm and the pool’s regional endpoint. ISP routing quality matters; in some markets, switching ISPs measurably improves latency to a given pool.

Network for remote monitoring

Remote monitoring tools like Awesome Miner, Foreman, and self-hosted Grafana/Prometheus stacks consume modest bandwidth but need consistent network access to every miner. Place the monitoring server on its own VLAN with firewall rules allowing it to reach the miner VLAN. Background on monitoring stack choices lives at ASIC remote monitoring stack.

For remote access into the farm network from offsite, a VPN is the right tool. Tailscale, WireGuard, or OpenVPN all work; Tailscale is the easiest for small operators. Avoid exposing miner UIs to the public internet under any circumstance — the historical record of ASIC firmware vulnerabilities is long enough that public exposure should be treated as a guaranteed eventual compromise.

Beyond fifty miners: the farm-scale network

At farm scale, the network design adopts data-center patterns: top-of-rack switches, redundant aggregation layer, dual uplinks per rack. The principles do not change — VLANs, predictable IP, monitoring — but the device count and redundancy requirements grow. Operators at this scale typically engage a network professional rather than self-designing.

The relevant scaling notes from a mining-specific perspective: power for the network gear itself becomes non-trivial (a 48-port managed switch may draw 50–100 W), the network needs to come back up before the miners do after a power event (which means the network gear belongs on the UPS, while the miners typically do not — see the UPS for bitcoin miners guide), and the monitoring backend often runs offsite or in a colocation facility separate from the mining floor.

Mistakes that take the network down

Daisy-chained consumer switches without uplink aggregation. One unmanaged switch handling 24 miners on a single gigabit uplink runs fine for hashing traffic but melts when remote monitoring tries to poll every miner simultaneously.

Mixed VLAN tagging configurations across switches. A misconfigured trunk port can flood traffic across VLANs or block legitimate traffic entirely. Document the VLAN scheme and test it before deployment.

Exposing miners to the internet via port forwarding. Even with a strong password, the public exposure invites compromise. Use a VPN.

Using a single ISP without failover. A farm-scale deployment loses revenue at the rate of the entire hashrate when the ISP drops. Dual ISP with router-level failover (or at minimum a cellular backup that handles pool stratum traffic) addresses this for any deployment large enough to justify the cost.

For operators planning a hardware deployment alongside the network build-out, the Bitcoin mining hardware lineup includes the current-generation units that justify investing in proper network infrastructure.

One final consideration: keep configuration in version control even at small scale. Exporting router/switch configs to a Git repository monthly costs nothing and turns a hardware failure from a half-day rebuild into a thirty-minute swap. The same discipline applies to per-ASIC settings exported via the manufacturer’s dashboard — most farms recover faster from a firmware-corruption event than from forgetting which pool URL a particular worker was using.

References

How much bandwidth does a Bitcoin ASIC use?
Very little — under 10 kilobytes per second per miner under normal load. Stratum traffic is small messages exchanged frequently. Even residential internet connections handle dozens of miners without bandwidth contention.
Do I need a managed switch for mining?
Below five miners, an unmanaged switch is fine. Above that, a managed switch enables VLAN segmentation, per-port monitoring, and link aggregation, which simplify operations and improve security. The cost premium is modest for small farms.
Should I expose my miner's web UI to the internet?
No, under any circumstance. Use a VPN like Tailscale or WireGuard for remote access. ASIC firmware has a long history of vulnerabilities; public exposure invites compromise even with strong passwords.
Does Cat6 cable improve mining performance over Cat5e?
No. Mining traffic is small enough that gigabit Cat5e is more than sufficient. The cable choice that matters is shielded versus unshielded in electrically noisy environments, not the category rating itself.

For operators sizing a multi-unit deployment ready to slot into a planned network, the Coin Web Mining catalog covers current-generation hardware with live pricing.