Port Forwarding Rules

Rule	Incoming Port	Protocol	Docs
Plex	32400	Both	support.plex.tv
BitTorrent	51000-51999	Both	wikipedia.org
WireGuard	53820	Both	wireguard.com
Minecraft	25565	Both	portforward.com
Iperf	50201	Both	iperf.fr
http/s	80,443	Both	wikipedia.org
Peertube Live	1935	Both	joinpeertube.org
Git SSH	2228-2229	Both	gitlab.com

Non-Default Port Mappings

Some services have been configured to use non-standard port mappings. This is usually done to mitigate the risk of automated port-checking probes.

BitTorrent. This range is used to distribute all bittorrent connections across a wide range of high-number ports. See deluge configuration for more information about what port ranges go to which torrent clients.
Wireguard. This was set to a non-standard port-mapping before I learned WireGuard doesn't respond to unauthenticated packets, which makes this unnecessary.
Iperf. Iperf defaults to port 5201, which is not a high-number port. Since it is unauthenticated, I use a non-default, high-number port instead.
Git SSH. I use a non-default port for my GitLab SSH server to minimize potential conflicts with other services on the network. It is important to be able to access the GitLab instance over SSH outside the network.

graph TD;
    Client --> Router;
    Router --> PiHole;
    PiHole -- Ad --> /dev/null;
    PiHole -- Real --> Cloudflare DNS;

EdgeOS User Guide PDF
EdgeOS is built on Vyatta
To make configuration changes in the CLI, run configure, make the changes (e.g. set interfaces ethernet eth0 dhcpv6-pd pd 0 interface eth1), then save the changes with commit; save; exit.