Networking

No, you don’t need Wi-Fi 7 for Matter. Every Matter device on my network connects over 2.4GHz Wi-Fi or Thread, and neither path touches Wi-Fi 7’s headline features. A Wi-Fi 7 router still helps a busy smart home in three indirect ways, but device compatibility is not one of them.

What Matter Actually Runs On

Matter is an application protocol, not a radio. It runs over standard IP networks, and the spec defines three transports: Wi-Fi, Thread, and Ethernet. Bluetooth LE is used only for the initial pairing handshake. Consequently, your router doesn’t need any “Matter support” checkbox; it just needs to move IP packets on a network the device can join.

You can expose a local dev server to webhooks from GitHub, Stripe, or Twilio. Run cloudflared next to a FastAPI app. This drops port forwarding, public IPs, and paid ngrok plans. Cloudflare Tunnels open an outbound-only encrypted link from your machine to Cloudflare’s edge. The edge then proxies webhook requests back to your local FastAPI endpoint with full TLS, auto reconnect, and no firewall changes.

The trick works because cloudflared opens QUIC connections outward from your machine. No inbound ports ever open on your router. Cloudflare’s edge gets the webhook POST from GitHub or Stripe. It routes that POST through your tunnel and hands it to localhost:8000, where FastAPI handles it. You get a stable, public URL like webhooks.yourdomain.com that survives reboots.

PiKVM turns a Raspberry Pi into a full KVM-over-IP device. It gives you IPMI-like remote access to any computer’s BIOS, boot loader, and OS through a web browser. You wire the Pi to the target machine’s HDMI output and USB port. Then you open the PiKVM web page from anywhere on your network. You get live video of the screen, keyboard and mouse control, virtual media mounting, and ATX power control. A DIY build runs under $100 in parts. Even the top PiKVM V4 Plus at about $385 costs far less than IPMI modules from HPE or Dell.

Every DNS query your devices make tells a story. When your home network sends those queries to Google (8.8.8.8), Cloudflare (1.1.1.1), or your ISP’s resolver, that provider builds a record of every domain every device visits. Your phone, your laptop, your smart TV, your thermostat: all of it. You can fix this. Run Pi-hole as a DNS sinkhole to block ads and trackers across the whole network. Then pair it with Unbound , a local recursive resolver, so your queries go straight to the DNS root servers instead of a third-party middleman.

Placing IoT devices on a dedicated VLAN with firewall rules that block all traffic to your main network - except specific connections to your Home Assistant server - prevents a compromised smart bulb or camera from becoming a pivot point into your personal computers and NAS. This setup works with consumer-grade managed switches and either UniFi or OpenWrt routers, and takes about an hour to configure properly.

The core idea is straightforward: instead of trusting every device on your network, you divide the network into isolated segments and only allow the traffic you explicitly approve. Your smart plugs, cameras, and voice assistants get their own network segment where they can reach the internet and your home automation server, but nothing else. If one of them gets compromised, the attacker is stuck in a sandbox with no path to your laptop or file server.

Matter-over-Thread gives you one standard that works across Apple, Google, and Amazon. But Zigbee2MQTT still wins for power users who want deep local control over old hardware. In 2026, run both: Matter for new buys and energy gear, Zigbee for battery sensors and the long tail of devices that won’t ever get a Matter firmware update.

What Is Matter and Why Does It Exist?

For nearly a decade, the smart home was a patchwork of rival ecosystems. A Philips Hue bulb worked fine in Apple HomeKit, but pairing it with Google Home meant jumping through extra hoops. An Amazon-branded device wouldn’t talk to an Apple TV at all. Brands had to pick a platform alliance and live with it. Buyers paid the hidden cost every time they bought from a brand that didn’t play well with their hub of choice.