@Stonewall77 Hi!  I am testing the TPLink AP's and hope the SDN ecosystem will work just like or better than Unifi has it now and I have to have for all my networks..... Guess we will see how it all pans out in the near future of it.....

I sell and install all Reolink cameras and NVR's in my clients networks and it is solid, sharp and the easiest I have seen to setup and install.  All cameras I use are wired back to the NVR or POE switches where needed.

I am also looking at and going to test other brands now coming out strong for a good reason I feel.... some of these hardware companies are now selling "false advertised" hardware that I call just junk.  No way I will sell or install those unreliable devices on all the networks I maintain for clients.

@Doc2485

Thanks for the reply.  I've heard good things about reolink cameras.  I'll check 'em out.   

@Stonewall77 Pi-Hole will get most of the functions you want about ad-blocking and parental controls. You can install it on the same computer you run the controller. My setup has the Omada controller and Pi-Hole running at a Raspberry Pi 4, and works like a charm. 

On the Pi-Hole and extra security, you didn't mention the kind of router you have? Assuming it's from your network provider? Because if you install Pi-Hole, you need to disable DHCP address assignment inside that router. And for playing with NAT, port forwarding and VLANs, it will easier and faster if you have a router that allows that.

I only have my devices into a single subnet so I just use my network provider router, and I don't do port forwarding or NAT as my cable operator has CGNAT, but the basic router provided by them can perform these functions. For a home use, I can live without a separate / fancier router.  

@LucianoR 

Thanks for the response.  My router is a CenturyTel provided Zylex wifi/router with the wifi turned off.  So I think you sold me.  I'll dust off my R Pi 3 and try out Pi-hole and work to setup the omada controller.  

I'm still thinking I need a separate vlan for my iot devices. 

Also, how do I handle non-ad related security?  My 8 year old loves those crappy ipad games that I hear are full of bad junk.