Can you give an example of tech devices that aren't manufactured in China?
(To bring this to the logical conclusion: So much for Internet access.) ;)
(From Chinese parts.)
That all tech devices are made in china is a myth propagated by the ignorant (or malicious).
From the raspberry pi (UK) to Samsung Galaxy (South Korea) it is trivial to find a product not made in China once you leave the low end of the market.
And now even the low end has alternatives if you spend some time and effort.
Name any category of product whatsoever and I will personally find you a non-Chinese alternative.
Even many things “made” in China are only really assembled in China. A computer that’s “made” in China is often just slapped together like a lego kit from pieces made in Thailand, South Korea, Germany, the US, Singapore and Taiwan (which isn’t a part of China).
The South Koreanan manufactured units are generally only sold in South Korea.
Without having put any specific thought into it, I always assumed that while designed in the UK they would be manufacturing them in Asia, so it's a pleasant surprise to find out that you're mostly right - the majority have been made in Wales (part of the UK)!
However some are made in Asia, including China. Quoting Wikipedia (plus the citation links):
> "Most Raspberry Pis are made in a Sony factory in Pencoed, Wales,[19] while others are made in China and Japan.[20][21]"
> [19] https://www.sonypencoed.co.uk/about/
> [20] https://www.zdnet.com/article/14-million-raspberry-pis-sold-...
The second link (20) is from 2017, with headline "Raspberry Pi: 14 million sold, 10 million made in the UK"
BUT. The software for the iPhone is made in the US. Which is why people buy it. All phones are black rectangles! The hardware does not matter that much. And the price to buy into the Apple software ecosystem is much higher than the sticker price of the iPhone, only some of which goes to China. So most of the reason someone buys a tech product, and most of the value, ie the software, is US made.
BUT #2: the solar inverter software is used as DRM. This should serve as EXTRA evidence for you that the SOFTWARE MATTERS and that the hardware is completely fungible.
It takes a little bit of setup, and less than $200. Anyone techy should do this; it's essentially maintenance free once running.
My (openWRT) router also has IPs on both subnets, and routes both LANs to the WAN. Restricting/throttling WAN bandwidth is easily managed in OpenWRT. Preventing WAN access is easily done by not providing a gateway in the DHCP assignment (pihole).
Obviously the big difference between this and a VLAN is that an ill-behaved device could still access the other subnet, and could still discover the gateway and route to the WAN. So far, none of the IoT crap on my restricted subnet has misbehaved.
Keep your [phone/PC/whatever] on one VLAN, with a NAT gateway, and they'll work just as they do now.
Keep the IoT Things inside of their own VLAN, without a gateway to the Internet.
And if a device like Home Assistant or whatever needs to exist on both VLANs in order to be useful, then: Make sure it isn't forwarding/routing/NATing packets.
---
The implementation details vary, but they needn't be particularly expensive.
What I do at home is run OpenWRT on a Pi 4 for my home routing purposes. It's fast enough for my needs and it's got simple GUI configuration options for VLAN. (Why OpenWRT? Because it's easy for me to puzzle out when I need to adjust something after a few months or a year -- I don't deal with routing every day, nor do I wish to. (Also SQM is a built-in, which always keeps WAN latency tolerable.))
From there, I've got cheap managed switches that enforce/insert VLAN tags where that is useful to me, so I can decide which physical ports are capable of talking to whichever VLANs.
And from there, I've got relatively inexpensive Mikrotik access points that are configured to provide different SSIDs for different VLANs.
It all works OK, though more enterprisey folks will almost certainly choose a very different path.