4 ms·

There's also OpenBSD which lends itself very nicely for router/firewall setups. The Ubiquiti edgemax routers are also pretty nice and cheap, they have a good G

There's also OpenBSD which lends itself very nicely for router/firewall setups. The Ubiquiti edgemax routers are also pretty nice and cheap, they have a good GUI. I remember also someone here posting how he runs openbsd in the edgemax routers.

blinkingled 11y ago
I have never looked into OpenBSD - but how is the driver support now a days? I did some searching around and looks like VMWare tools for example need to be installed in FBSD emulation mode. It might be a good idea from a security perspective, just not sure how well it will work either bare hardware or virtualized.
- chrismsnz 11y ago
  It has good in-kernel support for virtio drivers (e.g. kvm, bhyve, vmware) and can also run domU in the latest release. It doesn't support "vmware tools" as such, but does support the virtual interfaces for network, disk, ballooning etc... http://man.openbsd.org/OpenBSD-current/man4/virtio.4 http://man.openbsd.org/OpenBSD-current/man4/virtio.4
seanp2k2 11y ago
Fwiw, the EdgeRouter Lite runs Vyatta on Debian on a MIPS CPU with hardware offload. It's really hard to build something more capable for "power user" home NAT duty for less money. Also, it's fanless and doesn't require too much tinkering to get working (though the web UI doesn't surface all the options -- you'll still likely need to invest an hour or two getting familiar with Vyatta, which is very similar to Cisco IOS from a CLI standpoint): https://www.ubnt.com/edgemax/edgerouter-lite/ https://www.ubnt.com/edgemax/edgerouter-lite/ If you're in the Bay, Streakwave (authorized Ubiquiti dealer) is right in San Jose: https://www.streakwave.com/mobile/searchresult.asp?Tp= https://www.streakwave.com/mobile/searchresult.asp?Tp= (WASD keyboards, makers of the CODE keyboard, are also in the Bay Area and do local pickup as a delivery option!) I've been quite pleased with the uptime and performance of my little $100 million-packet-per-second router. I used to be a big believer in pfsense, but the ERLite got me to retire that old thing.

blinkingled 11y ago

I have never looked into OpenBSD - but how is the driver support now a days? I did some searching around and looks like VMWare tools for example need to be installed in FBSD emulation mode. It might be a good idea from a security perspective, just not sure how well it will work either bare hardware or virtualized.

chrismsnz 11y ago
It has good in-kernel support for virtio drivers (e.g. kvm, bhyve, vmware) and can also run domU in the latest release. It doesn't support "vmware tools" as such, but does support the virtual interfaces for network, disk, ballooning etc... http://man.openbsd.org/OpenBSD-current/man4/virtio.4 http://man.openbsd.org/OpenBSD-current/man4/virtio.4

seanp2k2 11y ago

Fwiw, the EdgeRouter Lite runs Vyatta on Debian on a MIPS CPU with hardware offload. It's really hard to build something more capable for "power user" home NAT duty for less money. Also, it's fanless and doesn't require too much tinkering to get working (though the web UI doesn't surface all the options -- you'll still likely need to invest an hour or two getting familiar with Vyatta, which is very similar to Cisco IOS from a CLI standpoint): https://www.ubnt.com/edgemax/edgerouter-lite/ https://www.ubnt.com/edgemax/edgerouter-lite/ If you're in the Bay, Streakwave (authorized Ubiquiti dealer) is right in San Jose: https://www.streakwave.com/mobile/searchresult.asp?Tp= https://www.streakwave.com/mobile/searchresult.asp?Tp= (WASD keyboards, makers of the CODE keyboard, are also in the Bay Area and do local pickup as a delivery option!) I've been quite pleased with the uptime and performance of my little $100 million-packet-per-second router. I used to be a big believer in pfsense, but the ERLite got me to retire that old thing.