3 ms·
Just install OPNSense (or its less modern forebear: PFSense). It works great, has a ton of features (e.g. packet filter from FreeBSD, OpenVPN, etc, etc), and it
by h4b4n3r0 8y ago
Just install OPNSense (or its less modern forebear: PFSense). It works great, has a ton of features (e.g. packet filter from FreeBSD, OpenVPN, etc, etc), and it gets security updates. I run mine in a VM, with the WAN adapter passed through to it to make it unavailable to the host.
- auslander 8y agoSecond OPNsense. And there are nice fanless x86 mini PCs, router size on aliexpress
- h4b4n3r0 8y agoI don't know why technical people bother with anything else these days, TBH. You don't even need a separate server for it: just use a separate network card in an existing machine. And even if one decides to buy a separate machine, it's still much cheaper than a router with comparable capabilities. And the existing router can often be reused as a dumb access point. It's a no-brainer.
- deno 8y ago> You don't even need a separate server for it: just use a separate network card in an existing machine. Because you want internal network to keep working when you do server maintenance.
- h4b4n3r0 8y agoJust do it at the same time you do the router upgrade. Updates are released every couple of weeks. You don't have to install all of them, and not all of them require a reboot, but you could totally do it was I describe. I do have a separate machine for the router (the machine also runs the Kubernetes master), but that's more due to how my house is wired, not because I need it.
- auslander 8y agocheck Partaker B5, for example