3 ms·

Routers must run open source software, no exceptions, they are keys to the kingdom, corporate or home, no difference. FreeBSD/OpenBSD is de facto standard. Good

Routers must run open source software, no exceptions, they are keys to the kingdom, corporate or home, no difference. FreeBSD/OpenBSD is de facto standard. Good projects like OPNsense test their production releases extensively. Hardware is your choice, but x86 gives you the best compatibility, and kWh is good, x86 CPU power management, mine uses less than 1W, max TDP is 6W. Cisco, Juniper, and other closed source ones have a history of backdoors [0]. Consumer grade routers are joke. [0] https://www.bleepingcomputer.com/news/security/cisco-removes-backdoor-account-fourth-in-the-last-four-months/ https://www.bleepingcomputer.com/news/security/cisco-removes...

Fnoord 8y ago
You were dependant on Cisco and Juniper routers whilst you posted this very message. I've used the mess called Quagga back in '00s. No, thank you. I did like OpenBGPd, but it isn't a necessity to have BGP support on every router. Linux can be suffice on a router. Even though I do prefer PF, nftables seems promising. I don't want to use x86-32 for a myriad of reasons. I don't need the software compatibility x86-32 offers.
- auslander 8y ago
  > You were dependant on Cisco and Juniper routers I don't think so, i have my own fortress :)
  - Fnoord 8y ago
    You don't have control over every hop between news.ycombinator.com and whatever it is you are located. Lets stop this game.
    - auslander 8y ago
      There is a HTTPS, between HN and me. "HTTPS creates a secure channel over an insecure network. This ensures reasonable protection from eavesdroppers and man-in-the-middle attacks ..." https://en.wikipedia.org/wiki/HTTPS https://en.wikipedia.org/wiki/HTTPS
    - Fnoord 8y ago
      Yeah, and? There's HTTPS between my browser and news.ycombinator.com as well. So what does that have to do with my ER-L? There's no need to link to Wikipedia's HTTPS either. We both know what that is. FYI: The malware you linked was for older or badly configured versions of those routers. If you don't upgrade OPNSense or Linux/BSD in general you're also in trouble.

Fnoord 8y ago

You were dependant on Cisco and Juniper routers whilst you posted this very message. I've used the mess called Quagga back in '00s. No, thank you. I did like OpenBGPd, but it isn't a necessity to have BGP support on every router. Linux can be suffice on a router. Even though I do prefer PF, nftables seems promising. I don't want to use x86-32 for a myriad of reasons. I don't need the software compatibility x86-32 offers.

auslander 8y ago
> You were dependant on Cisco and Juniper routers I don't think so, i have my own fortress :)
- Fnoord 8y ago
  You don't have control over every hop between news.ycombinator.com and whatever it is you are located. Lets stop this game.
  - auslander 8y ago
    There is a HTTPS, between HN and me. "HTTPS creates a secure channel over an insecure network. This ensures reasonable protection from eavesdroppers and man-in-the-middle attacks ..." https://en.wikipedia.org/wiki/HTTPS https://en.wikipedia.org/wiki/HTTPS
  - Fnoord 8y ago
    Yeah, and? There's HTTPS between my browser and news.ycombinator.com as well. So what does that have to do with my ER-L? There's no need to link to Wikipedia's HTTPS either. We both know what that is. FYI: The malware you linked was for older or badly configured versions of those routers. If you don't upgrade OPNSense or Linux/BSD in general you're also in trouble.