3 ms·

I ran PfSense for a year or two and thought it was an ok product. Then I started looking for the sources because I wanted to fix some bugs and discovered it's

I ran PfSense for a year or two and thought it was an ok product. Then I started looking for the sources because I wanted to fix some bugs and discovered it's not an actual open source project so I was dismayed and went back to using another product. I'll have to check out opnsense as there are quite a few things I'm not doing as well as I'd like in my current network.

pimeys 6y ago
I'm currently evaluating pfSense, mostly due to it supporting WireGuard in the kernel level and having a good adblocker plugin. I run the router in a lab setting, so now it's the time to still change the os if needed. But, to what? I like to have a web ui and collectd metrics out of it. And the performance should be good for over twenty devices, VPN and a gigabit network...
- pimeys 6y ago
  So, summarizing: pfSense: an established product. Supports kernel level wireguard and easy adblock through plugins. Easy upgrades. Not that great web UI but does its job. Shady OSS practices. opnSense: no kernel level wireguard yet, but might be coming soon. No good adblocker plugin available. Easy upgrades. Great UI. Better OSS practices at least for now. OpenWRT: supports kernel level wireguard. Supports LXD so you can install pihole. Good UI. More focused for market routers, meaning an x86 installation and upgrades mean flashing and reinstalling all extra packages. Edit: seems like recent versions if opnSense handle DNS level adblocking quite well. I might give it a try tonight. https://www.cjross.net/dns-security-and-adblock-with-opnsense-part-2/ https://www.cjross.net/dns-security-and-adblock-with-opnsens...
- Scottn1 6y ago
  I recently threw https://www.ipfire.org/ https://www.ipfire.org/ onto an old PC to cover router duties for a small biz that had it's current old consumer Netgear die. I was really impressed with Ipfire. Up and running in about 20 minutes. I was so impressed with it I tried to rationalize just keeping Ipfire duties but transferring it to a much less power hungry device but couldn't find anything that was modern and wasn't a hobbyist kit (like the Apu2). Other than their own licensed devices that were out of their budget (smallest one is $390 and still needs a separate wifi AP).

pimeys 6y ago

I'm currently evaluating pfSense, mostly due to it supporting WireGuard in the kernel level and having a good adblocker plugin. I run the router in a lab setting, so now it's the time to still change the os if needed. But, to what? I like to have a web ui and collectd metrics out of it. And the performance should be good for over twenty devices, VPN and a gigabit network...

pimeys 6y ago
So, summarizing: pfSense: an established product. Supports kernel level wireguard and easy adblock through plugins. Easy upgrades. Not that great web UI but does its job. Shady OSS practices. opnSense: no kernel level wireguard yet, but might be coming soon. No good adblocker plugin available. Easy upgrades. Great UI. Better OSS practices at least for now. OpenWRT: supports kernel level wireguard. Supports LXD so you can install pihole. Good UI. More focused for market routers, meaning an x86 installation and upgrades mean flashing and reinstalling all extra packages. Edit: seems like recent versions if opnSense handle DNS level adblocking quite well. I might give it a try tonight. https://www.cjross.net/dns-security-and-adblock-with-opnsense-part-2/ https://www.cjross.net/dns-security-and-adblock-with-opnsens...
Scottn1 6y ago
I recently threw https://www.ipfire.org/ https://www.ipfire.org/ onto an old PC to cover router duties for a small biz that had it's current old consumer Netgear die. I was really impressed with Ipfire. Up and running in about 20 minutes. I was so impressed with it I tried to rationalize just keeping Ipfire duties but transferring it to a much less power hungry device but couldn't find anything that was modern and wasn't a hobbyist kit (like the Apu2). Other than their own licensed devices that were out of their budget (smallest one is $390 and still needs a separate wifi AP).