3 ms·

Suggestions on what to replace a Edgerouter 6p with? Ideally something with regular security updates and zero cloud. I was considering a the Odroid-h2+ from h

by sliken 6y ago

Suggestions on what to replace a Edgerouter 6p with? Ideally something with regular security updates and zero cloud. I was considering a the Odroid-h2+ from hardkernel. It has an Intel J4115 (4 cores, 10 watt TDP), 2 Sodimms (max 32GB ram), and two 2.5Gbit ethernet ports. Looks like it would make a decent router. There's an optional board to add 4 more 2.5Gbit ethernet ports. Wasn't sure on the OS, OpenWRT is definitely in the running. Or maybe VyOS (the open fork of vyatta), which is relatively close to what Ubiquiti ships.

akeck 6y ago
I'm strongly considering OpenWRT on PC Engines hardware for my next AP.
- _joel 6y ago
  I built a number of VPN endpoints uning these for PoP's / Remote Offices. They're superb, not used any RF stuff with them but for the price and performance you can't go wrong.
Naac 6y ago
Grab one of these: https://www.amazon.com/dp/B01H2QJTM4/ref=cm_sw_r_cp_apa_glc_fabc_XYT3FK54453RCFP2JESZ?_encoding=UTF8&psc=1 https://www.amazon.com/dp/B01H2QJTM4/ref=cm_sw_r_cp_apa_glc_... And put Opnsense on it. Guaranteed security updates, clean GUI interface, open source. Set it up once then forget it. If you want an AP there are many options on Amazon. For maximum security prevent the AP from being able to access the internet.
- snypher 6y ago
  With respect, what on earth is a 'Protectli'? They seem to have as much chance (or more) to be pwnd as Ubiquiti. This 'about' page doesn't say very much... https://protectli.com/about/ https://protectli.com/about/
  - Gracana 6y ago
    It's just a small PC with convenient ports for a router. The parent's suggestion of using it to run opensense seems pretty good.
  - Naac 6y ago
    Like the other comment said, the brand doesn't matter. It's just a mobo with a 4 port nic and a decent CPU. It might as well be an e-machine. And they won't be "pwned", unless you're running closed source non-updatable software on them.
numpad0 6y ago
Did Cisco bother to launch proper replacement for ISR C1812/892J? Looks like there are ISR 900 series but not sure they’re worthy... In my country there are Yamaha NVR/RTX lines but not sure those are sold worldwide
jvolkman 6y ago
Just make sure the rtl8125b NICs are actually supported by what you want to run; they're relatively new . And poor driver performance will be magnified by the low power CPU at those speeds. I bought an H2+ sometime last year to use as a router but struggled to get acceptable networking performance, so moved onto something else.
- sliken 6y ago
  Check the performance graphs at: https://www.hardkernel.com/shop/h2-net-card/ https://www.hardkernel.com/shop/h2-net-card/ They look pretty good, managing 11Gbit/sec or so @ 40% CPU utilization with iperf3. Did you upgrade the bios as mentioned on that page "Have to flash GLK-ESF BIOS to use H2 Net Card properly" My use case is for a home, ideally with a NAS and 2 desktops on 2.5 Gbe with only a single client at a time using more than a gigabit for large file transfers. Did you find anything else with 4-6 2.5 Gbe ports?
  - jvolkman 6y ago
    Certainly seems good enough to route 2.5gbe, although the router will be doing things other than just sending traffic (NAT, packet inspection for firewalls, etc.) You need the drivers though. Looks like rtl8125b support landed in Linux 5.9, but as far as I can tell VyOS and OpenWRT are still on 4.x, so you'll likely be in custom land - either upgrading to 5.9, backporting the driver, or using the realtek-provided driver. Looks like people are working on it recently for openwrt: https://forum.openwrt.org/t/setup-an-odroid-h2-with-openwrt/72792/8 https://forum.openwrt.org/t/setup-an-odroid-h2-with-openwrt/... I'm only using gigabit at home, so didn't need 2.5g.
    - sliken 6y ago
      My connection to Comcast is only 400mbit or so. But I need a NAS, and most have 2.5gbe ports (Qnap, Asustor, etc). Just got a ryzen b550 motherboard, with 2.5gbe ports by default. I needed a new cable modem, which came with 2.5gbe ports by default. I do often move 20-40GB files around, so the bandwidth would actually be useful. Apparently ubuntu-20.04 has the right drives, but thanks for the info, seems like I might need to upgrade to a semi-current kernel to get the interfaces working.

by sliken 6y ago

akeck 6y ago

I'm strongly considering OpenWRT on PC Engines hardware for my next AP.

_joel 6y ago
I built a number of VPN endpoints uning these for PoP's / Remote Offices. They're superb, not used any RF stuff with them but for the price and performance you can't go wrong.

Naac 6y ago

Grab one of these: https://www.amazon.com/dp/B01H2QJTM4/ref=cm_sw_r_cp_apa_glc_fabc_XYT3FK54453RCFP2JESZ?_encoding=UTF8&psc=1 https://www.amazon.com/dp/B01H2QJTM4/ref=cm_sw_r_cp_apa_glc_... And put Opnsense on it. Guaranteed security updates, clean GUI interface, open source. Set it up once then forget it. If you want an AP there are many options on Amazon. For maximum security prevent the AP from being able to access the internet.

snypher 6y ago
With respect, what on earth is a 'Protectli'? They seem to have as much chance (or more) to be pwnd as Ubiquiti. This 'about' page doesn't say very much... https://protectli.com/about/ https://protectli.com/about/
- Gracana 6y ago
  It's just a small PC with convenient ports for a router. The parent's suggestion of using it to run opensense seems pretty good.
- Naac 6y ago
  Like the other comment said, the brand doesn't matter. It's just a mobo with a 4 port nic and a decent CPU. It might as well be an e-machine. And they won't be "pwned", unless you're running closed source non-updatable software on them.

numpad0 6y ago

Did Cisco bother to launch proper replacement for ISR C1812/892J? Looks like there are ISR 900 series but not sure they’re worthy... In my country there are Yamaha NVR/RTX lines but not sure those are sold worldwide

jvolkman 6y ago

Just make sure the rtl8125b NICs are actually supported by what you want to run; they're relatively new . And poor driver performance will be magnified by the low power CPU at those speeds. I bought an H2+ sometime last year to use as a router but struggled to get acceptable networking performance, so moved onto something else.

sliken 6y ago
Check the performance graphs at: https://www.hardkernel.com/shop/h2-net-card/ https://www.hardkernel.com/shop/h2-net-card/ They look pretty good, managing 11Gbit/sec or so @ 40% CPU utilization with iperf3. Did you upgrade the bios as mentioned on that page "Have to flash GLK-ESF BIOS to use H2 Net Card properly" My use case is for a home, ideally with a NAS and 2 desktops on 2.5 Gbe with only a single client at a time using more than a gigabit for large file transfers. Did you find anything else with 4-6 2.5 Gbe ports?
- jvolkman 6y ago
  Certainly seems good enough to route 2.5gbe, although the router will be doing things other than just sending traffic (NAT, packet inspection for firewalls, etc.) You need the drivers though. Looks like rtl8125b support landed in Linux 5.9, but as far as I can tell VyOS and OpenWRT are still on 4.x, so you'll likely be in custom land - either upgrading to 5.9, backporting the driver, or using the realtek-provided driver. Looks like people are working on it recently for openwrt: https://forum.openwrt.org/t/setup-an-odroid-h2-with-openwrt/72792/8 https://forum.openwrt.org/t/setup-an-odroid-h2-with-openwrt/... I'm only using gigabit at home, so didn't need 2.5g.
  - sliken 6y ago
    My connection to Comcast is only 400mbit or so. But I need a NAS, and most have 2.5gbe ports (Qnap, Asustor, etc). Just got a ryzen b550 motherboard, with 2.5gbe ports by default. I needed a new cable modem, which came with 2.5gbe ports by default. I do often move 20-40GB files around, so the bandwidth would actually be useful. Apparently ubuntu-20.04 has the right drives, but thanks for the info, seems like I might need to upgrade to a semi-current kernel to get the interfaces working.