6 ms·
I have never head this idea described in text before. However, I have made firewalls this way for decades. They were typically for stuff that ran in a datacent
by hosteur 5y ago
I have never head this idea described in text before. However, I have made firewalls this way for decades.
They were typically for stuff that ran in a datacenter so it would be a 1U server with three NICs.
I would really like to make such devices for home or office use. What would be a good device to use for this? Unfortunately, RaspberryPIs do not come with 2 or 3 NICs.
Any recommended alternatives?
- rashkov 5y agoI would have a look at the openwrt project’s database of supported devices. You can filter for devices with 3 nics (though not sure it supports filtering for “3 or more”). https://openwrt.org/toh/views/toh_available_16128 https://openwrt.org/toh/views/toh_available_16128
- rsync 5y agoI am using these: https://www.seeedstudio.com/Rapberry-Pi-CM4-Dual-GbE-Carrier-Board-p-4874.html https://www.seeedstudio.com/Rapberry-Pi-CM4-Dual-GbE-Carrier... ... to make firewalls and bridges with rpi cm4 ...
- wallacoloo 5y agouse VMs. qemu/kvm. the Tor-based Whonix OS takes the approach of one VM running a Tor proxy and another VM running your application software. the latter VM only has access to that proxy, and no other network interface. it’s effectively the same approach as i understand a slug to be, but with the hardware virtualized instead of physical (or course you don’t have to use Tor — you can define whatever interface you want: a VPN, a firewall, etc).