Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

OpenBSD Router Guide

unixsheikh.com

Post reply on HN
Print view View original

31–40 of 53 posts

Re: OpenBSD Router Guide

#31

Post by quesera »

1MachineElf wrote: post #29

For a year I had success with a Beaglebone Green[0] and OpenBSD installed and in a "Router on a stick" configuration[1]. It wasn't amazing preformance, but it was in a rural area with a slow ISP anyway. IPSec performance was sufficient for the single client I ever used with it. For the year prior to this one, I had FreeBSD in almost the same configuration running on a Raspberry Pi (1!!!) B. Both were rock solid stabl…

> FreeBSD sed doesn't have the in-place editing that GNU sed has

FWIW, that's not correct. On BSD (incl macOS), the -i option takes an argument for the file extension to use as a tmp file:

So for GNU sed:

  sed -i 's/old/new/g' FILE
Translates to BSD sed as:

  sed -i '' 's/old/new/g' FILE
It is not recommended to use an empty string as the extension, but as long as your sed command does not fail due to disk space etc, it is fine.

Also, GNU sed takes an extension argument too, but it is optional:

   sed -iEXT 's/old/new/g' FILE

Re: OpenBSD Router Guide

#32

Post by agapon »

1MachineElf wrote: post #29

For a year I had success with a Beaglebone Green[0] and OpenBSD installed and in a "Router on a stick" configuration[1]. It wasn't amazing preformance, but it was in a rural area with a slow ISP anyway. IPSec performance was sufficient for the single client I ever used with it. For the year prior to this one, I had FreeBSD in almost the same configuration running on a Raspberry Pi (1!!!) B. Both were rock solid stabl…

sed -i / sed -I since forever.

Re: OpenBSD Router Guide

#33

Post by darksaints »

acd wrote: post #9

My dream is of Open source 802.11ac Wi-Fi router. Is there any open hardware that works well?

You can get an 802.11ac router that supports openWRT, but I haven't found any yet that support 802.11ax. They're all broadcom chips. Fuck broadcom.

Re: OpenBSD Router Guide

#34

Post by accountofme »

liv-io wrote: post #11

Or have it all automated using Ansible: https://github.com/liv-io/ansible-roles-bsd Including Prometheus monitoring and Loki logging (on Linux though and work in progress)

Thanks for that! I rolled my own ansible roles for my openbsd router.... will take a look.

Re: OpenBSD Router Guide

#36

Post by tgeorge »

BrawnLongHaul wrote: post #4

Looks like a good article to follow. Anyone has recommendations on a small form factor board to get for this project? It appears that the ASRock Mini ITX board in the article is no longer available?

What people have been using on reddit for pfsense builds.

I saw this today: https://www.reddit.com/r/PFSENSE/comments/jrlpmy/what_hw_for...

Also I was eyeing this from a few months back: https://arstechnica.com/gadgets/2020/08/review-odyssey-x86j4...

Also this is a good eBay seller which I recommend with some thinclients : https://www.ebay.com/str/theartofserver

Re: OpenBSD Router Guide

#37

Post by _joel »

bananadrama wrote: post #17

Nice article. Running your own router is a nice way to learn a bit of networking, has a better track record of security updates, and helps you act as a part on the Internet. I run NixOS on a https://www.pcengines.ch/apu2e2.htm .

They're great little machines. Used a few for VPN endpoints and have never had any issues. The red case is pretty funky too.

Re: OpenBSD Router Guide

#38

Post by mahalol »

bananadrama wrote: post #17

Nice article. Running your own router is a nice way to learn a bit of networking, has a better track record of security updates, and helps you act as a part on the Internet. I run NixOS on a https://www.pcengines.ch/apu2e2.htm .

Hey, I've got an apu2c4 and was actually thinking about installing Ubuntu or Debian and try to run ansible on it, but your Nixos idea sounds good. Do you have any references for the setup? Have you found any downsides?

The reason I want to move away from pfsense is the lack of support for Wireguard.

Re: OpenBSD Router Guide

#39

Post by progman32 »

1MachineElf wrote: post #29

For a year I had success with a Beaglebone Green[0] and OpenBSD installed and in a "Router on a stick" configuration[1]. It wasn't amazing preformance, but it was in a rural area with a slow ISP anyway. IPSec performance was sufficient for the single client I ever used with it. For the year prior to this one, I had FreeBSD in almost the same configuration running on a Raspberry Pi (1!!!) B. Both were rock solid stabl…

Could always fall back to "ed"! It even works over a typewriter (tty).

https://en.wikipedia.org/wiki/Ed_(text_editor)

Re: OpenBSD Router Guide

#40

Post by TheWickerMan »

Quequau wrote: post #28
nix23 wrote: post #6

Earlier quoted context omitted.

PFsense that's whats running on my Net6501.

Was it easy to install and configure?

I’ve used pfsense on some soekris 5505s (i think its been a while).

It was sort of a pain, at first, to get pfsense on them. Its been a while since I’ve done it, but heres the short version.

1. I found a version of linux (voyage maybe?) that had some pxe boot stuff setup automatically. I just had to set the dhcp range and a few other options. Any distro with pxe boot works but I’m lazy.

2. Plugged the soekris box into my laptops ethernet port. The linux distro was just a vm. Set up the vm so its nic could communicate with the physical laptop ethernet port.

3. Hooked a serial cable up to the soekris and set it to pxe boot. I had to find the manual to figure out what speed i needed for the serial port. I want to say default was 9600, but double check. Then it got the image from the linux vm and was enough to get me a cmd line via serial port.

4. I copied the pfsense cf (i think its called that) to a exfat USB flash drive and plugged it into the USB port on the soekris.

5. I mounted the USB flash drive on the soekris and used dd to copy the image to the internal cf card.

6. Reboot the soekris when done, change boot order on it, if applicable, and from there plug the soekris into the network or somewhere where it can get a dhcp address so you can finish setup from a web browser.

If you’re interested i might be able to find my notes on it, but its probably been 5+ years.

Post reply on HN