Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

OPNsense: Open-source security platform

opnsense.org

Post reply on HN
Print view View original

1–10 of 151 posts

Re: OPNsense: Open-source security platform

#4

Post by LeSaucy »

OPNsense is the core router platform I default to for all my network infrastructure (work devops env, homelab, vpn to family members etc). Its feature packed and ROCK solid. I almost always run it in a virtual machine so i can live migrate it between hosts and have no downtime. The cluster / high availability works great and ensures no loss of connectivity during upgrades. OPNsense is a true hidden gem in the open source world.

Re: OPNsense: Open-source security platform

#5

Post by gymbeaux »

I had an issue with OPNsense on a NUC with a USB Ethernet adapter where it would just like stop working. A reboot fixed it every time. I didn’t look much into the exact cause, I went back to DD-WRT because it’s what I know and it just works.

Re: OPNsense: Open-source security platform

#6

Post by syntaxing »

Recently transitioned from Ubiquit stuff to a OPNSense setup. It was such a good decision. The firewall rules make much more sense. Better functions than the dream machine series. You can also get a lot more for the same price. Ubiquti hardware is very under spec for the money you pay for. Highly recommend this guide to setup your own. It’s very dense and more verbose than you need so skip the irrelevant sections.

[1] https://homenetworkguy.com/how-to/set-up-a-fully-functioning...

Re: OPNsense: Open-source security platform

#7

Post by geerlingguy »

I've just set up my first OPNsense box (using one of the 4-port 2.5 gig AliExpress tiny PCs recommended by ServeTheHome) and like it a lot.

A few rough edges in the UI, but I got the basic routing functionality running within minutes, and got Wireguard going with the help of a guide from Home Network Guy pretty soon after.

Since then I've bought a second box and will be setting it up soon, too!

Re: OPNsense: Open-source security platform

#8

Post by syntaxing »

LeSaucy wrote: post #4

OPNsense is the core router platform I default to for all my network infrastructure (work devops env, homelab, vpn to family members etc). Its feature packed and ROCK solid. I almost always run it in a virtual machine so i can live migrate it between hosts and have no downtime. The cluster / high availability works great and ensures no loss of connectivity during upgrades. OPNsense is a true hidden gem in the open so…

I did a bare metal migration and it was pretty painless. Had to reinstall some packages, but it was as simple as just hitting the + on the package manager.

Re: OPNsense: Open-source security platform

#9

Post by eminence32 »

I've heard enough good things about OPNsense that I would probably pick it these days for a new installation. But I've been using pfSense happily for enough years that I'm not sure it's worth the hassle to switch, especially since I'm using Netgate hardware.

Has anyone attempted to run OPNsense on Netgate hardware?

Re: OPNsense: Open-source security platform

#10

Post by fellowmartian »

robcohen wrote: post #2

As an alternative, I've been watching VyOS with great interest and it seems like they are finally going to release their controller and LocalUI interface this year, which is exciting. It seems to have a similar architecture as a Ubiquiti controller. https://blog.vyos.io/

Yeah I’m waiting for a good open source Linux-based firewall, it’s way overdue. Linux has surpassed FreeBSD in terms of networking, at least for the home/SMB router use case. I’m talking about Cake, eBPF, etc.

I’m currently running Mikrotik x86 on a NUC, but their hardware support on x86 isn’t great. I’d rather switch to Vyos, but I’m too lazy to learn their CLI.

Semi-related: OpenWRT is also genuinely not bad on x86, but it’s slightly too simplified compared to say Mikrotik or VyOS. It also runs great in a VM.

Post reply on HN