That autoscroll on the opnsense website was extremely annoying.
OPNsense: Open-source security platform
71–80 of 151 posts
Re: OPNsense: Open-source security platform
#72Earlier quoted context omitted.
This really isn't viable in somewhere like the UK. At our current electricity prices, if that machine ran at 100W, you'd be spending the equivalent of what you paid for it EVERY month in electricity. I've always seen Americans, who typically have more space and cheaper energy and fuel suggest people grab 1U servers for $40 etc, and respond just like you did when people ask them _not_ to. My car also does 50mpg, and I…
It's perfectly viable in the UK. The Optiplex 7050 is available for under a hundred pounds and the PSU tops out at 65W. It idles under eight watts. This is comparable with any other router capable of handling gigabit traffic. I think the misunderstanding is the assumption about form factor. The 7050 series is available in a case the size of a paperback book.
I'm willing to accept your point if you or they, can confirm that they are in fact talking about an optiplex that idles at 8W, which I doubt, for 43 dollars.
Despite DELLs willingness to slap the same series number on everything from an ATX tower to a "paperback book", they are far from the same thing.
I'm willing to accept I may be wrong, so let's see.
Re: OPNsense: Open-source security platform
#73I always get confused between OPNsense and pfSense - one is the open source fork the other is the original.
Re: OPNsense: Open-source security platform
#74Earlier quoted context omitted.
This really isn't viable in somewhere like the UK. At our current electricity prices, if that machine ran at 100W, you'd be spending the equivalent of what you paid for it EVERY month in electricity. I've always seen Americans, who typically have more space and cheaper energy and fuel suggest people grab 1U servers for $40 etc, and respond just like you did when people ask them _not_ to. My car also does 50mpg, and I…
It's perfectly viable in the UK. The Optiplex 7050 is available for under a hundred pounds and the PSU tops out at 65W. It idles under eight watts. This is comparable with any other router capable of handling gigabit traffic. I think the misunderstanding is the assumption about form factor. The 7050 series is available in a case the size of a paperback book.
Where do you see those being available for under 100gbp!?
Re: OPNsense: Open-source security platform
#75Can wholeheartedly recommend OPNsense as an opensource firewall of choice. I run it at home, and we use it on a couple of Dell R210ii servers (4c/8GB RAM/dedicated Intel NIC) to run LAN gaming events ramping up to 1,200 active devices.
Migrated from pfsense because OPNsense actually had a usable API, so we can do things like add people into the Captive Portal programatically from our event check-in system.
Re: OPNsense: Open-source security platform
#76Earlier quoted context omitted.
I set this up recently but with libvirt instead of proxmox. Used openvswitch and configured it with netplan.
I'm not super experienced with networking. Does this require BGP for the router to move between hosts? If my PON is connected into one of the nodes, how do I allow the router to roam if a node fails? Will look into openvswitch. Not really ever done virtualized networking so it doesn't immediately click for me.
Put your PON on a separate VLAN on the switch
Re: OPNsense: Open-source security platform
#77I've just set up my first OPNsense box (using one of the 4-port 2.5 gig AliExpress tiny PCs recommended by ServeTheHome) and like it a lot. A few rough edges in the UI, but I got the basic routing functionality running within minutes, and got Wireguard going with the help of a guide from Home Network Guy pretty soon after. Since then I've bought a second box and will be setting it up soon, too!
Do those boxes ever get bios updates? It’s something tech influencers should mention more often
Why would you want BIOS updates? It’s not like firmware degrades over time. Frequency of zero day RCE fixes should not be taken as indication of better security.
Re: OPNsense: Open-source security platform
#78If you want to take it even further a fully virtualized Opnsense with Proxmox is amazing. Your router can float between cluster nodes and each VLAN becomes a virtual interface in the hypervisor. What still blows my mind is how I can migrate the instance to a second server and bring the original server down for maintenance without my users noticing a thing.
As long as your Proxmox Cluster is backed by shared storage (ceph, gluster etc.) and HA is configured for your opnSense VM you can just shutdown the Node. Works flawlessly with pfSense (PVE backed by ceph).
Even SIP calls don't get disconnected
Re: OPNsense: Open-source security platform
#79I always get confused between OPNsense and pfSense - one is the open source fork the other is the original.
Pfsense is the “original” and the more commercial minded.
They’re very close though. You can follow Pfsense guides on opnaense basically
Re: OPNsense: Open-source security platform
#80Earlier quoted context omitted.
I'm not super experienced with networking. Does this require BGP for the router to move between hosts? If my PON is connected into one of the nodes, how do I allow the router to roam if a node fails? Will look into openvswitch. Not really ever done virtualized networking so it doesn't immediately click for me.
Put your PON on a separate VLAN on the switch
Ok, It's slowly coming together. So I assume I'd then put the virtual WANs of each cluster node on the same VLAN and whichever is currently hosting the router would chat with the PON to give me a WAN link.