21–30 of 33 posts
Hmm, it looks like pfSense doesn't support the one requirement I have of any router: per-IP (not _interface_) statistics. Is this really such an unusual thing to want? I want to know how much traffic each device on my network is producing, in each direction. Ideally also: for suspect devices, I'd like to know _who_ they are talking to.
Only wish list I have -- allow ZFS on root with zraid. Hope, it's possible in the future.
With the crappy, underpowered consumer routers with gaping security holes pfSense is a god send. Last few years I've been running pfSense and the experience has been fairly great. I had a backup server running Ubuntu with ZFS which was always on anyways so I just had to install pfSense on OS disk and it imported the ZFS disks right away. So for a long time it was both my backup server and the router/firewall. But lat…
There's also OpenBSD which lends itself very nicely for router/firewall setups. The Ubiquiti edgemax routers are also pretty nice and cheap, they have a good GUI. I remember also someone here posting how he runs openbsd in the edgemax routers.
If you're in the Bay, Streakwave (authorized Ubiquiti dealer) is right in San Jose: https://www.streakwave.com/mobile/searchresult.asp?Tp=
(WASD keyboards, makers of the CODE keyboard, are also in the Bay Area and do local pickup as a delivery option!)
I've been quite pleased with the uptime and performance of my little $100 million-packet-per-second router. I used to be a big believer in pfsense, but the ERLite got me to retire that old thing.
With the crappy, underpowered consumer routers with gaping security holes pfSense is a god send. Last few years I've been running pfSense and the experience has been fairly great. I had a backup server running Ubuntu with ZFS which was always on anyways so I just had to install pfSense on OS disk and it imported the ZFS disks right away. So for a long time it was both my backup server and the router/firewall. But lat…
I recognized your reply from /r/pfsense. Dude, you are running unsupported scenario and using your pfSense as NAS. That is a big no no
I'd really love to see an API or a unified configuration system. At $WORK we have a need for many small firewall appliances, but I refuse to use anything we can't deploy zero-touch, automate, monitor and back up/restore in a semi-sane way. Either it needs a configuration language like Cisco/Juniper than can be dumped/imported/configured over SSH, or a web API (supposedly on the roadmap for pfsense 3.0 ... ?). I can't…
The hardware has been around for a long time (Soekris) and there are many out in the field.
With the crappy, underpowered consumer routers with gaping security holes pfSense is a god send. Last few years I've been running pfSense and the experience has been fairly great. I had a backup server running Ubuntu with ZFS which was always on anyways so I just had to install pfSense on OS disk and it imported the ZFS disks right away. So for a long time it was both my backup server and the router/firewall. But lat…
Earlier quoted context omitted.
I recognized your reply from /r/pfsense. Dude, you are running unsupported scenario and using your pfSense as NAS. That is a big no no
If you're a BSD fan, why not use FreeNAS + pfSense on separate VMs? Let them both do what they're good at :)
Earlier quoted context omitted.
pfsense was forked a year or two ago, their 2.3 is just to keep up with the new kid on the block opnsense. And guess what, they have an API ;) https://opnsense.org/
I don't really see what OPNsense has done too much differently, other than commence re-writing the UI in a different PHP framework and Bootstrap it. To look at it, you're largely looking at pfSense. I couldn't find a clear map of what has been changed or added to.
That's how they got to where they are. The pace of innovation in that project has slowed since its launch.
Yeah, old design was feeling dated when I had to make couple changes from my phone. Only wish list I have -- allow ZFS on root with zraid. Hope, it's possible in the future.
In my last round of my linux firewall comparison I liked opnsense very much: https://opnsense.org/ not affiliated, I just liked it. However the GUI is made of many php scripts (if they did not change meanwhile) - so it would be great if many more eyes would like to take a look at the code...