PfSense and Alternatives: What Router Firewall Software to Choose.

Рет қаралды 12,839

Күн бұрын

Пікірлер: 43

@Invid72 3 ай бұрын

Running a Qotom Q330G4 (i3 4th gen with AES-NI encryption acceleration) on Opnsense. Ran it for the first 3 years on pfsense and switched over to opnsense this year. I very much prefer the UI of opnsense. Wireless and managed switch are provided by Unifi and the controller runs on my OMV NAS in a docker container.

@JohnTaylorFPV 6 ай бұрын

I had issues with stability on opnsense and pfsense at 1st on my similar box. turns out there was a microcode update that needed to be done. i landed on pfsense because that's what i happened to be running when i found and applied that update. It's been an extremely solid option for me since and i use the tailscale plugin for vpn to my netowrk. PFsense is setup in a VM through proxmox with two of the ethernet ports directly accessed by the pfsense vm. i like doing it this way for the backups proxmox provides which has saved me before.

@TechnoDadLife 6 ай бұрын

I updated the microcode that did help, but then other problems appeared. I install Sophos XG home and it worked like a charm.

@hrdavis6304 6 ай бұрын

I have a Qotom bare metal with SFP+ and 2.5G ports loaded with pfSense that works great for the home. I also have another Qotom (2.5G ports only) in my homelab that I loaded Proxmox to and have opnSense running as a Virtual Machine, it works great as well.

@vacecchin 6 ай бұрын

OpenWrt on x64 hardware. It's Linux, free and open source, very well supported and maintained. Also, it's simple and do the job. If you need more functionality, you can install packages through opkg.

@TechnoDadLife 6 ай бұрын

On my list for experimenting. Tried yesterday and couldn't get it installed properly. Probably me.

@mrfantasticindian1593 5 ай бұрын

The issue with openwrt x86 is when you upgrade you lose partition resizing option and most packages are arm 7 light weight

@shadeofentropy Ай бұрын

I've recently become a RouterOS guy. Not open source and not free, and more like sitting in a plane cockpit than behind a steering wheel but I still love it despite the learning curve.

@drreality1 6 ай бұрын

I think that we’re stuck with bsd if open source is a must! Unifi and mikrotik are both Linux inside, the latter can be installed on any machine but you’d need a license! Both have appealing hardware offering

@TechnoDadLife 6 ай бұрын

My next video is about Sophos XG home, which is linux based. Much easier to install than bsd.

@jbuccaran 6 ай бұрын

Lijep hrvatski nogometni dres =) I think Pfesense or Opnsense are the the most robust options to install on x86 platforms you are starting out as they are probably the most well documented. Tons of options under $150 USD for N100 multi 2.5g NIC mini PC's- Even less if you only need gigabit.

@Pabula 6 ай бұрын

Imo Pfsense and Opensense are solid router/firewall software, that for the vast majority are not needed, i find more appealing Ubiquit offering, while limited and not as powerful, their integration with unifi, having their switch, accespoints among other things, makes it an ecosystem that imo offers more to the average user.

@DarrolKHarris 6 ай бұрын

sophos offer a free home firewal

@Danno-j7q 10 күн бұрын

Ipfire is a really good choice ... but I think you should really consider giving Sophos XG a go (which is free to home users) ... I've used it on similar hardware to yours, and it seems to play nice... I've currently got it installed as a Hyperv virtual machine and use it as a dial in VPN server and its very solid.

@SandWraith0 6 ай бұрын

Does that mini pc have a N5105 cpu? If so, could you please make a BIOS dump of it and send it to me? Long story short, I have the same mini pc and flashed an updated BIOS (without making a backup first) and suddenly the SATA port just stopped working. Whatever BIOS a flashed afterwards, the SATA port never worked ever since and I cannot find the original BIOS it was flashed on anywhere. Thanks in advance ❤

@piscikeeper 6 ай бұрын

Had a Qotom with quad lan ports and J1900 running Smoothwall for about 6 years before it died. Switched up to an HP T730 earlier this year running pfsense. Biggest issue with Smoothwall was the lack of wireless support.

@iamraymondip Ай бұрын

Is it too old fashioned for IPfire

@krillAmorim 5 ай бұрын

What about Endian Firewall? Can you try it?

@evanhines2361 Ай бұрын

Arista NG fw went from 150 a year for personal/home to 441 and no personal/home option

@RobertoMurillo 5 ай бұрын

I have a Debian Linux VM running on Proxmox as a Router/Firewall with Shorewall Firewall, ISC DHCP Server and Unbound DNS, and I can say it´s running great without any problems because I have it well configured even though I know Shorewall Firewall has lacks of upgrades since 2020-09-19.

@mrfantasticindian1593 5 ай бұрын

Vyos runs faster than both the sense pf/opn cli is a pain initially but not big deal once u get the hang on it they have docs for most basic configurations

@delias74 6 ай бұрын

There are x86 builds of both openwrt and dd-wrt. Fine in a VM, but I found configuring for bare metal install a pita

@TechnoDadLife 6 ай бұрын

I agree.

@iverlaek 6 ай бұрын

You forgot to mention routeros. Another option is installing proxmox and virtualise opnsense of pfsense. Also works perfect. Also don't forget OpenWrt and similar software.

@TechnoDadLife 6 ай бұрын

I didn't realize that RouterOs could be installed on any hardware. I mentioned OpenWrt right in the beginning, when I was talking about Tomato router. I prefer not to virtualize due to I have a spouse. If the server needs to be rebooted the whole network would go down and that would make the family unhappy.

@iclaudiu 6 ай бұрын

RouterOS is not freeware.The least expensive license is 45$.

@grzesiop58 6 ай бұрын

pfsense works like a champ

@petertech210 27 күн бұрын

I'll just stick with pfSense. Support seems to be the best.

@Mustafa-vz4uo 6 ай бұрын

Get pfsense device instead of firewalla it will come with pfsense+ free lifetime

@jamesfatula5824 Ай бұрын

Forget about freebsd based as it's a pain in the a$$ on hardware sense I could not use Intel based 520s 10 g cards on it ! I rather have debian based kind