News for hackers. Stuff that matters.
Re:OPNsense a true open-source security platform and more by fellowmartian on Monday June 26, 2023 @10:56PM (#36488379)
Yeah I’m waiting for a good open source Linux-based firewall, it’s way overdue. Linux has surpassed FreeBSD in terms of networking, at least for the home/SMB router use case. I’m talking about Cake, eBPF, etc.

I’m currently running Mikrotik x86 on a NUC, but their hardware support on x86 isn’t great. I’d rather switch to Vyos, but I’m too lazy to learn their CLI.

Semi-related: OpenWRT is also genuinely not bad on x86, but it’s slightly too simplified compared to say Mikrotik or VyOS. It also runs great in a VM.

Re:OPNsense a true open-source security platform and more by n8henrie on Tuesday June 27, 2023 @07:30AM (#36491433)
Same! Have you looked into IPFire? That's the one I had my eyes on.
Re:OPNsense a true open-source security platform and more by fellowmartian on Tuesday June 27, 2023 @11:33AM (#36494346)
I actually used to run it years back, but it unfortunately hasn't been updated very much since.
Re:OPNsense a true open-source security platform and more by hnarn on Tuesday June 27, 2023 @08:02AM (#36491653)
> Linux has surpassed FreeBSD in terms of networking

Can you elaborate on this?

Re:OPNsense a true open-source security platform and more by fellowmartian on Tuesday June 27, 2023 @11:30AM (#36494306)
As I said above, it's stuff like Cake, which is an advanced QoS scheduler that helps eliminate bufferbloat (very relevant for home networks). Additionally, eBPF and XDP will soon be integrated into standard firewalls, which should speed them up dramatically, allowing for crazy high speed (or power efficient) routing on commodity hardware.
Re:OPNsense a true open-source security platform and more by jsight on Tuesday June 27, 2023 @09:15AM (#36492246)
OpenWRT also runs great on ARM. Even the Raspberry Pi can work well for home use.