this post was submitted on 10 Nov 2023
2 points (100.0% liked)

Homelab

380 readers
9 users here now

Rules

founded 1 year ago
MODERATORS
 

I’d like to install an open source router/firewall OS on a Proxmox VE VM on a Protectli FW6D but I’m unsure which OS to pick.

I was leaning towards pfsense but I recently read that they’re now blocking features behind a paywall.

I’ve come across opnsense, ddwrt, and opnwrt as alternatives but would appreciate it if someone can provide insight into which option would be best.

Background:

I have a Proxmox VE server running an Ubuntu VM with Emby, Sonarr, Radarr, NZBGet, Transmission, Prowlarr, Bazarr, & Portainer in Docker containers. It’s a 150tb machine running snapRAID, MergerFS, & a daily sync crontab that emails a report once completed. PCIE passthrough NVIDIA Quadro P2000 and LSI 9201-16i HBA. I want to eventually add a Home Assistant VM to this machine.

Also have a Raspberry Pi 4 running Debian with Pi-Hole and Wireguard VPN. I want to eventually switch this to Proxmox VE with a secondary Pi-Hole VM and a Magic Mirror VM.

Which brings me to the new Protectli. I want Proxmox VE so I can create a cluster. I’d also like the primary Pi-Hole VM on it. I’m unsure if this is even possible but a backup Home Assistant VM that works when I’m working on the main server would be amazing.

So is there an open source router/firewall os that would be best for this scenario?

Or is there anything else I should consider before diving into this project?

you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 2 points 1 year ago (2 children)

Whenever people ask for router OS (VM or physical) I'd always recommend OpenWrt. Come with WebUI by default (unlike Vyos) and you can do advanced CLI configuration with familiar Linux utils (unlike *sense), and for most users you really just want to do some VLAN so it is perfectly suitable. A bonus is that you could use the same UI for your router and AP, so even easier

Generally you will know when your demand is beyond OpenWrt's capability (usually when you can't find the required package in opkg), and by then you probably know the answer to this question better.

[–] [email protected] 1 points 1 year ago

I second this. Openwrt is so fast, I can route 10gbit with half the resources of opnsense/pfsense. It has a nice GUI and has all the features I need.

[–] [email protected] 1 points 1 year ago (1 children)

Do you know if OpnSense allows you to have the same UI for the router and AP? I’m leaning towards either OpenWrt or OpnSense but still looking into the pros/cons between the two.

[–] [email protected] 1 points 1 year ago

What this person means by "using the same UI for your router and AP" is that by installing OpenWRT on both your virtualized wired router and your Wi-fi access points, you don't have to learn two different web UIs to configure networking. If you have an existing wireless setup that you don't really want to screw with that doesn't have OpenWRT already, then that doesn't really apply.