Turn a PC into a powerful DIY router using OPNsense

Поделиться
HTML-код
  • Опубликовано: 22 авг 2024

Комментарии • 30

  • @MrBearfaced
    @MrBearfaced 6 лет назад +11

    Content is good, great to hear your experiences with this software. One small criticism (constructive I hope!) : the audio quality is poor and the volume was all over the place.

    • @AmoebaMan
      @AmoebaMan  6 лет назад +1

      Justin Spooner hi Justin, you are right and I know how annoying it is - I'm going to have to change something to get better and more consistent volume and clarity. AM

  • @souk-tv
    @souk-tv 2 года назад +2

    I prefer opnsense 👍

  • @Butrdtostngravy
    @Butrdtostngravy 5 лет назад +2

    Noctua fans? :D I love those things!

    • @AmoebaMan
      @AmoebaMan  5 лет назад +1

      You are right, quiet and last forever it seems. AM

  • @James-no2oc
    @James-no2oc 2 года назад

    Thanks m8

  • @ShehbazAfzal
    @ShehbazAfzal 4 года назад +1

    Good vid. What about things like security, is there some level of firewall already configured?

  • @dannosaur7
    @dannosaur7 6 лет назад +1

    "Looks in good NIC"
    **rimshot**

    • @AmoebaMan
      @AmoebaMan  6 лет назад

      Good spot there dude! ;)

  • @Bac2hack
    @Bac2hack 3 года назад +1

    Is there any support in OPNsense like wi-fi or we can only connect to it via LAN cable ?

    • @AmoebaMan
      @AmoebaMan  3 года назад +2

      It supports a limited number of wifi cards so be careful if you want integrated wifi on your router, need to research the right wifi controller. I prefer separate WAP personally. AM

    • @Bac2hack
      @Bac2hack 3 года назад +1

      @@AmoebaMan Thanks for help, means a lot

  • @raymartcalinao4534
    @raymartcalinao4534 4 года назад

    can you do a full set up tutorial on opnsense with traffic shaper

  • @spaceiswater6539
    @spaceiswater6539 5 лет назад +1

    cant hear you but thanks for the video

  • @mostpalone203
    @mostpalone203 6 лет назад

    nice vid, subscribed

  • @filipknezevic1642
    @filipknezevic1642 6 лет назад

    Try to run a full BGP table on that thing :D. Would love to see how would it cope with 680000+ routes...

    • @AmoebaMan
      @AmoebaMan  6 лет назад +1

      Not sure what that means! This old i3 was cutting edge when I bought it but now its showing its age like me ;) More than enough oomph for my tiny home network though...... AM

  • @frankmcconnel2730
    @frankmcconnel2730 4 года назад +1

    Pfsense in series opnsense?

  • @hvm241
    @hvm241 4 года назад

    Hello, I am super ignorant on the subject, would you be so kind to tell me what advantages this type of mod has, with respect to having a normal and current modem? Does it have more speed?

  • @djangoryffel5135
    @djangoryffel5135 6 лет назад

    Do have the same case in black, still in use as an HTPC

    • @AmoebaMan
      @AmoebaMan  6 лет назад +1

      Its a nice case! I really like the look , when I replaced it as my main HTPC a few years ago I used another slightly bigger GD09b Silverstone case : ruclips.net/video/w0LoQ15AlWM/видео.html
      AM

  • @patrickdergroenr1247
    @patrickdergroenr1247 4 года назад

    I have an i5 8500 system laying around. B360 board and a intel on board nic. Is that shit compatible?

    • @AmoebaMan
      @AmoebaMan  4 года назад +1

      Almost certainly, although unless your board has 2 NIC's it might be a good idea to put an additional one in a spare PCIE slot. AM

    • @reznikovpaul6217
      @reznikovpaul6217 Год назад

      I-350 t2 or t4 very good

  • @iamrage4753
    @iamrage4753 4 года назад

    can you do a opnsense web filter tutorial please

  • @obsoletepowercorrupts
    @obsoletepowercorrupts 6 лет назад

    Ouch, an i3, really? But muh spectre and meltdown. I'd be looking at different microarchitecture altogether (ditching x86 even) if I were doing that. That said, it is a cool video you made. Thumbs up. You might not know (by the sounds of your "pci-e 1x in a pcie-16 slot" surprise reaction) that you can pull nifty tricks the other way around too. I'm sure you are aware of open back pci-e slots (so you can put a bigger card in), and how you can mod a slot to make it open back. Well, if you put a lower gen (let's say gen2) in a higher gen slot (let's say gen3 slot), you satisfy the bandwidth in the first "1x then 4x then 8x then 16x) connectors. So you can put say a "8x PCI-e gen2 card" in a "4x PCI-e gen3" slot and (on account of the fact the gen3 slot delivers twice the bandwidth of a gen2 slot), you'll get the sufficient bandwidth as if you had plugged a "8x PCI-e gen2" card into a (thereby matching) "8x PCI-e gen2" slot.
    FreeBSD runs on many microarchitectures. Assuming fancy features like squid caching and bandwidth management often aren't used by casual OpnSense users, I would think a motorola 68k variant chip (not a PC) running freeBSD as a basic router/firewall would be worth investigation. Multiple m68k (e.g. 68030 or 040 ot 060) running in parallel, like a freescale would probably do it. Not spectre of meltdown either.
    EDIT, the AES-ni requirement of PFSense was proven to be a problem (at least until a new architecture is made - which btw may never happen, short of System-On-A-Chip) because it requires a person to have a CPU with meltdown/spectre. So that completely defies the point of the security grumble they ushered in (cache timing attacks) because it makes mandatory a CPU with a CPU backdoor. This is why it is always good to consider an option wich does not entail some external entity (in this case PFSense) telling a person what to do. The pushy so and sos.
    I think OpenSense is cool. I'm not overly convinced the word "open" can be used that accurately though if it is using FreeBSD rather than OpenBSD as a kernel. However, at least it is a proof of concept that FreeBSD is a very desirable option, and then that means (as above) that the massive amount of microarchitectures that FreeBSD support (even m68k CPU) allows hte end user to think out of the box and start from scratch.
    As an aside, if you ever did deprecate that i3, you might want to use it as an offline hypervisor, although you could have some issues if you restrict yourself to those hypervisors that require an i5 (like bhyve).
    As an aside, look into ndiswrapper for your wifi troubleshooting. You might even run a container (freebsd jail) for linux and then have your ndiswrapper in that if you like.