Building The "Ultimate" Router - [PFSense + Pi-hole + PIVPN]

Поделиться
HTML-код
  • Опубликовано: 7 июн 2024
  • For 21 FREE meals with HelloFresh plus free shipping, use code HARDWAREHAVEN21 at bit.ly/3WdgdSU!
    FAQ and Concerns:
    - Why didn’t I use OPNSense?
    I just don’t have much experience with it, but I will try it out later, maybe even before I set this up in my home!
    - PFSense can do basically all of those things with other packages; why not do that?
    Honestly, I wasn’t aware of all the packages available, especially the experimental ones. But I also like the flexibility of containers and VMs. I can easily swap to OPNSense later without having to set everything else up again if I want for example. Also, software preference is a thing. It doesn’t mean I think running everything bare metal is a bad idea. Quite the opposite!
    I built a virtualized router similar to this a while back, but now I'm going to take it to the next level and build my "ULTIMATE" router. Or something along those lines...
    #homeserver #pfsense #virtualization
    ► Proxmox Disk Pass-Thru
    dannyda.com/2020/08/26/how-to...
    ► Installing Realtek Drivers On PFSense:
    / fix_issues_with_realte...
    ► PIVPN Host Setup:
    (This is for Vanilla WireGuard on Alpine, but the host setup stuff is the same)
    forum.proxmox.com/threads/pro...
    ► Seeed Studio Odyssey
    www.seeedstudio.com/ODYSSEY-X...
    ---------------------------------------------------
    Music (in order):
    "Hardware Haven Theme" -Me ( • Hardware Haven Theme M... )
    "The Butterfly Nose" - GARRISON ( / garrison-brown )
    "Town Groove" - Me
    "CRENSHAW VIBES" - GARRISON
    ---------------------------------------------------
    Gear I Use: (affiliate links)
    ► Camera - LUMIX G7 amzn.to/3LmfGdk
    ► SD Cards - SanDisk Extreme PRO amzn.to/3BPXrd1
    ► Capture Card - EVGA XR1 amzn.to/3Bn8qt7
    ► Studio Lights amzn.to/3BnYrUd
    ► Microphone - Shure SM7b amzn.to/3BP0TEB
    ► Interface - Presonus Quantum amzn.to/3QVeX3T
    ► Teleprompter amzn.to/3BxcN50
    ---------------------------------------------------
    Timestamps:
    0:00 Intro
    0:30 Today's Sponsor - Hello Fresh
    2:05 What Am I Doing?
    6:00 The Hardware
    6:56 Assembly Montage
    7:48 The Software - Proxmox
    8:18 PFSense Setup
    11:15 Pi-hole
    12:24 Wireguard
    14:13 Why I'm Lame
    15:08 What Next?
  • НаукаНаука

Комментарии • 433

  • @DIYDaveOK
    @DIYDaveOK Год назад +475

    I've been running a virtualized router using an old system called Smoothwall for seven years problem-free. I recently upgraded the whole thing to ProxMox, pfSense, and piHole and it has been fabulous. I've got in-house 2.5Gb over WiFi6 and a 12TB NAS. Even did a video on the server rebuild and install, just have to edit it all down - you and a few other channels were a great inspiration!!

    • @HardwareHaven
      @HardwareHaven  Год назад +36

      Nice! I’ll try to check it out
      Edit: just realized you said you were editing haha. Let me know when it’s up

    • @HardwareHaven
      @HardwareHaven  Год назад +27

      Also, what’s up my fellow Oklahoman haha!

    • @DIYDaveOK
      @DIYDaveOK Год назад +21

      ​@@HardwareHaven Really!? That's awesome! In OKC! I swear you were doing your build just as I was doing mine - saw the dates on one of your files was Dec 31. And I went through the same issue on installing the RealTek driver into ProxMox but only after I did the build but before I'd done any real perf testing. The parallels are kinda spooky LOL!!! Hope to get the video edited this week, but it won't be as polished as yours ! And I didn't even think about running piHole as a container. I may redeploy it. 😁

    • @somebody3271
      @somebody3271 Год назад +2

      @@HardwareHaven good video 👍

    • @keithheaton
      @keithheaton Год назад +1

      @DIY Dave I have not heard of smooth Wall and years back in the early 2000's on a dial-up modem for my network and they have not updated that piece of software and God only knows what software security issues it poses

  • @TheCreat
    @TheCreat Год назад +25

    When I was setting up my home lab/servers, I initially virtualized my router (also on Proxmox, on a "normal" x86 platform). Since I was still tinkering a fair amount with the whole (new) system, that meant that every time I did something physical, the internet went down as well. Having VLans and local routing as well means that even things that were still all on weren't reachable either. So I ended up swapping to a dedicated virtualized physical router similar to the one used in this build (Intel N5095 based, running network services only on a proxmox host dedicated to network), but quickly realized it was far more capable than what I needed. So I eventually swapped to a bare-metal, non-virtualized Zima Board (still x86, but more rapi-sized) for my router doing anything network related just via plugins. I'm now very happy with this very low power solution, and I can tinker with the main "lab" all I want without any service interruptions to stuff that isn't rebooted or shutdown.
    Note that pfSense and OPNsense can do WireGuard and piHole-like DNS services natively (via Unbound or many other options), and virtualization or containerization isn't really needed.

    • @fatlip8315
      @fatlip8315 18 дней назад

      I learned how to burn food. It's not an easy task - with that sole lesson. I learned how to cook, including adjusting the burners and figuring out how to work with different ovens and different ranges, all on how it heats up. Is it fast, slow, when does it start to boil, where does it start to simmer, after it boils, how long until it lowers down to a simmer. Voila. I hope you all have a lesson that can help you learn to cook.
      Thanks for the video tutorial and infoset in pfSense. I like the PIs for a wide variety of ideas. But, I'm using HP z-Series on legacy Bios, to disable the backdoors. Also learned theirs bios passwords, to the bios backdoors. Might be wrong. Idk much.

  • @Yuriel1981
    @Yuriel1981 Год назад +31

    I'd love to see a video on your full homelab. Setup, machines (truenas server, pf sense router, your and your wife's pcs) a full tour would be awesome! (Time to clean up that cable management lol). Also I just realized you composed your own theme. Very nicely done. Love it. Hope to see your music set up as well

    • @HardwareHaven
      @HardwareHaven  Год назад +5

      I have a mini tour over on the patreon although it's a bit outdated. I keep telling myself I'm going to do a video like that once I tidy everything up, but somehow manage to never get around to the haha! Good idea and I'll definitely try to get to that sometime soon.

  • @atcaotien9235
    @atcaotien9235 Год назад

    thank you, watching hardware stuff always feel so interesting!

  • @ChrisMenge
    @ChrisMenge Год назад +3

    I really appreciate your honesty during commentary. Great vid!

  • @Nexus9_KD6-4.8
    @Nexus9_KD6-4.8 Год назад +14

    Currently I'm using a traditional (albeit quite high-end) router but I'm using it mostly for its incredible wireless performance and as the network gateway. I've actually offloaded most of its functions onto a Raspberry Pi with the 64-bit Lite OS installed, such as DHCP, DNS, and PiHole and it has been working very well for me thus far. I would love to do this all in one complete solution one day though.

  • @tigeroats913
    @tigeroats913 Год назад +2

    Every new video u make gets better and better and I know it means nothing but I'm so proud of you, and I'm so happy I got to see ur channel grow from the start

    • @HardwareHaven
      @HardwareHaven  Год назад

      Thank you! That actually means a ton. 🙂

  • @snowflakezzonPC
    @snowflakezzonPC Год назад +42

    I love these builds. Super cool video and you get to turn a small pc into something incredibly useful for home use.

  • @jonathanmarshall3974
    @jonathanmarshall3974 Год назад +2

    I've been running a Netgear Cable Modem / Router combo since 2015. It's performed okay but I think this video finally gave me the inspiration to go PFSense.

  • @crimsonkarma13
    @crimsonkarma13 Год назад +3

    watching your videos and getting into nas and more technical of the technical stuff has me feeling the same way i have felt when i was just getting into pc's
    at first i didnt know how it all worked or what the terminology all was but now a pc is the same as legos to me.
    now i hope to learn everything about nas and whatnot and make my own nas with a pc someday with the help of your videos

  • @annix493
    @annix493 Год назад +6

    I’m literally doing almost exactly this project right now, and have been really struggling to get my Realtek 8125B 2.5Gbe NICs working, I ended up getting them *kinda* working with PfSense 2.5.2 yesterday, but wasn’t super stoked on having to use older software. Luckily I’ve barely gotten through configuration before coming across this video, so I’m going to re-flash 2.6.0 and try out the package from the Reddit post you linked. Man, my RUclips recommendations are usually pretty good, but this? *Chef’s Kiss*.

    • @AD34534
      @AD34534 2 месяца назад

      You'd have better luck with Realtek drivers on OpenWrt since it's Linux.

  • @RealJustPotato
    @RealJustPotato Год назад +2

    That is a pretty nice router you got there,
    Thanks for the good video!

  • @haonnoah
    @haonnoah Год назад +20

    Not sure if it's been mentioned below, but what if you connect the LXC containers to a virtual switch and an extra interface for pfsense to route the LXC traffic without passing through a physical switch. This would force traffic directed to the LXC containers through PFSense (like PiHole) but ultimately would eliminate PFsense from routing from one physical interface to another physical interface to virtual interface in the container

    • @energyboy5696
      @energyboy5696 Год назад +2

      That's the sysadmin way of thinking. Much faster to have containerized, virtual switches when translating network traffic from VM to VM

  • @johntheawsomeful
    @johntheawsomeful Год назад

    Never thought I'd get excited over a router
    Subscribed lol

  • @martinbcooper
    @martinbcooper Год назад +1

    Nice job. For services like pihole and httpd I switched to Docker containers a while ago, it makes management and backups nice and easy.

  • @Treyshadow
    @Treyshadow Год назад

    Love this. I have been running same Seeed Odyssey for my router, but only for PFSense. This would be a fun modification... You got me thinking, but I already have an ESXi cluster in the house.

  • @adrianmurillo2646
    @adrianmurillo2646 Год назад

    Thats is some clean hardware!

  • @JonathanTalksHW
    @JonathanTalksHW Год назад +2

    Love that video. I will be building my ultimate pfsense router soon

    • @HardwareHaven
      @HardwareHaven  Год назад +1

      Nice! I definitely wouldn’t go this exact route as there’s probably much better options for hardware haha. Best of luck!

    • @JonathanTalksHW
      @JonathanTalksHW Год назад

      @@HardwareHaven I know, I'm not going to do proxmox. I like to run dedicated machines in terms of routers and pi hole stuff.

  • @jonathanschober1032
    @jonathanschober1032 Год назад +8

    One thing you could do, although it’d be a bit more dependent on your router, but you could create a virtual bridge and attach it to proxmox and your pfsense VM, so proxmox would connect via pfsense, and all physical NICs would go to pfsense. Not necessarily a good idea, but an idea none the less

    • @HardwareHaven
      @HardwareHaven  Год назад

      For sure! And that would give the benefit of virtio between PFSense vm and host/containers, but I lke the idea of PFSense having direct access to the hardware

    • @bcboncs
      @bcboncs 5 месяцев назад

      @@HardwareHaven you're the first bare metal firewall person I've come across. I like how you did this virtual and snapshotted for baremetal. Can this same technique be done for usb booting? Did you not have any hardware issues beyond the NIC drivers? I am reading about all these compatibility considerations with freebsd. Thank you and great video!

  • @HardwareHaven
    @HardwareHaven  Год назад +6

    FAQ BELOW!!!
    For 21 FREE meals with HelloFresh plus free shipping, use code HARDWAREHAVEN21 at bit.ly/3WdgdSU!
    FAQ and Concerns:
    - Why didn’t I use OPNSense?
    I just don’t have much experience with it, but I will try it out later, maybe even before I set this up in my home!
    - PFSense can do basically all of those things with other packages; why not do that?
    Honestly, I wasn’t aware of all the packages available, especially the experimental ones. But I also like the flexibility of containers and VMs. I can easily swap to OPNSense later without having to set everything else up again if I want for example. Also, software preference is a thing. It doesn’t mean I think running everything bare metal is a bad idea. Quite the opposite!

  • @anthonyrussano
    @anthonyrussano Год назад +2

    thank you. i would like to follow in your footsteps to create a similar setup. i have been using cloudflare tunnels instead of setting up wireguard... but i totally used to run pi hole and pivpn on bare metal raspberry pis and it worked great. i would like to setup those services again as part of my proxmox

  • @macmaniac3080
    @macmaniac3080 10 месяцев назад

    Nice! Been looking to build a box like this!

  • @sandamalgamage1242
    @sandamalgamage1242 Год назад

    I love this channel. Thank u shareing your experince and Knowledge with us❤❤

  • @omg-rtfm
    @omg-rtfm Год назад +4

    All I would offer as a critique is that pfSense can run OpenVPN so there's no need to separately run piVPN. Having said that, I LOVE piVPN for it's ease of set up, and use of WireGuard for a client. Great system. pfSense and piHole are awesome, love them. Thanks for the video :)

    • @HardwareHaven
      @HardwareHaven  Год назад +1

      Yeah I mention that in the FAQ in description, but thanks for the constructive input and kind words!

    • @dohmarau
      @dohmarau 5 месяцев назад

      and pfBlockerNG does the same thing as piHole anyhow, so you can run them all on the gateway (I do..) Only thing I use a pi for is GPS based stratum 0 NTP server

  • @Venom2238
    @Venom2238 Год назад

    I like it, i would like to make one my own too, and thank you for telling us about this, love your project.

  • @AshiqurRahmanpothik
    @AshiqurRahmanpothik 7 месяцев назад

    So nice !

  • @valdimer11
    @valdimer11 2 месяца назад

    When setting up containers, i find it is good practice to always set up individual software on one container. Its easy for maintenance but its also easier to manage in general because you are not forgetting which container is what.

  • @kz400-
    @kz400- 4 месяца назад +3

    Is this better than a gaming router?

  • @Badsniperarmy
    @Badsniperarmy 10 месяцев назад

    this is all so much for me but I can't wait to learn all this, I have a bunch of old laptops that I know they still have life in them just not as a traditional laptop! Maybe more so as a storage server, security camera service, and router!

  • @CauseOfBSOD
    @CauseOfBSOD Год назад +4

    ive personally tried opnsense first, then pfsense
    i had some issues with opnsense (specifically the freeradius package was broken) but pfsense tends to work better. however pfsense is a bit less opensource than it claims to be

  • @JavierChaparroM
    @JavierChaparroM Год назад +1

    Love your videos sir!!

  • @blazini
    @blazini Год назад +3

    I have several Seeed Odyssey's. Surprised both onboard NICs work with the M.2 NIC card plugged in, the Odyssey X86's have a hardware bug that kills one on-board NIC when some PCIE devices are plugged into the M.2 port. That said I also have alot of Odroid H2/H3 boards as well. The Odroid's are similar to the Seeed Odyssey but have 2 2.5gb NICs onboard and Odroid makes a "net-card" that adds 4 more 2.5gb NICs for a total of 6. I've been using one as my router for about 2 years now without a hitch. They also have cases that don't require mods for the net-card

  • @victornecromancer
    @victornecromancer Год назад

    Good that i can learn from you and the people from the comments that tell about more eficient/alternative ways to do these things. Also have to wait for family to go out to tinker with the network lol

  • @krum1985
    @krum1985 Год назад +7

    That looks interesting. I would love to try a similar build myself at some point. I think I would use Bind instead of PiHole for my DNS though 😄

    • @Se9n.
      @Se9n. Год назад +5

      PFsense has a blind service and a wire guard service so separate containers wouldn't be needed

    • @SerpentDrago
      @SerpentDrago Год назад +3

      Already in pfsense no reason for separate

  • @davidg5898
    @davidg5898 Год назад +1

    12:29 You being lame is actually really smart. I did the same when I switched from a "real" router to a pfsense box.
    I put the pfsense box behind the router and migrated things behind the pfsense box over time. Once everything was behind the pfsense box, it just needed a few WAN setting changes and then I pulled the "real" router from the front of the chain, switched the router to AP mode and put it behind the pfsense box for WiFi connectivity. Since I got my bearings and learned the pfsense settings while just a couple machines were behind the pfsense box, there was no real downtime ever involved.

  • @OspreySoul
    @OspreySoul 9 месяцев назад +1

    I only understand the surface-level of the features that you discussed here, but I would love to build a router like this with a built-in VPN and PiHole. Would you recommend a beginner just stick to PFSense for those features if they don't feel the need to separate it onto a VM?

  • @moosematrix
    @moosematrix Год назад

    I just heard about using Pfsense & Pi hole recently and I want to emulate this project!!

  • @milktoastgregg
    @milktoastgregg 10 месяцев назад

    hahaha I raised my eyebrow real hard when the QR for your wireguard access token popped up on the screen... very clever!

    • @HardwareHaven
      @HardwareHaven  10 месяцев назад +1

      Hahaha I’m a bit surprised at the lack of comments I’ve seen on that. Hope you got a chuckle

  • @tylernewton1620
    @tylernewton1620 6 месяцев назад

    Hello, I am a network administrator and we use pfsense for some customers as a VM on VMware, and it is super stable and reliable. Honestly, it is more reliable than some of our SonicWall appliances. One customer has high uptime requirements, and the primary wan firewall has been up for about a year and no issues. (I know it needs a reboot. Again, high up time customer. Very specific case lol) but I highly recommend turning an old PC into a router if you want a fun project or your router shows inconsistencies or issues. You just need two ethernet ports, and add-in cards can be cheap. I do recommend Intel NICs if you are doing bare metal port forwarding. Non Intel cards can have issues on pfsense

  • @emilemouannes2236
    @emilemouannes2236 Месяц назад

    I was wondering how to do you access your proxmox web interface from? Did you connect the proxmox lan bridge to the pfsense lan physically or virtually? Or are you accessing your proxmox web ui from your other router and on a different network?

  • @xellaz
    @xellaz 2 месяца назад

    Pretty neat router you got there! I recently just added a 2nd Wireguard VPN on my Pi5 as a backup for those public wi-fi areas that doesn't allow you to connect using the default 51820 port. I have it running on a docker container and everything is running great after a few tweaks. My main router is a Firewalla Gold Plus that is also a hardware firewall and has tons of features. It also has a built-in Wireguard/OPVN and ads & telemetry blocking features. I'm still curious to run Pi-Hole with Wireguard on my Pi5 though and I'm having a little trouble with that on my network. I was able to successfully run Pi-Hole on another docker container and even have it running on https complete with SSL certs using NGINX proxy manager but when I use it as my DNS on my Wireguard on my Pi5, there is no Internet. I see the traffic being blocked though by Pi-Hole and all the stats in the Dashboard are running. I think I need to forward the traffic correctly but time is limited and I'll try to troubleshoot that on another time. 😮‍💨

  • @alejandroglfm
    @alejandroglfm 4 месяца назад

    Great videos Colten!! what about using tailscale on an lxc as an exit node for tailscale and also allowing LAN??

  • @PeytonGaming526
    @PeytonGaming526 7 месяцев назад

    Bro, wdym goofy? It's a work of art I love it!

  • @Quettesh
    @Quettesh 8 месяцев назад +1

    I was running similar setup, but it was too much hassle to tinker with it and even my current Mikrotik AX3 is way easier to maintain while running Pihole and Unboud in the container direactly on it. I haven't noticed any performance diffrenece. Another advantage is decent wifi coverage which AX3 has. Power consumtion is also way lower.

  •  Год назад +1

    Always nice to have more control over router and clans ect.
    But setting up iptv from the ISP can be a pain to setup properly.
    I noticed myself doing so. IGMP needs to be enabled or other protocols, depending on how your ISP handles iptv.
    And you don't want to piss off others in the household. 😋
    Going fiber is also a different challenge depending on compatible hardware.

  • @pepeshopping
    @pepeshopping Год назад +1

    Cool project box but you better have a backup one for when the main goes down.
    For quite less that price, you can get a fully enclosed device with same cpu and 4 Ethernet ports, ready to go.

  • @rageburst
    @rageburst Год назад

    Can I request that you can provide links to get the adapter, the computer case component, and the NIC? It helps to buy the exact thing since you've done a proven proof-of-concept. Also, I want to thank you for showing us this awesome build.

  • @yushk19
    @yushk19 Год назад

    Great vid! I've been watching a few of your videos and really enjoying your music as well(Town Groove is a bop!). Any plans on releasing any of these?

  • @spiritvateme
    @spiritvateme Год назад

    Thats super sweet quick question can i put my phone tu run okta an dpoint it to read different location

  • @cyberpunk9487
    @cyberpunk9487 Год назад

    This is cool. I used XCP-ng when I virtualized my router because you don't need to passthrough the nics you just assign the lan and the wan ports to the vm xen routes the traffic from the physical to the virtual

    • @marcosscriven
      @marcosscriven Год назад

      Curious what the virtual drivers the hypervisor emulates though? Generally those can give very poor performance given the BSD based of pfsense.

  • @ichilvers
    @ichilvers Год назад

    Are there any throughput stats on this as a working router? So it can be compared to a Draytek router for example.

  • @Rob-dd3mn
    @Rob-dd3mn Год назад +1

    I have seen those dual 2.5g nics on Aliexpress before, as you know a 2.5g nic can operate at 5gb in full duplex mode if transferring files from machine to machine over the lan. With 2, that's 10gbs worth of bandwidth. Can the PCIE interface support that much speed?

  • @datboi8140
    @datboi8140 5 месяцев назад

    do you need to have that specific seeed board with the RP2040 raspberry pi chip for this, or can you use older seeed model 4105 = ATSAMD21 chip?

  • @siwiskate
    @siwiskate 10 месяцев назад

    Awesome video!
    I quite liked the idea of being able to boot from the passthrough drive in case something happens to Proxmox. In fact, I was trying to replicate it, moving my currently virtualized OPNSense to a spare drive, and realised something...
    If the EFI Disk lives in the LVM/ZFS Proxmox pool, would one still be able to boot from the OPNSense drive, bypassing Proxmox?

  • @Stev.3n
    @Stev.3n Год назад

    Same camp with the swap lol. Still running the old Unifi USG-3P even after I've started getting a pfsense box ready and have been doing some testing. It's currently been good and I have other Unifi gear, dynamic DNS and OpenVpn access server but I've considered switching to wireguard.

  • @Dave-cx1tz
    @Dave-cx1tz Год назад

    Brilliant

  • @JoJoJenkns
    @JoJoJenkns Год назад

    What connecters are you using on your bottom NIC. That thing lights up the whole LAN connector likes it is a Christmas tree, or is they just the angle of the camera?

  • @gordr8024
    @gordr8024 8 месяцев назад

    What through put are you getting with this will it do gig-bite through put from isp to network

  • @stevene_
    @stevene_ Год назад

    im after a 1 stop box that can connect to vdsl via pstn (here in Australia most of our net comes from vdsl) and would rather not have an extra modem. any suggestions on hardware to do it all?

  • @athstreamsandmore
    @athstreamsandmore Год назад

    Virtualizing these services, how does ram utilization work with Proxmox?

  • @agoddamnferret
    @agoddamnferret Год назад

    do you have any good links to the seeed box you were running and any of the other hardware?

    • @HardwareHaven
      @HardwareHaven  Год назад

      No not really, and I’d probably look into some of the dual or even 4 NIC mini PCs on Amazon and such instead. The odyssey is a lot of fun for projects it a bit expensive

  • @jokroast6912
    @jokroast6912 Год назад

    I'll be waiting for the followup

  • @FallenAngels97
    @FallenAngels97 Год назад

    Do you have a link to the sata cable? So I can try it on my ASRock mb

  • @xpatrikpvp
    @xpatrikpvp Год назад

    the dedicated ssd for pfsense is a great idea

  • @LeoLijo
    @LeoLijo Год назад

    Really cool

  • @JordanPlayz158
    @JordanPlayz158 Год назад +3

    4:55 interesting use for pi-hole, PFSense (or at least OPNSense) actually comes with Unbound DNS which I use personally that supports what you mean, it is under DNS Overrides tab and you can do exactly what you described.

  • @anthonypolsinelli1179
    @anthonypolsinelli1179 Год назад +6

    Cool idea, but pfsense has all of this without the need for other VMs.
    Pi-hole - pfblocker package
    PiVPN - openvpn or wireguard experimental packages
    Reverse proxy - ha proxy package
    Ddns - native Ddns function

    • @HardwareHaven
      @HardwareHaven  Год назад

      For sure, and I honestly didn’t know all of those were available. But I think there’s merit in the flexibility that VMs and containers offer. Appreciate the comment!

    • @zeendaniels5809
      @zeendaniels5809 Год назад +1

      Experimental packages on your home router? No thanks.
      And the pfblocker package is... Let's say too basic compared to piHole. It doesn't do any logging, nor statistics, nor tables and graphs. Sure, if you don't need all that go ahead, but for most people I think piHole is the way to go.

    • @elgavilan2000
      @elgavilan2000 Год назад

      @@zeendaniels5809 I've been using the Wireguard package for a while now and it's been rock solid for me. Or if you prefer the OpenVPN package is not experimental. Agree 100% about Pihole vs. pfBlockerNG, although I still use pfBlockerNG for IP blocking.

  • @hotrodjones74
    @hotrodjones74 Год назад

    The blackhole router. Cool shit broski!

  • @angrynerd2103
    @angrynerd2103 Год назад +1

    This comment section is definitely full of alternatives but if you want a few more, a useful alternative to pihole is adguard home. Does basicslly the same thing but it supports service based and regex based blocking. Additionally you can use unbound, either built into pfsense or installed in a vm or container. It allows for recursive dns lookups so you dont need a middle man like cloudflare and it offers great caching and speed.

    • @HardwareHaven
      @HardwareHaven  Год назад +1

      Yeah, I should've at least talked about unbound. I think I cut too much to try and keep the video from being too long. Thanks for the input!

  • @KlausDieter764
    @KlausDieter764 Месяц назад

    Why not using the wireguard that pfsense already have?

  • @Cyhawkx
    @Cyhawkx 6 месяцев назад

    Your link to the Shure SMB7 is wrong in the description, takes people to their orders ;)

  • @Subgeta
    @Subgeta Год назад

    What about ventilation? Does it get hot? Over heat c/would be an issue. How is it running after 4mo.?

  • @fotografm
    @fotografm Год назад

    Great video. I play with such things quite a lot. Is there a reason why you used iommu pass through instead of just making network bridges to the network card ?

    • @HardwareHaven
      @HardwareHaven  Год назад +2

      Really just for more separation between proxmox and PFSense in case things go south. If I need to boot the PFS drive bare metal, I shouldn't have to load drivers or anything, and the interfaces SHOULD populate correctly. At least they did when I tested it.

    • @HardwareHaven
      @HardwareHaven  Год назад +2

      Also not sharing any bandwidth if I were to run anything more data heavy using the network bridge

  • @devincurrie4145
    @devincurrie4145 Год назад +2

    Would help to say the expected price point to build such system. What about using OPNsense instead as I heard that pfsense does not receive updates often?
    I still have an old Apple AirPort Extreme router, which I haven’t use for years. Any chance I can hack into it by installing third party software replacing Apple’s software? Or better to build new hardware?

    • @HardwareHaven
      @HardwareHaven  Год назад

      As far as price, I’m not really sure. I probably wouldn’t recommend the exact route I went as there are pretty affordable dual/quad NIC mini PCs on the market that would probably be a wiser choice.
      As far as hacking the AirPort Extreme, you’re on the wrong channel😂 Seems like a super cool idea, I’m just not smart enough to give any advice

  • @UloPe
    @UloPe 5 месяцев назад

    For just local DNS resolution you don’t need pihole. Pfsense has that built in. And it may actually be counterproductive not to use the pfsense one since you loose the automatic registration of dhcp client names in the dns namespace.

  • @TheKd4lyfe
    @TheKd4lyfe Месяц назад

    I think I may go this route, proxmox, pfsense, pi-hole, VPN, home assistant, NAS.
    Sick of my current router dropping out

  • @CaHeoMapMap
    @CaHeoMapMap Год назад

    you are pro!

  • @Tekgnome.
    @Tekgnome. Год назад +1

    I just built my firewall out of an old recycled Lenovo system with an i7 4770, threw in 16gb of ram, a 128gn boot SSD and a 10gb SFP+ card. I shoved it all in a 2u chassis and it's pretty solid for the age of it.

    • @HardwareHaven
      @HardwareHaven  Год назад

      Sweet!

    • @BrianSimmons
      @BrianSimmons Год назад +1

      What's the power usage? I suspect buying a more modern power efficient device would actually save money in the long run. It's definitely something you need to consider when determining what devices to use.

  • @lo0ops
    @lo0ops Год назад

    Bit odd. What font is used in the chapter titles? Loving your work.

  • @juliang3439
    @juliang3439 Год назад

    looks like i found my next project. cheers bro ill sub to that!

    • @HardwareHaven
      @HardwareHaven  Год назад

      Thanks! I’d probably use different hardware though haha

    • @juliang3439
      @juliang3439 Год назад

      @@HardwareHaven i have some "old" office desktops and a pi 4 collecting dust, i think i can set something up with those hahah

    • @HardwareHaven
      @HardwareHaven  Год назад

      For sure!

  • @4856294zeeshan
    @4856294zeeshan 11 месяцев назад

    Hi, we have captive portal networking in our building with radius server and voucher system,
    to access the internet each user have to purchase its own voucher,
    In our area internet is very expressive so plz tell us how can we use a router to login in to this network using single voucher and using router as a bridge to connect other 5 smart phones, and please also tell us which router is suitable for this type of networking
    Thanks

  • @MrRolloTamasi
    @MrRolloTamasi Год назад

    Built something similar here with a N5105 + 4 x 2.5 G eth ready made system with passive cooling. IMHO a quite solid base for a small network centric VM host. Where there specific reasons you opted for a more diy approach?

    • @HardwareHaven
      @HardwareHaven  Год назад +2

      I had the parts on hand and it was fun. There is absolutely no other reason haha.
      well, I guess the extra SSD to boot bare metal was kinda cool, but I imagine some other machines offer that as well

  • @rethinking3289
    @rethinking3289 Год назад

    you can save more resources by using pfblocker on pfsense itself instead of pihole. Its the same with more features.

  • @andrewsontop
    @andrewsontop 3 месяца назад

    does this need an existing router to make pfsense make a 2nd router or pfsense is the router and doesnt need any existing ones? cuz i changed home and idont have router but i have a raspberry pi

  • @Casper042
    @Casper042 11 месяцев назад +2

    This feels like a BUNCH of work that just isn't needed.
    Pickup a Lenovo Tiny M720q, which has an optional PCIe slot where you can drop in a 2nd NIC (I have a 4x1Gb in mine)
    Run the onboard NIC for the Hypervisor and pass through the entire PCIe NIC into the pfSense VM.
    You ARE limited to 1 x NVMe M.2 drive for storage with this design however.
    You can do a M720x instead which has Dual NVMe M.2 if you really want a dedicated pfSense drive.
    If you do this, look into the 32GB Intel Optane M.2 drive. pfSense doesn't need much storage and these are wicked fast.
    Anyway, no soldering, no weird adapters from Ali Express, and you can get up to 6 cores if you get the 8600/9600 or higher CPUs.

  • @crimsonkarma13
    @crimsonkarma13 Год назад

    im new to all this but turning your pc into a router sounds amazing, and with you changing your router entirely, what do isp say about doing that?

    • @HardwareHaven
      @HardwareHaven  Год назад +2

      I still use the modem provided by my ISP, it’s just that the router is now behind it

  • @En1gma3069
    @En1gma3069 Год назад

    Well, what about 10G network cards? Can you do that with an m.2 nvme?

  • @obvionaoe
    @obvionaoe Год назад

    You should look into Ansible in case you haven't used it before :)

  • @franzpleurmann2585
    @franzpleurmann2585 Год назад +1

    I recently switched back to pfSense on bare metal because it is quite complicated to configure VLANs on a linux network bridge if you cant passthrough two dedicated nics.

    • @HardwareHaven
      @HardwareHaven  Год назад

      Yeah, as cool as VLANs can be... I have a painful history with them lol

    • @bcboncs
      @bcboncs 5 месяцев назад

      Have any recommendations for how that hardware and base os design looks with pfsense on bare metal?

  • @swordfish6975
    @swordfish6975 Год назад

    It's possible to do it all on one nic using a managed switch (I have the unifi 5 port), you just have to use vlans. It's how I have my network setup right now, proxmox with OPNsense.

    • @HardwareHaven
      @HardwareHaven  Год назад

      Yep, but I don't want to do that if I don't have to.

  • @a9503128
    @a9503128 8 месяцев назад

    I’m confused, by the time you put all the hardware together it’s the same cost as a Protectli Vault 4 Port 🤷‍♂️ and the VPN and DNS filtering with PfSense native?

  • @DomtronVox
    @DomtronVox Год назад

    Question about the hardware.
    I really like this and want to build it for my own network. I've tracked down all the hardware you used in the video, except I'm having a little trouble finding the M.2 to dual NIC card. The normal places I buy don't have anything like it, or it's $70+. I tried finding exactly what you bought on aliexpress and found something similar, but it has slightly different information on the page then what you showed in the video at 3:51 (price, rating, number of orders). Could you tell me what the company name was for the card you bought or even better just directly link it?
    (sorry if you already linked it, I've double checked and didn't see it anywhere in the description, video, or comments.)
    I've not used aliexpress before and am a bit worried I'm going to buy a bad product.

    • @HardwareHaven
      @HardwareHaven  Год назад +1

      I believe this is the one
      www.aliexpress.us/item/3256804012790087.html?gatewayAdapt=glo2usa4itemAdapt&_randl_shipto=US
      also check out the LinkStar h68k from Seeed. It's arm based, but runs openwrt really well and that can run docker. I'm in the process of making a video on it, so I haven't had time to really test it out, but worth a look for sure! Even has built in WIFI so you don't need another access point

  • @WhereIsWaluigi
    @WhereIsWaluigi 9 месяцев назад

    how did this entire project cost?

  • @alexjoni
    @alexjoni Год назад

    can you check what a typical power consumption is when idle/under heavy load?

    • @HardwareHaven
      @HardwareHaven  Год назад

      Hmmm I THINK I put that on the first video but forgot here. I’ll try to check here soon

  • @dkalata
    @dkalata 3 месяца назад

    Found this video not too longer ago, and thought I would assemble the components and try to build out the same "ultimate" router. I am only at the parts assembly stage, and I think my question is a simple one.
    Anyone know the part number for the HDD/SSD power cable?

  • @danney777
    @danney777 6 месяцев назад

    I have a single question for a more personal preference...can this be done with OpenWRT?

  • @colbyduncan5174
    @colbyduncan5174 Год назад

    What would you recommend for a good AP to pair with this?

    • @HardwareHaven
      @HardwareHaven  Год назад

      I have two EAP225s from TPlink and they do a solid job

  • @fastshuther
    @fastshuther 9 месяцев назад

    You should of cut the extra screw length popping out of the diy shield, just in case it doesn’t make ground somehow

  • @tigeroats913
    @tigeroats913 Год назад

    Please make a dedicated video on setting up a home vpn

  • @anthonyrussano
    @anthonyrussano Год назад

    i need a refresher course on setting up proxmox with pci passthrough. i have this gpu i want to use that's just collecting dust