Your favorite router OS
For those who don't want to use cisco/Juniper/Ubiquiti grade hardware, what is your go to router OS when you need a gateway/router/firewall?
I started with flashing dd-wrt on Linksys wireless routers, then flip-flopped between OpenWRT and OPNSense. Right now settled on OpenWRT.
OPNSense is feature rich, but sometimes confusing to use. Being based on BSD its boot time is long. It also uses much more resources than OpenWRT.
OpenWRT is lightweight and have a good sized package repository as well. However many of those packages don't have GUIs so you'll be spending time with BusyBox.
So what is your preference? Do you use a special purpose BSD/Linux distro for the job, or use plain CLI-fu?
The all seeing eye sees everything...
Comments
I like/use Endian OS, there is also a community version, and its based on Linux.
OPNSense and pfSense are great but not that easy to setup and as you said a little confusing in handling things, and also its BSD, so if something goes wrong, if you are familiar with Linux, even if it seems to be the same thing, its not, the same goes for Juniper OS.
I used to use just CLI, then started with stuff like IPcop years ago.
Most recently used pfsense. Currently since moving just using ISPs router but I am looking to replace that, as port forwarding seems 50/50 if it works or not lol.
Favorite router OS is Router OS (Mikrotik)
pfSense works well for me. More than enough features for my needs.
back in the last e90's early 00's I used to use Astaro, it was epic, probably turd these days but that was he only thing considered secure enough for the customs work we did.
https://inceptionhosting.com
Please do not use the PM system here for Inception Hosting support issues.
If you have a more powerful system, Debian & Shorewall are a great combination. I run them inside a virtual machine and share the same server for other tasks. For my access points and other lightweight hardware I use OpenWRT.
Have always used OpenWRT. Usually configure openvpn, an ad blocker plugin and some firewall rules. Works great!
I run OpenWRT in a VM as well. It is blazingly fast!
The all seeing eye sees everything...
I use to do openbsd gateways. Now it would be pfsense.
Microtik is good. Thankfully for home use there is no longer such a need since new products came up. TP-Link with broadcom is good enough.
Anyone has experience with ubiquiti? It looks like nice and modern
I bench YABS 24/7/365 unless it's a leap year.
Smoothwall on a 486 with a dialup modem.
Get the best deal on your next VPS or Shared/Reseller hosting from RacknerdTracker.com - The original aff garden.
that must generate you a lot of potassium.
The all seeing eye sees everything...
Openwrt is comfy, i like the semplicity and extensibility. pfSense/OpnSense and all the other distros are way too complicated for me.
Ooh a morning hit of nostalgia... better than coffee.
https://inceptionhosting.com
Please do not use the PM system here for Inception Hosting support issues.
stockROM, but I buy a decent ROUTER.
Free NAT KVM | Free NAT LXC
For a couple of years in the early cable days (512kbps) I ran a 486 running IPcop, along with a P100 running Win95 for stuff like WinProxy and an old mIRC bot.
I switched to x86 routers 6 years ago because ARM at that time cannot handle crypto that well. Had a 20mbps connection with my ISP but can only do 5mbps with a VPN provider. Switched to x86 and I can get near the speed of not connected to any VPN at all.
Is current ARM routers powerful enough for crypto?
The all seeing eye sees everything...
I like to use FritzOS which is developed from AVM as firmware for their enduser routers. They use good hardware (Intel Atom + ARM CPU), their software allows a lot and there's a modding scene around their OS.
Recommended services: PHP-Friends vServer | Clouvider HA Cloud VPS | MXRoute E-Mail Hosting
I don't trust my ISP freebie router. So I just VPN 24/7.
I used to run Tomato on my trusty old Asus RT-N16 before the flood in Aug 2018.
Looks like a good product. I like that they give you a periodical report on how internet was used.
I don't think the OS is available for general use?
The all seeing eye sees everything...
Didn't realise any of that. I've currently got a FRITZ!Box router from my ISP. Thought it just default proprietory thing on it. It seems okay but I have 2 port forwarding rules, both setup in the same manner (other than port) and one works the other doesn't lol.
It is really nice, since FritzOS 7 at least. And AVM in general is the most reputable company when it comes to home routers in germany. Also they provide 5 years warranty.
The firmware files for different routers are downloadable, I could even get you the source code of the firmware for my cable modem (6591) but I doubt it has been ported to any other hardware than AVM.
Yeah, AVM supports branding and also modifications of the firmware, in that case the provider is responsible for managing software updates. For most routers however there are tutorials on how to unbrand them/flash a stock firmware in order to get full functionality. Most of the time this involves accessing the EVA console via FTP during the first 10 seconds of box bootup. And if youre flashing firmware anyway, there's the freetz package that allows nice features like having an OSCAM or OpenVPN server.
Recommended services: PHP-Friends vServer | Clouvider HA Cloud VPS | MXRoute E-Mail Hosting
It would generate some great potassium these days if I had kept that machine (originally purchased new in 1993)
I am very nostalgic when it comes to 90's era computing. I also ran a popular abandonware site back in the late 90's (back then the abandonware was legitimately old DOS games and apps)
Those were the days Before cheap SBC like Raspi existed, we repurposed "ancient" computers for the tasks. Good old days indeed.
Get the best deal on your next VPS or Shared/Reseller hosting from RacknerdTracker.com - The original aff garden.
RouterOS (Mikrotik)
+1 for pfsense as a vm using vmware and microtik's router os
Pfsense for remote access server and gateway for in data center wifi.
Tab Fitts | Founder/CEO - Spry Servers
SSD Shared Hosting || VPS || Dedicated Servers || Network Status || PHX1 LG || DAL1 LG || || AS398646 || 1-844-799-HOST (4678)
I have some OpenWRT stuff around that I would really like to deprecate. These days I'm using OPNsense wherever I can. It doesn't run some weird config system on top of a Unix-like OS, and it has everything I want out of the box, like LDAP auth.
I have a Netgear Orbi system at my house, and while the wireless works really well, the gateway portion is feature poor. I'm probably going to turn the Orbis into APs and offload everything else to OPNsense. I'd like to run an OpenBSD gateway, but I need to workout how to do that first.