this post was submitted on 25 Feb 2024
368 points (97.2% liked)

Selfhosted

40006 readers
578 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

  1. Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.

  2. No spam posting.

  3. Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.

  4. Don't duplicate the full text of your blog or github here. Just post the link for folks to click.

  5. Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).

  6. No trolling.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 1 year ago
MODERATORS
 

Another successful OpenBSD setup

I've been buying these little boxes from AliExpress for years to use as firewalls and routers. My oldest one is almost 9 years old now! OpenBSD installs just fine. Just a BIOS tweak to always boot up after power is restored.

@selfhosted #selfhosting #selfhosted #openbsd #runbsd

top 50 comments
sorted by: hot top controversial new old
[–] [email protected] 1 points 8 months ago (1 children)

How would one go building a router? I was planning on getting wired networks for a NAS build but most providers seem to ship their own router which probably is a nightmare for privacy, can I just pay for internet and use whatever router I want?

[–] [email protected] 1 points 8 months ago

OpnSense would be the easiest way if you wanted to go. It's still not easy, but the articles online should help you out.

First you'd need a machine. I've got an m920q I bought off eBay for $135 after shipping.

The computer will likely only have one Ethernet port. And it's likely the port is Realtek which isn't supported well.

So, you'll need to get yourself a NIC (a fancy term for a network card). There are good forum posts and articles online about the best NICs to buy for your needs. Intel is a must. However, you can find many of their NICs online labeled as another brand - usually HP, Lenovo, or Dell. Again, the forum posts will tell you what to look for.

If you bought the same computer I mentioned above, you'll also need a riser and a bezel. Amazon and eBay will have a good selection.

Now assemble it. Flash the computer with OpnSense. Don't plug it in as your router yet. Follow along with some basic setup guides online to figure out how you want it configured.

Once you're happy, plug it in as your router and test that it works. If not, you'll need to put your old router back in place until you can figure out what you need to change.

[–] [email protected] 3 points 8 months ago (1 children)

6 VLANs, 2 ISPs on load Balancing and FailOver, 6 switches, 7 APs.

The sky's the limit

[–] [email protected] 2 points 8 months ago (1 children)
[–] [email protected] 1 points 8 months ago (1 children)

I'm bent on getting as many people as I know to self-host everything possible and to guard their home networks. The garbage out there today is too much.

[–] [email protected] 2 points 8 months ago (1 children)

> The garbage out there today is too much.

For sure. I'm hoping that with much cheaper and more reliable hardware
that we have now, it makes it easier for indivduals and small groups
to run services that could only be run by big dysfunctional companies.
Fingers crossed!
@jjlinux @selfhosted

[–] [email protected] 1 points 8 months ago* (last edited 8 months ago)

It's not much, but I got a friend from church (die-hard Apple user) to love away from all that crap. He now owns a Pixel 6 Pro running Graphene and is running PopOS on an Intel Mac. Sold his IPhone too.

He says that I am the only person he knows that preaches 2 Gospels 🤣🤣

[–] [email protected] 2 points 8 months ago (1 children)

Ive wanted one of these for a while to replace my ISPs modem+router+switch+wifi-AP. But apparently these devices can be funky to get a good wifi going, and I don't feel like adding three (mini pc, switch, AP) new devices to my "we don't talk about it" corner where all the IT is stored. Do you know anything about wifi on these?

[–] [email protected] 1 points 8 months ago (1 children)

It's usually considered a poor idea to use it also as an AP.

The location usually isn't great for your WiFi and there are better tools for the job.

[–] [email protected] 1 points 8 months ago (1 children)

Is location the only reason to not use it as the AP? If I had a larger house I'd agree, but as I live in a small apartment, the current router location can easily serve the entire flat, so that is no concern right now.

[–] [email protected] 1 points 8 months ago

I picked up a 7 year old Netgear modem/router on eBay that has replaced my ISP modem/router. The WiFi is better, and I can port forward without taking all the cables out of the back (yeah that's a thing with the ISP one) and forward traffic through my Adguard DNS. Well worth the £25 I bought it for.

Also if it starts annoying me I can throw OPENWRT on it and play with that instead.

[–] [email protected] 19 points 8 months ago (3 children)

I personally never understood the desire for BSD. BSD was good back in the day but we now have Linux which is better supported and protected under the GPL.

[–] [email protected] 1 points 8 months ago

A lot of people stick with what they know and are familiar with.

[–] [email protected] 1 points 8 months ago

I one heard ast describe Linux's code quality as 'marginal' (presumably speaking of the kernel)

Of course, it was ast talking at BSDCan but still, harsh words from a master.

[–] [email protected] 23 points 8 months ago (2 children)

PfSense and OPNsense are both killer router "out of the box" distros built on BSD. I say this as a Linux user, with little interest in running BSD for my applications, but... Respect to BSD. ✊

[–] [email protected] 2 points 8 months ago* (last edited 8 months ago) (1 children)

I couldn't agree more. I've been running PFsense for about 5 years, great little toy, not 1 single issue. BSD has been paramount in my life for my firewall needs. And I only run Linux on everything else (desktops and servers), but there is not a single FOSS firewall distro out there that can match, much less surpass, a BSD based firewall.

[–] [email protected] 2 points 7 months ago

Yeah. I've no need to change to anything else. pf/OPNsense 4life.

[–] [email protected] 4 points 8 months ago (2 children)

I run OpenWRT and it works pretty well. The only potential issue is the updates but if you have a plan it isn't a problem.

Maybe I'm missing out but from my perspective it is way cheaper to buy a off the shelf router with OpenWRT that can handle gigabit speeds than it is is to build/buy a entire computer that pulls way more power and is several times the cost.

[–] [email protected] 1 points 8 months ago

Openwrt works great for gigabit networks with simple firewall rules and no IPS. But used 10-56gbps enterprise equipment is getting pretty cheap, and more complicated firewall configurations need more powerful hardware than the typical openwrt router.

And 56gbps on a home LAN might be overkill, but that's not important.

[–] [email protected] 3 points 8 months ago* (last edited 8 months ago)

I recently installed OPNsense specifically because I had to buy a mini PC with 2.5 gig ports. There simply isn't anything reasonable on the market for the prosumer above the 1 gig threshold. Running splendidly on a Beelink EQ12.

Also, OPNsense has things OpenWRT doesn't offer (plugins, IPS, etc.)

[–] [email protected] 11 points 8 months ago* (last edited 7 months ago) (1 children)

Acronyms, initialisms, abbreviations, contractions, and other phrases which expand to something larger, that I've seen in this thread:

Fewer Letters More Letters
AP WiFi Access Point
DNS Domain Name Service/System
NAS Network-Attached Storage
SATA Serial AT Attachment interface for mass storage
SSL Secure Sockets Layer, for transparent encryption
TLS Transport Layer Security, supersedes SSL

5 acronyms in this thread; the most compressed thread commented on today has 9 acronyms.

[Thread #543 for this sub, first seen 25th Feb 2024, 15:45] [FAQ] [Full list] [Contact] [Source code]

[–] [email protected] 2 points 8 months ago

Good bot 🤖

[–] [email protected] 5 points 8 months ago (1 children)

I have one of these with PFSense on it. Works great, but when I had it in a hot room I had to zip tie a 120mm fan to it 😀

[–] [email protected] 3 points 8 months ago* (last edited 8 months ago) (1 children)

I bought some half-inch silicone feet to separate mine from the shelf it sits on. The added airflow underneath seems to do just fine.

[–] [email protected] 2 points 8 months ago

Yea mine was hung on the wall with an air gap, still needed the fan hah

[–] [email protected] 17 points 8 months ago (2 children)

Sorry for my ignorance I tried googling but what is this exactly? A server for files or? A media server?

[–] [email protected] 13 points 8 months ago

@madcaesar @otl It's a small server running OpenBSD, configured to operate as a router and/or firewall.

Linux and the *BSDs can operate as very good routers and firewalls, usually being much more configurable and enabling you to do more complex than off-the-shelf consumer-level hardware routers. Using them on a small form factor computer with a cheap switch in front of them can give you a better performing and nicer to use alternative.

[–] [email protected] -3 points 8 months ago

An operating system

load more comments
view more: next ›