275
Follow-up: OpenBSD routers on AliExpress mini PCs (media.hachyderm.io)
submitted 10 months ago by otl@hachyderm.io to c/selfhosted@lemmy.world
31 comments fedilink hide all child comments

Follow-up: OpenBSD routers on AliExpress mini PCs

I got lots of replies to the last post showing the little OpenBSD internet gateway setup (super interesting; thanks!). Here's more info and pictures:
https://www.srcbeat.com/2024/02/aliexpress-openbsd-router/

Something I've been meaning to share for years now.

@selfhosted #openbsd #selfhosted #selfhosting

top 31 comments
sorted by: hot top controversial new old
[-] jr52@lemmy.world 27 points 10 months ago

"EVALUATION COPY BIOS" was the best bit

[-] 1couchpotato@lemmy.dbzer0.com 20 points 10 months ago

Is this a qotom? When I bought mine the description on Amazon said it could be turned on via power restore from bios but I have 0 power settings in bios. No wake on lan, nothing.

I've searched for how to update the bios (or if this would even help) but it's hard to find clear information.

[-] postnataldrip@lemmy.world 25 points 10 months ago* (last edited 10 months ago)

It might be a jumper on the board. Mine (Q770G4) boots on power, if I can organise some downtime with the family I'll take a look at it (set it up ages ago so can't remember).

Edit: CAB approval was easier than I expected! Mine is in the BIOS, under Chipset > PCH-IO Configuration, set State After G3 to Power On.

[-] 1couchpotato@lemmy.dbzer0.com 3 points 10 months ago* (last edited 10 months ago)

Yeah I also tried moving the jumper for the power pins on the mobo but all that accomplished was a long press, which caused it to turn on and then off again.

I'll scroll through the bios again but I'm pretty sure I looked at every menu and submenu. 🤷‍♂️

[-] sunbeam60@lemmy.one 1 points 10 months ago

Is it an APTIO BIOS? My setting was hidden in IT813 Super IO Configuration —> Advanced —> Restore AC Power Loss. Took me ages to find it.

[-] 1couchpotato@lemmy.dbzer0.com 1 points 10 months ago

I guess I'll have to take another look whenever I can get the family to agree to turn off the internet for a bit.

[-] Nilz@sopuli.xyz 10 points 10 months ago

This is really cool. I've been interested in running something like this. Does it make sense to have this as a dedicated firewall in front of my Unifi lan?

[-] Violet_McQuasional@feddit.uk 7 points 10 months ago

That's how I've got mine set up, with OPNsense.

I've been using it a few years and I only know about half the stuff that pfSense/OPNsense can do. So I would advise newbies to just make small changes at a time because there's a whole lot of stuff you can change. It's worth learning, though. I wouldn't use anything else for my main firewall/router nowadays.

[-] umbrella@lemmy.ml 1 points 10 months ago* (last edited 10 months ago)

yes, thats the purpose of this device. works very well for me so far.

[-] Nilz@sopuli.xyz 1 points 10 months ago

What I meant was, I have a Unifi router and was thinking of putting a dedicated firewall in front of it. Does that make any sense or would the firewall on the unify be just as capable? Before the Dream Machine that is my current router I was running an opnsense router with my Unifi switches behind it so I'm not super unfamiliar with it I guess.

[-] umbrella@lemmy.ml 1 points 10 months ago* (last edited 10 months ago)

I think opnsense is way more capable than unifi devices, even better if you are familiar. You could try Proxmox too, makes the box more flexible.

[-] MangoPenguin@lemmy.blahaj.zone 1 points 10 months ago

If you already have a Unifi router/firewall that'll work fine, you don't need this.

[-] MigratingtoLemmy@lemmy.world 10 points 10 months ago

Well written article. Could you point to the instructions you followed to set up OpenBSD as your router + Firewall?

[-] otl@hachyderm.io 10 points 10 months ago

For starting out, Building a Router from the OpenBSD FAQ is helpful: https://www.openbsd.org/faq/pf/example1.html

@MigratingtoLemmy @selfhosted

[-] MigratingtoLemmy@lemmy.world 2 points 10 months ago

Thanks, I've read the guide. Would like to know what you've added on top

[-] sunbeam60@lemmy.one 3 points 10 months ago

I’m sorry if I seem obtuse but isn’t it easier to just set up OPNsense, which is a fully configured router/firewall on top of BSD?

[-] MigratingtoLemmy@lemmy.world 3 points 10 months ago

It is easier, but it can be considered as feature-bloat if you don't really need the breadth of capabilities that it offers. Aside from that, OpenBSD has made specific choices to make it more secure than FreeBSD by default, though the configuration will depend upon the user.

It's also more fun to DIY it and you no longer need to rely on a specialist version of BSD. You are closer to the source, so to speak.

Some reasons might just be philosophical, others can be technical if you have specific configuration that you'd want to achieve.

[-] sunbeam60@lemmy.one 2 points 10 months ago

Yup all makes sense. Thank you for explaining it to me.

[-] shaytan@lemmy.dbzer0.com 9 points 10 months ago

Been thinking about buying a similar setup, and you just pushed me into buying a "Chinabox"

Let's see how this goes, if It explodes you owe me a beer, and a pair of hands, and another chinabox (I'm not a quitter)

[-] czardestructo@lemmy.world 9 points 10 months ago

Do you know what it's idle power usage is? I'm guessing below 10W?

[-] otl@hachyderm.io 14 points 10 months ago

@czardestructo For the CPU Intel says 7.5W: https://ark.intel.com/content/www/us/en/ark/products/81071/intel-celeron-processor-n2830-1m-cache-up-to-2-41-ghz.html
So all up I’m guessing under 10W. I don’t know how much other components affect the power usage, though. And I’m about 200km away from where it is installed! Hoping someone more expert in hardware could chime in here :)

@selfhosted

[-] Edgarallenpwn@midwest.social 3 points 10 months ago

What would be the difference of running this as opposed to pf/opnsense? I know they use FreeBSD but I am not that versed in BSD based networking

[-] Daughter3546@lemmy.world 4 points 10 months ago

I personally would stick to *sense. I personally used OPNSense there's a huge community backing, well documented, and actively maintained. I like to use the CLI, but using the Web GUI was a breeze and I mainly wanted to set it and forget it.

[-] Edgarallenpwn@midwest.social 3 points 10 months ago

Same, hopped from PF to opn last year and really haven't had to do too much besides updates. For somethings E

[-] otl@hachyderm.io 2 points 10 months ago

pf/opnsense essentially provide web interfaces to the underlying
FreeBSD OS tooling. In this case I'm running plain OpenBSD. That means
configuring the system is mainly done by reading and writing text
files and doing stuff at the command line. There's a whole bunch of
reasons why some people prefer one way or the other or even mix things
up a bit. My recommendation is, if you're interested, have a go
administering a system without a web interface and see how you feel!
@Edgarallenpwn @selfhosted

[-] kidpixo@lemmy.world 2 points 10 months ago

Really cool! I never touched *BSD, I have a mini PC/NAS home that ended with a minimal Arch install. This is something I can do at some point.

And what about Wireless networks?

[-] areyouevenreal@lemm.ee 1 points 9 months ago

Normally you use a separate AP to do that. BSDs don't normally have good support for WiFi cards. Consumer WiFi cards aren't really meant for use as APs anyway.

[-] Decronym@lemmy.decronym.xyz 1 points 9 months ago

Acronyms, initialisms, abbreviations, contractions, and other phrases which expand to something larger, that I've seen in this thread:

Fewer Letters More Letters
AP WiFi Access Point
NAS Network-Attached Storage
Unifi Ubiquiti WiFi hardware brand

[Thread #572 for this sub, first seen 4th Mar 2024, 20:25] [FAQ] [Full list] [Contact] [Source code]

[-] becha@social.v.st 0 points 10 months ago

@otl @selfhosted would you talk about it at ripe88.ripe.net ? Or post it to opensource-wg@ripe.net ?

[-] otl@hachyderm.io 0 points 10 months ago

@becha @selfhosted Sure I’d be happy to talk about it there!

this post was submitted on 26 Feb 2024
275 points (97.9% liked)

Selfhosted

40734 readers
713 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

  1. Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.

  2. No spam posting.

  3. Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.

  4. Don't duplicate the full text of your blog or github here. Just post the link for folks to click.

  5. Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).

  6. No trolling.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 2 years ago
MODERATORS
ruud@lemmy.world
Loki@lemmy.world
CannaVet@lemmy.world
devve@lemmy.world
HybridSarcasm@lemmy.world
HybridSarcasm@lemmy.hybridsarcasm.xyz