Open Source

29882 readers

564 users here now

All about open source! Feel free to ask questions, and share news, and interesting stuff!

Useful Links

Rules

Posts must be relevant to the open source ideology
No NSFW content
No hate speech, bigotry, etc

Related Communities

Community icon from opensource.org, but we are not affiliated with them.

founded 5 years ago

MODERATORS

[email protected]

Libre firewall and AP hardware? (infosec.pub)

submitted 11 months ago by [email protected] to c/[email protected]

8 comments fedilink hide all child comments

What hardware would you recommend for AP's and dedicated Firewalls? I really value open-source so bonus points if it works without blobs or the hardware is open or has available schematics.

Altough a bit expensive I have looked at Protectli firewalls as an option as the option to run OPNsense and coreboot is attractive.

For an AP, the Banana PI BPI-R3 (R4 if I'm patient) sounds interesting being open hardware and supporting OpenWRT. I am however curious on if it would run on LibreCMC.

top 8 comments

sorted by: hot top controversial new old

[–] [email protected] 5 points 11 months ago (2 children)

I have a Protectli box running OPNSense and it's been great once I figured out how to get its implementation of unbound working with my Pihole.

[–] [email protected] 3 points 11 months ago* (last edited 11 months ago)

And they can even use coreboot supposedly, but I haven't had the butthole to flash it.

Also, ditch pihole for blocky. It's faster and uses less RAM, and is far less complex. And it will run right on FreeBSD, no separate machine required. Couple it with prometheus and grafana and you even get pretty graphs just like pihole.

[–] [email protected] 1 points 11 months ago

@Godort @Killercat103 It’s so funny (to me) how this would potentially sound so dirty to someone unfamiliar with Open Source software.

[–] [email protected] 3 points 11 months ago* (last edited 11 months ago)

A $70 box off ebay will run opnsense quite well. Put in a cheap network card for the extra ports.

For APs you can buy routers that are supported by OpenWRT and flash them, I doubt a BPI-R3 would have acceptable performance as an AP.

[–] [email protected] 2 points 11 months ago (1 children)

Are there open source APs? I was under the impression that everything required binary firmware (even if running something like OpenWrt).

[–] [email protected] 1 points 11 months ago (1 children)

Well If it did I don't think LibreCMC would be much of a thing. (Linux-Libre OpenWRT to sum it up). But the officially supported hardware seems to be ThinkPenguin, and old APs which isn't a very rich selection. Unfortunate but thats why I wondered if the Banana Pi would work since firmware is closely tied to hardware.

[–] [email protected] 1 points 11 months ago

From their FAQ. So it seems there are free 802.11n APs...

If the device has a DSL modem or an 802.11ac wifi chipset, the libreCMC project can't support these devices. There are currently no fully free (libre) 802.11ac or DSL modem chipsets

[–] [email protected] 1 points 11 months ago

Oh wow, I'd never hear of Protectli until now and I'm really intrigued. They have a 4 port that looks absolutely perfect! Thanks!