I’d like to install an open source router/firewall OS on a Proxmox VE VM on a Protectli FW6D but I’m unsure which OS to pick.

I was leaning towards pfsense but I recently read that they’re now blocking features behind a paywall.

I’ve come across opnsense, ddwrt, and opnwrt as alternatives but would appreciate it if someone can provide insight into which option would be best.

Background:

I have a Proxmox VE server running an Ubuntu VM with Emby, Sonarr, Radarr, NZBGet, Transmission, Prowlarr, Bazarr, & Portainer in Docker containers. It’s a 150tb machine running snapRAID, MergerFS, & a daily sync crontab that emails a report once completed. PCIE passthrough NVIDIA Quadro P2000 and LSI 9201-16i HBA. I want to eventually add a Home Assistant VM to this machine.

Also have a Raspberry Pi 4 running Debian with Pi-Hole and Wireguard VPN. I want to eventually switch this to Proxmox VE with a secondary Pi-Hole VM and a Magic Mirror VM.

Which brings me to the new Protectli. I want Proxmox VE so I can create a cluster. I’d also like the primary Pi-Hole VM on it. I’m unsure if this is even possible but a backup Home Assistant VM that works when I’m working on the main server would be amazing.

So is there an open source router/firewall os that would be best for this scenario?

Or is there anything else I should consider before diving into this project?

  • AspectSpiritual9143@alien.topB
    link
    fedilink
    English
    arrow-up
    2
    ·
    1 year ago

    Whenever people ask for router OS (VM or physical) I’d always recommend OpenWrt. Come with WebUI by default (unlike Vyos) and you can do advanced CLI configuration with familiar Linux utils (unlike *sense), and for most users you really just want to do some VLAN so it is perfectly suitable. A bonus is that you could use the same UI for your router and AP, so even easier

    Generally you will know when your demand is beyond OpenWrt’s capability (usually when you can’t find the required package in opkg), and by then you probably know the answer to this question better.

    • 0x7763680a@alien.topB
      link
      fedilink
      English
      arrow-up
      1
      ·
      1 year ago

      I second this. Openwrt is so fast, I can route 10gbit with half the resources of opnsense/pfsense. It has a nice GUI and has all the features I need.

    • Aroex@alien.topOPB
      link
      fedilink
      English
      arrow-up
      1
      ·
      1 year ago

      Do you know if OpnSense allows you to have the same UI for the router and AP? I’m leaning towards either OpenWrt or OpnSense but still looking into the pros/cons between the two.

      • bubblegumpuma@alien.topB
        link
        fedilink
        English
        arrow-up
        1
        ·
        1 year ago

        What this person means by “using the same UI for your router and AP” is that by installing OpenWRT on both your virtualized wired router and your Wi-fi access points, you don’t have to learn two different web UIs to configure networking. If you have an existing wireless setup that you don’t really want to screw with that doesn’t have OpenWRT already, then that doesn’t really apply.