Hi, it's me again. I like to think that my endless questions help fuel community engagement to feel less bad :sweat_smile:
So like the title says, I'm interested in running an OPNsense router for my home network so I can do better firewall filtering for both security and privacy (ad-blocking, phoning home, etc.) purposes. I found this video by Dave's Garage that talks about running OPNsense in Transparent Filtering Bridge mode. I also researched that it's better to use a switch and APs for any wireless traffic rather than having the router/firewall combo do it, so any hardware suggestions there? Here's info about my network:
- 500 Mbps download and 50 Mbps upload speeds (stick with 1 Gbps ports right?)
- My Proxmox homelab is wired connection only, so I need to use one of the switch ports for it
- We do have a door camera (I pray it's not Ring...), so I should set up VLANs right?
- VLAN ideas: Guests, Family/Home, IoT, Homelab specifically? (any others suggestion VLANs/segmentation???)
- Maybe I'll do selfhosted IoT devices in the future because of this? ~~The homelab must grow~~
- My mom watches a lot of YT on our FireTV, so any guides on what IPs to block for that?
So what Mini PC should I stick with (just 2 ports for WAN & LAN is fine right)? Do I need to avoid any specific brand NICs (do Mediatek cards suck)? What 4-port switch would be good? What wireless AP is recommended? Furthermore, how do you go about running cables in your home? The coax plate that my modem is connected to is literally in the corner of my house. The Wifi is bad in some spots because of this, so we've thought about extenders. But if I do my homelab and have a wireless AP, I can just run an Ethernet cable from the switch to a properly placed AP (I guess I'd need PoE then...) right? My mom is afraid of tripping on wires and while I say to just run them along the baseboard, she's doubting me.
@Imaginary_Stand4909
If you're gonna dedicate the hardware to OPNSense or any other router software, then get something not too expensive. A Raspberry Pi 4 can route and traffic shape a gigabit without breaking a sweat, so you don't need much mini PC just to do routing. N150, N100, N95, or whatever are fine.
If you want to combine functions, running something like Proxmox and putting OPNSense on a VM, then get yourself something more capable, Ryzen 5 or 7 7000 series maybe, 16 GB of RAM
OPNsense doesn't officially support ARM. You need an x86 PC for it unless you want to mess with an experimental build.
OpenWRT does support the Raspberry Pi though. You will want the Pi 5 for that since it has PCIe to connect an ethernet card to.
@Imaginary_Stand4909
Whatever you get make sure it has 2 NICs, and I like to bond them and put them into a LAG on the switch.
Get a managed switch, low end Zyxel is better and more secure than the low end TP-link, the higher end TP-Links are more featureful than the higher end Zyxels.