Hacker News Reader

Comment by kornhole | Hacker News Reader

I was just about to build out a new server with 10G ports and am excited to see this and try these scripts. I do not see any firewall/router scripts for OPNSense or PFSense, but maybe I will build one to add here. Otherwise I see a great inventory and a nicely designed layout of options.

View on HN

I'm confused, this is for proxmox. What are you expecting for firewalls, something that automates the automation you get when launching an iso? Or something that configures the internals of the firewall? Cause that isnt going to be a thing, i think.

Other scripts for OpenWRT and Microtik OS are available here. I assume they are only installing the ISO which you need to configure. After installing OPNSense, I plan to import my existing configuration that I exported from my old box and adjust as needed.

If you want wife acceptance factor put opnsense on stand alone hardware and religiously backup the config. Sucks losing network when your virtual machine host needs rebooting

Even my current stand alone firewall occasionally needs to reboot when I upgrade the SW. I purchased a Qotom that is a beast for the bucks with 10 ports and enough resources to run many other server apps. I expect to only restart VM's when needed rather than the whole box. I am religious about backups with a 3/2/1 strategy that includes a RPI in the shed within WIFI range for nightly backups.

Proxmox gets regular updates thatoften request reboots. It serms at abhigher rate than my opnsense box. Unless you are doing a high availability setup and live migrating it to another nodr, that means additional downtime

Reply on news.ycombinator.com