For years, I have had an all UniFi (router/firewall, switches and access points) system for my home Unraid network.  It was a long time before Ubiquiti replaced the USG 3P (small form factor) with something more powerful.  They recently released the UXG-Lite which I bought to replace my old USG 3P.  Still, the UXG-Lite has only GbE NICs which is fine if your Internet speed is Gigabit or less.  At least the UXG-Lite can take full advantage of the speed with IDS/IPS enabled.  The USG 3 choked on that.

 

At the urging of @PeteAsking, I thought I would give OPNSense/Zenarmor a try as the router/firewall in my network.  Why not, I like to play around.  I purchased this mini PC based on an Intel N100 CPU with 8GB RAM and a 256GB PCIe SSD from AliExpress.  It has four Intel I226-V 2.5 Gb NICs,  I don't need that speed now as my infrastructure and ISP speeds are Gigabit.

 

What I like about the Ubiquiti UniFi setup:

1.  Everything managed and viewed in the same controller interface
2.  More intuitive configuration of things like static routes, port forwarding, static IP addresses, etc.
3.  Good overall design, organization and navigation of controller software
4.  Very active and helpful support forums (sometimes that is necessary)

 

What I like about OPNSense/Zenarmor

1.  Clearly, there is more control over security, traffic filtering, routing rules, etc.  I am just scratching the surface and everything is mostly at defaults right now.
2.  For open source, free software, It has a decent interface although I found it somewhat difficult to find certain configuration options
3.  Good documentation and Google finds good third-party OPNSense tips as well

 

I am very early into this OPNSense/Zenarmor journey and have a lot to learn, but, overall, I am liking it so far.  I have successfully setup necessary interfaces, VLANs, DHCP, port forwards, static routes, static IP addresses, etc.  As I said, just scratching the surface I suppose.

 

 

Edited January 15, 20242 yr by Hoopster

If you need any help just let me know. It can basically do anything you can want. 

It's been a while since I had Unraid as a server.

I keep looking back and sometimes miss the simplicity of it.

The advantage of Proxmox is that the VMs and LXCs automatically take over the IP from Opnsense.

Now I wanted to ask, do the containers now also get the iPs from the DHCP server or is everything still entered manually?
Kind regards
 

21 hours ago, fiR3W4LL said:

do the containers now also get the iPs from the DHCP server or is everything still entered manually?

The way I have docker containers setup is to have an IP address on a VLAN with a different subnet than the Unraid server.  When that was setup, the VLAN DHCP range for Docker containers needed to be different than any DHCP range I had setup for that VLAN on my router/firewall.  It was pointed out to me clearly this needed to be this way since Docker DHCP does not communicate with the router DHCP server.  They are separate.

 

I do not know if this limitation still exists (I assume it does) as I still have the orignal separated DHCP configuration.  In fact, I assign docker containers their IP address manually on the VLAN subnet rather than letting DHCP take care of it.  br0.3 is my Docker container VLAN and I have not defined a DHCP pool for it.

 

On 1/17/2024 at 2:32 PM, PeteAsking said:

If you need any help just let me know. It can basically do anything you can want. 

Can I take you up on this offer? Having roughly the same issue and am unable to get this thing working properly...