Comment on Setting Up OPNsense on Proxmox: Doubts regarding NIC setup
possiblylinux127@lemmy.zip 2 days ago
I personally would not recommend this setup as any issue with your proxmox cluster will turn into a network issue.
Instead, I would purchase a cheapish router that can run OpenWRT. If you are dead set on OPNsense you can find x86 boards from various vendors or you can make a dedicated router out of a network card and a small form factor computer
Yeah, I did it briefly to test if I wanted to use it before getting a dedicated Protectli Vault. But gateway and NAS are both things I recommend not running on Proxmox long term.
Router - for one you can’t form a quorum for a cluster if there is no network so you’d have to physically access the box every restart.
NAS - You lose access to any backups you’re doing and ability to restore if that node fails.
To play devil’s advocate, technically don’t need a router for network. Your Proxmox hosts should be in the same layer 2 which means they can communicate regardless of the state of the default gateway.
Networking isn’t my forte but I thought IP addressing required layer 3 switching? Which is going to be dependent on your switch supporting it.
IP resolution requires ARP/NDP which are layer 2
Agree - critical infrastructure should have as few dependencies as possible.
xavier666@lemmy.umucat.day 2 days ago I understand completely. But I will try my best to keep the Proxmox setup as stable as possible (no unnecessary fiddling/power backup). This is mostly an experiment. I have my old router as backup as well. I just wish I had the foresight to buy a router which had OpenWRT support :(
I’ve been doing exactly this for the past 5 years or so.
It’s been pretty stable and reliable.
I went with the PCI passthrough method
I own 2 OpenWRT routers. Fun little things. Love em.
But running a virtual firewall is a perfectly reasonable goal. OpenWRT doesn’t have the feature set that OPNsense has.
They are not the same sort of product. Lot of common ground, but not the same thing.
possiblylinux127@lemmy.zip 2 days ago
OpenWRT has a zone based Firewall just like OPNsense does. Sure it isn’t as clean but I don’t really see a usecase for OPNsense that OpenWRT couldn’t fulfill