choosing a NIC for OPNsense

Submitted ⁨⁨1⁩ ⁨day⁩ ago⁩ by ⁨muusemuuse@sh.itjust.works⁩ to ⁨selfhosted@lemmy.world⁩

I’m planning out a proxmox box with an OPNsense VM for an upcoming build. I want to consolidate multiple little boxes into one more capable device.

I was planning on using a dual port NIC that I would passthru to the OPNsense VM. I like the idea of the WAN interface being piped directly to the VM rather than passing through the host and being presented as a virtual device. But that means BSD has to play nice with it and as I understand it, BSD network drivers can be temperamental and intel’s drivers are just better.

I was looking at using a cheap dual port intel 226v NIC for this, but intel’s not in a great place right now so I’d like to consider other options. Everywhere online, people scream “only use intel NICs for this” but I find it ridiculous that in 2025, nobody else has managed to make stable drivers for their hardware in this use case.

What are your experiences with non-intel NICs in OPNsense?

source

Comments

Sort:hotnew top

frongt@lemmy.zip ⁨1⁩ ⁨day⁩ ago
Intel’s current corporate nonsense doesn’t affect the quality of existing products. They will continue to be supported under Linux and BSD for a long time.

source
- muusemuuse@sh.itjust.works ⁨1⁩ ⁨day⁩ ago
  Oh i know they arent going to rip out existing support over this drama, but I really want to cut intel out of things wherever I can anyway. They have been on my shit list for years over corporate assholery. But now if they fail or break up or spin off divisions, the new owners of the networking division could theoretically throw the stability of that line into question so since I’m starting from a clean slate, I’d like to just avoid all that if possible.
  
  source
  - non_burglar@lemmy.world ⁨1⁩ ⁨day⁩ ago
    Just go get any of the enterprise parts from a couple years ago. Mellanox, lucent, qlogic, hpe, these are all fairly well supported by freebsd.
    
    I would avoid Broadcom and Realtek, they are better supported today, but performance is an issue.
    
    source
    -> View More Comments
lightnegative@lemmy.world ⁨12⁩ ⁨hours⁩ ago
I just attached the host NIC to OPNSense and then have a vxlan in proxmox to make the VM network separate from the rest of my home network.

The OPNsense VM acts as a router between the two networks. I host all my shit on the VM network under *.internal.legit.tld and use LetsEncrypt + Traefik to issue SSL certs which work without having to load a CA cert everywhere because I own legit.tld

source
- Cyber@feddit.uk ⁨10⁩ ⁨hours⁩ ago
  Why the MTU change?
  
  source
  - lightnegative@lemmy.world ⁨4⁩ ⁨hours⁩ ago
    Proxmox requires subtracting 50 from the MTU so it can store it’s vxlan information in the packet.
    
    From the docs:
    
    Because VXLAN encapsulation uses 50 bytes, the MTU needs to be 50 bytes lower than the outgoing physical interface.
    
    It’s super annoying but I couldn’t see another way of having vms be able to talk to each other transparently regardless of which node they are on
    
    source
lemming741@lemmy.world ⁨1⁩ ⁨day⁩ ago
I know you’re looking for non-intel solutions but here is my setup-

Mobo r8169 is the management interface for proxmox X710 4 port- 3 ports passed as a a single vmbr for LAN 1 fiber optic to detached building 1 DAC to core switch 1 DAC to workstation 1 port passed as vmbr for WAN

That config was sorta inherited by trying to pass other non-intel nics as pcie and failing. I needed an sfp for the fiber run so I got that 4 port Intel card. It works well enough that I haven’t bothered to reconfigure it to pass the Intel as pcie.

source
BenchpressMuyDebil@szmer.info ⁨1⁩ ⁨day⁩ ago
If you end up backtracking and going with Intel anyway, I225 has plenty of threads about issues on Proxmox, so maybe don’t go with that. I use it too and I needed to set some params in a config file to disable some features so it doesn’t randomly disconnect every few days.

source
LainTrain@lemmy.dbzer0.com ⁨1⁩ ⁨day⁩ ago
Bump. Would also like to know

source
scrubbles@poptalk.scrubbles.tech ⁨1⁩ ⁨day⁩ ago
Intel or no Intel, it’ll be fine. Personally though for your primary router, I recommend you get 10G if you aren’t doing that already. Even if you won’t use it yet, get it now and thank yourself later

source
- muusemuuse@sh.itjust.works ⁨1⁩ ⁨day⁩ ago
  well it’s just for a home network and theres nothing I have that will ever need 10G. I energy consumption is higher and equipment costs are higher on 10G as well. I’ll likely be on gigabit for quite a bit but I’m planning the 2.5G as a compromise for future upgrades.
  
  source
deadbeef79000@lemmy.nz ⁨1⁩ ⁨day⁩ ago
I use several dirt cheap ($20) tp-link branded 1Gig cards, they probably just have a crappy realtek chip.

Absolutely no issues.

But, again, is just a simple home network.

source