Re: A FreeBSD-based Router

From: Frank Leonhardt <freebsd-doc_at_fjl.co.uk>
Date: Sun, 06 Apr 2025 10:09:59 UTC
On 05/04/2025 19:02, Martin McCormick wrote:
> We have been using a Netgear wndr3400v2 router since February of
> 2013 and it is probably time to take advantage of newer
> technology especially since there have been no new software updates for
> it in years.

I do this as a matter of course whenever possible, as FreeBSD doesn't 
crash whereas most router appliances do (I sometimes use a Cisco ASA, 
which are okay).

It's really straightforward, and I have a couple of FreeBSD boxes doing 
it along with other tasks, with one in hot standby. So my approach is 
different to the small SBCs.

My favourite box is an HP Microserver GEN8+. For routing they have a 
reasonable pair of Broadcom Ethernet cards built in (Gen8), and space 
for something more powerful if needed. The Gen 10 have very nice Intel 
Ethernet. You can pick up HP Gen 8 Microservers for around £100 on eBay, 
and the Gen 8 are really quiet.

The software is FreeBSD out of the box with BIND and DHCPD added. 
Possibly OpenVPN Stick with the (pre-installed) PF because it just works 
better and is easy to understand, and it handles NAT without messing 
with special kernels. There's also a great book on PF if you want to go 
into it deeper. These have straightforward configuration files and are 
easy to set up.

Is running a whole Microserver overkill? I don't think so because in 
reality it can do so much more - e.g. Mail server, NAS or both. They 
have four drive slots that are SAS compatible if you don't want the 
built in SATA.

It's a different approach, perhaps, but I've been doing it for years on 
several sites and I'd never go back to the plastic boxes. I was fed up 
of phoning someone ask them to "turn if off and on again for me please".

Incidentally, WiFi - it's possible to run AP software on FreeBSD but I 
don't. Proper dedicated WAPs just work better - they have the hardware 
for it and you can position them in the best place.

Regards, Frank.

2E0FJL