Building The "Ultimate" Router - [PFSense + Pi-hole + PIVPN]

Ғылым және технология

For 21 FREE meals with HelloFresh plus free shipping, use code HARDWAREHAVEN21 at bit.ly/3WdgdSU!
FAQ and Concerns:
- Why didn’t I use OPNSense?
I just don’t have much experience with it, but I will try it out later, maybe even before I set this up in my home!
- PFSense can do basically all of those things with other packages; why not do that?
Honestly, I wasn’t aware of all the packages available, especially the experimental ones. But I also like the flexibility of containers and VMs. I can easily swap to OPNSense later without having to set everything else up again if I want for example. Also, software preference is a thing. It doesn’t mean I think running everything bare metal is a bad idea. Quite the opposite!
I built a virtualized router similar to this a while back, but now I'm going to take it to the next level and build my "ULTIMATE" router. Or something along those lines...
#homeserver #pfsense #virtualization
► Proxmox Disk Pass-Thru
dannyda.com/2020/08/26/how-to...
► Installing Realtek Drivers On PFSense:
/ fix_issues_with_realte...
► PIVPN Host Setup:
(This is for Vanilla WireGuard on Alpine, but the host setup stuff is the same)
forum.proxmox.com/threads/pro...
► Seeed Studio Odyssey
www.seeedstudio.com/ODYSSEY-X...
---------------------------------------------------
Music (in order):
"Hardware Haven Theme" -Me ( • Hardware Haven Theme M... )
"The Butterfly Nose" - GARRISON ( / garrison-brown )
"Town Groove" - Me
"CRENSHAW VIBES" - GARRISON
---------------------------------------------------
Gear I Use: (affiliate links)
► Camera - LUMIX G7 amzn.to/3LmfGdk
► SD Cards - SanDisk Extreme PRO amzn.to/3BPXrd1
► Capture Card - EVGA XR1 amzn.to/3Bn8qt7
► Studio Lights amzn.to/3BnYrUd
► Microphone - Shure SM7b amzn.to/3BP0TEB
► Interface - Presonus Quantum amzn.to/3QVeX3T
► Teleprompter amzn.to/3BxcN50
---------------------------------------------------
Timestamps:
0:00 Intro
0:30 Today's Sponsor - Hello Fresh
2:05 What Am I Doing?
6:00 The Hardware
6:56 Assembly Montage
7:48 The Software - Proxmox
8:18 PFSense Setup
11:15 Pi-hole
12:24 Wireguard
14:13 Why I'm Lame
15:08 What Next?

Пікірлер: 433

  • @DIYDaveOK
    @DIYDaveOK Жыл бұрын

    I've been running a virtualized router using an old system called Smoothwall for seven years problem-free. I recently upgraded the whole thing to ProxMox, pfSense, and piHole and it has been fabulous. I've got in-house 2.5Gb over WiFi6 and a 12TB NAS. Even did a video on the server rebuild and install, just have to edit it all down - you and a few other channels were a great inspiration!!

  • @HardwareHaven

    @HardwareHaven

    Жыл бұрын

    Nice! I’ll try to check it out Edit: just realized you said you were editing haha. Let me know when it’s up

  • @HardwareHaven

    @HardwareHaven

    Жыл бұрын

    Also, what’s up my fellow Oklahoman haha!

  • @DIYDaveOK

    @DIYDaveOK

    Жыл бұрын

    ​@@HardwareHaven Really!? That's awesome! In OKC! I swear you were doing your build just as I was doing mine - saw the dates on one of your files was Dec 31. And I went through the same issue on installing the RealTek driver into ProxMox but only after I did the build but before I'd done any real perf testing. The parallels are kinda spooky LOL!!! Hope to get the video edited this week, but it won't be as polished as yours ! And I didn't even think about running piHole as a container. I may redeploy it. 😁

  • @somebody3271

    @somebody3271

    Жыл бұрын

    @@HardwareHaven good video 👍

  • @keithheaton

    @keithheaton

    Жыл бұрын

    @DIY Dave I have not heard of smooth Wall and years back in the early 2000's on a dial-up modem for my network and they have not updated that piece of software and God only knows what software security issues it poses

  • @TheCreat
    @TheCreat Жыл бұрын

    When I was setting up my home lab/servers, I initially virtualized my router (also on Proxmox, on a "normal" x86 platform). Since I was still tinkering a fair amount with the whole (new) system, that meant that every time I did something physical, the internet went down as well. Having VLans and local routing as well means that even things that were still all on weren't reachable either. So I ended up swapping to a dedicated virtualized physical router similar to the one used in this build (Intel N5095 based, running network services only on a proxmox host dedicated to network), but quickly realized it was far more capable than what I needed. So I eventually swapped to a bare-metal, non-virtualized Zima Board (still x86, but more rapi-sized) for my router doing anything network related just via plugins. I'm now very happy with this very low power solution, and I can tinker with the main "lab" all I want without any service interruptions to stuff that isn't rebooted or shutdown. Note that pfSense and OPNsense can do WireGuard and piHole-like DNS services natively (via Unbound or many other options), and virtualization or containerization isn't really needed.

  • @fatlip8315

    @fatlip8315

    12 күн бұрын

    I learned how to burn food. It's not an easy task - with that sole lesson. I learned how to cook, including adjusting the burners and figuring out how to work with different ovens and different ranges, all on how it heats up. Is it fast, slow, when does it start to boil, where does it start to simmer, after it boils, how long until it lowers down to a simmer. Voila. I hope you all have a lesson that can help you learn to cook. Thanks for the video tutorial and infoset in pfSense. I like the PIs for a wide variety of ideas. But, I'm using HP z-Series on legacy Bios, to disable the backdoors. Also learned theirs bios passwords, to the bios backdoors. Might be wrong. Idk much.

  • @Nexus9_KD6-4.8
    @Nexus9_KD6-4.8 Жыл бұрын

    Currently I'm using a traditional (albeit quite high-end) router but I'm using it mostly for its incredible wireless performance and as the network gateway. I've actually offloaded most of its functions onto a Raspberry Pi with the 64-bit Lite OS installed, such as DHCP, DNS, and PiHole and it has been working very well for me thus far. I would love to do this all in one complete solution one day though.

  • @Yuriel1981
    @Yuriel1981 Жыл бұрын

    I'd love to see a video on your full homelab. Setup, machines (truenas server, pf sense router, your and your wife's pcs) a full tour would be awesome! (Time to clean up that cable management lol). Also I just realized you composed your own theme. Very nicely done. Love it. Hope to see your music set up as well

  • @HardwareHaven

    @HardwareHaven

    Жыл бұрын

    I have a mini tour over on the patreon although it's a bit outdated. I keep telling myself I'm going to do a video like that once I tidy everything up, but somehow manage to never get around to the haha! Good idea and I'll definitely try to get to that sometime soon.

  • @snowflakezzonPC
    @snowflakezzonPC Жыл бұрын

    I love these builds. Super cool video and you get to turn a small pc into something incredibly useful for home use.

  • @ChrisMenge
    @ChrisMenge Жыл бұрын

    I really appreciate your honesty during commentary. Great vid!

  • @HardwareHaven

    @HardwareHaven

    Жыл бұрын

    Thanks man!

  • @crownasaurus7412

    @crownasaurus7412

    3 ай бұрын

    He lied to us about Hello Fresh being good though :-(

  • @crimsonkarma13
    @crimsonkarma13 Жыл бұрын

    watching your videos and getting into nas and more technical of the technical stuff has me feeling the same way i have felt when i was just getting into pc's at first i didnt know how it all worked or what the terminology all was but now a pc is the same as legos to me. now i hope to learn everything about nas and whatnot and make my own nas with a pc someday with the help of your videos

  • @jonathanmarshall3974
    @jonathanmarshall3974 Жыл бұрын

    I've been running a Netgear Cable Modem / Router combo since 2015. It's performed okay but I think this video finally gave me the inspiration to go PFSense.

  • @atcaotien9235
    @atcaotien9235 Жыл бұрын

    thank you, watching hardware stuff always feel so interesting!

  • @Treyshadow
    @Treyshadow Жыл бұрын

    Love this. I have been running same Seeed Odyssey for my router, but only for PFSense. This would be a fun modification... You got me thinking, but I already have an ESXi cluster in the house.

  • @RealJustPotato
    @RealJustPotato Жыл бұрын

    That is a pretty nice router you got there, Thanks for the good video!

  • @tigeroats913
    @tigeroats913 Жыл бұрын

    Every new video u make gets better and better and I know it means nothing but I'm so proud of you, and I'm so happy I got to see ur channel grow from the start

  • @HardwareHaven

    @HardwareHaven

    Жыл бұрын

    Thank you! That actually means a ton. 🙂

  • @davidg5898
    @davidg5898 Жыл бұрын

    12:29 You being lame is actually really smart. I did the same when I switched from a "real" router to a pfsense box. I put the pfsense box behind the router and migrated things behind the pfsense box over time. Once everything was behind the pfsense box, it just needed a few WAN setting changes and then I pulled the "real" router from the front of the chain, switched the router to AP mode and put it behind the pfsense box for WiFi connectivity. Since I got my bearings and learned the pfsense settings while just a couple machines were behind the pfsense box, there was no real downtime ever involved.

  • @annix493
    @annix493 Жыл бұрын

    I’m literally doing almost exactly this project right now, and have been really struggling to get my Realtek 8125B 2.5Gbe NICs working, I ended up getting them *kinda* working with PfSense 2.5.2 yesterday, but wasn’t super stoked on having to use older software. Luckily I’ve barely gotten through configuration before coming across this video, so I’m going to re-flash 2.6.0 and try out the package from the Reddit post you linked. Man, my KZread recommendations are usually pretty good, but this? *Chef’s Kiss*.

  • @AD34534

    @AD34534

    2 ай бұрын

    You'd have better luck with Realtek drivers on OpenWrt since it's Linux.

  • @martinbcooper
    @martinbcooper Жыл бұрын

    Nice job. For services like pihole and httpd I switched to Docker containers a while ago, it makes management and backups nice and easy.

  • @HardwareHaven

    @HardwareHaven

    Жыл бұрын

    Yeah, I like docker outside of proxmox

  • @johntheawsomeful
    @johntheawsomeful Жыл бұрын

    Never thought I'd get excited over a router Subscribed lol

  • @macmaniac3080
    @macmaniac308010 ай бұрын

    Nice! Been looking to build a box like this!

  • @valdimer11
    @valdimer112 ай бұрын

    When setting up containers, i find it is good practice to always set up individual software on one container. Its easy for maintenance but its also easier to manage in general because you are not forgetting which container is what.

  • @haonnoah
    @haonnoah Жыл бұрын

    Not sure if it's been mentioned below, but what if you connect the LXC containers to a virtual switch and an extra interface for pfsense to route the LXC traffic without passing through a physical switch. This would force traffic directed to the LXC containers through PFSense (like PiHole) but ultimately would eliminate PFsense from routing from one physical interface to another physical interface to virtual interface in the container

  • @energyboy5696

    @energyboy5696

    Жыл бұрын

    That's the sysadmin way of thinking. Much faster to have containerized, virtual switches when translating network traffic from VM to VM

  • @adrianmurillo2646
    @adrianmurillo2646 Жыл бұрын

    Thats is some clean hardware!

  • @anthonypolsinelli1179
    @anthonypolsinelli1179 Жыл бұрын

    Cool idea, but pfsense has all of this without the need for other VMs. Pi-hole - pfblocker package PiVPN - openvpn or wireguard experimental packages Reverse proxy - ha proxy package Ddns - native Ddns function

  • @HardwareHaven

    @HardwareHaven

    Жыл бұрын

    For sure, and I honestly didn’t know all of those were available. But I think there’s merit in the flexibility that VMs and containers offer. Appreciate the comment!

  • @zeendaniels5809

    @zeendaniels5809

    Жыл бұрын

    Experimental packages on your home router? No thanks. And the pfblocker package is... Let's say too basic compared to piHole. It doesn't do any logging, nor statistics, nor tables and graphs. Sure, if you don't need all that go ahead, but for most people I think piHole is the way to go.

  • @elgavilan2000

    @elgavilan2000

    Жыл бұрын

    @@zeendaniels5809 I've been using the Wireguard package for a while now and it's been rock solid for me. Or if you prefer the OpenVPN package is not experimental. Agree 100% about Pihole vs. pfBlockerNG, although I still use pfBlockerNG for IP blocking.

  • @Badsniperarmy
    @Badsniperarmy9 ай бұрын

    this is all so much for me but I can't wait to learn all this, I have a bunch of old laptops that I know they still have life in them just not as a traditional laptop! Maybe more so as a storage server, security camera service, and router!

  • @JonathanTalksHW
    @JonathanTalksHW Жыл бұрын

    Love that video. I will be building my ultimate pfsense router soon

  • @HardwareHaven

    @HardwareHaven

    Жыл бұрын

    Nice! I definitely wouldn’t go this exact route as there’s probably much better options for hardware haha. Best of luck!

  • @JonathanTalksHW

    @JonathanTalksHW

    Жыл бұрын

    @@HardwareHaven I know, I'm not going to do proxmox. I like to run dedicated machines in terms of routers and pi hole stuff.

  • @anthonyrussano
    @anthonyrussano Жыл бұрын

    thank you. i would like to follow in your footsteps to create a similar setup. i have been using cloudflare tunnels instead of setting up wireguard... but i totally used to run pi hole and pivpn on bare metal raspberry pis and it worked great. i would like to setup those services again as part of my proxmox

  • @jonathanschober1032
    @jonathanschober1032 Жыл бұрын

    One thing you could do, although it’d be a bit more dependent on your router, but you could create a virtual bridge and attach it to proxmox and your pfsense VM, so proxmox would connect via pfsense, and all physical NICs would go to pfsense. Not necessarily a good idea, but an idea none the less

  • @HardwareHaven

    @HardwareHaven

    Жыл бұрын

    For sure! And that would give the benefit of virtio between PFSense vm and host/containers, but I lke the idea of PFSense having direct access to the hardware

  • @bcboncs

    @bcboncs

    5 ай бұрын

    @@HardwareHaven you're the first bare metal firewall person I've come across. I like how you did this virtual and snapshotted for baremetal. Can this same technique be done for usb booting? Did you not have any hardware issues beyond the NIC drivers? I am reading about all these compatibility considerations with freebsd. Thank you and great video!

  • @tylernewton1620
    @tylernewton16206 ай бұрын

    Hello, I am a network administrator and we use pfsense for some customers as a VM on VMware, and it is super stable and reliable. Honestly, it is more reliable than some of our SonicWall appliances. One customer has high uptime requirements, and the primary wan firewall has been up for about a year and no issues. (I know it needs a reboot. Again, high up time customer. Very specific case lol) but I highly recommend turning an old PC into a router if you want a fun project or your router shows inconsistencies or issues. You just need two ethernet ports, and add-in cards can be cheap. I do recommend Intel NICs if you are doing bare metal port forwarding. Non Intel cards can have issues on pfsense

  • @victornecromancer
    @victornecromancer Жыл бұрын

    Good that i can learn from you and the people from the comments that tell about more eficient/alternative ways to do these things. Also have to wait for family to go out to tinker with the network lol

  • @blazini
    @blazini Жыл бұрын

    I have several Seeed Odyssey's. Surprised both onboard NICs work with the M.2 NIC card plugged in, the Odyssey X86's have a hardware bug that kills one on-board NIC when some PCIE devices are plugged into the M.2 port. That said I also have alot of Odroid H2/H3 boards as well. The Odroid's are similar to the Seeed Odyssey but have 2 2.5gb NICs onboard and Odroid makes a "net-card" that adds 4 more 2.5gb NICs for a total of 6. I've been using one as my router for about 2 years now without a hitch. They also have cases that don't require mods for the net-card

  • @sandamalgamage1242
    @sandamalgamage1242 Жыл бұрын

    I love this channel. Thank u shareing your experince and Knowledge with us❤❤

  • @omg-rtfm
    @omg-rtfm Жыл бұрын

    All I would offer as a critique is that pfSense can run OpenVPN so there's no need to separately run piVPN. Having said that, I LOVE piVPN for it's ease of set up, and use of WireGuard for a client. Great system. pfSense and piHole are awesome, love them. Thanks for the video :)

  • @HardwareHaven

    @HardwareHaven

    Жыл бұрын

    Yeah I mention that in the FAQ in description, but thanks for the constructive input and kind words!

  • @dohmarau

    @dohmarau

    5 ай бұрын

    and pfBlockerNG does the same thing as piHole anyhow, so you can run them all on the gateway (I do..) Only thing I use a pi for is GPS based stratum 0 NTP server

  • @Venom2238
    @Venom2238 Жыл бұрын

    I like it, i would like to make one my own too, and thank you for telling us about this, love your project.

  • @CauseOfBSOD
    @CauseOfBSOD Жыл бұрын

    ive personally tried opnsense first, then pfsense i had some issues with opnsense (specifically the freeradius package was broken) but pfsense tends to work better. however pfsense is a bit less opensource than it claims to be

  • @krum1985
    @krum1985 Жыл бұрын

    That looks interesting. I would love to try a similar build myself at some point. I think I would use Bind instead of PiHole for my DNS though 😄

  • @Se9n.

    @Se9n.

    Жыл бұрын

    PFsense has a blind service and a wire guard service so separate containers wouldn't be needed

  • @SerpentDrago

    @SerpentDrago

    Жыл бұрын

    Already in pfsense no reason for separate

  • @AshiqurRahmanpothik
    @AshiqurRahmanpothik6 ай бұрын

    So nice !

  • @milktoastgregg
    @milktoastgregg9 ай бұрын

    hahaha I raised my eyebrow real hard when the QR for your wireguard access token popped up on the screen... very clever!

  • @HardwareHaven

    @HardwareHaven

    9 ай бұрын

    Hahaha I’m a bit surprised at the lack of comments I’ve seen on that. Hope you got a chuckle

  • @Quettesh
    @Quettesh7 ай бұрын

    I was running similar setup, but it was too much hassle to tinker with it and even my current Mikrotik AX3 is way easier to maintain while running Pihole and Unboud in the container direactly on it. I haven't noticed any performance diffrenece. Another advantage is decent wifi coverage which AX3 has. Power consumtion is also way lower.

  • @JavierChaparroM
    @JavierChaparroM Жыл бұрын

    Love your videos sir!!

  • @HardwareHaven

    @HardwareHaven

    Жыл бұрын

    Thanks Javier!

  • @moosematrix
    @moosematrix Жыл бұрын

    I just heard about using Pfsense & Pi hole recently and I want to emulate this project!!

  • @Casper042
    @Casper04211 ай бұрын

    This feels like a BUNCH of work that just isn't needed. Pickup a Lenovo Tiny M720q, which has an optional PCIe slot where you can drop in a 2nd NIC (I have a 4x1Gb in mine) Run the onboard NIC for the Hypervisor and pass through the entire PCIe NIC into the pfSense VM. You ARE limited to 1 x NVMe M.2 drive for storage with this design however. You can do a M720x instead which has Dual NVMe M.2 if you really want a dedicated pfSense drive. If you do this, look into the 32GB Intel Optane M.2 drive. pfSense doesn't need much storage and these are wicked fast. Anyway, no soldering, no weird adapters from Ali Express, and you can get up to 6 cores if you get the 8600/9600 or higher CPUs.

  • @PeytonGaming526
    @PeytonGaming5267 ай бұрын

    Bro, wdym goofy? It's a work of art I love it!

  • @xellaz
    @xellaz2 ай бұрын

    Pretty neat router you got there! I recently just added a 2nd Wireguard VPN on my Pi5 as a backup for those public wi-fi areas that doesn't allow you to connect using the default 51820 port. I have it running on a docker container and everything is running great after a few tweaks. My main router is a Firewalla Gold Plus that is also a hardware firewall and has tons of features. It also has a built-in Wireguard/OPVN and ads & telemetry blocking features. I'm still curious to run Pi-Hole with Wireguard on my Pi5 though and I'm having a little trouble with that on my network. I was able to successfully run Pi-Hole on another docker container and even have it running on https complete with SSL certs using NGINX proxy manager but when I use it as my DNS on my Wireguard on my Pi5, there is no Internet. I see the traffic being blocked though by Pi-Hole and all the stats in the Dashboard are running. I think I need to forward the traffic correctly but time is limited and I'll try to troubleshoot that on another time. 😮‍💨

  • @angrynerd2103
    @angrynerd2103 Жыл бұрын

    This comment section is definitely full of alternatives but if you want a few more, a useful alternative to pihole is adguard home. Does basicslly the same thing but it supports service based and regex based blocking. Additionally you can use unbound, either built into pfsense or installed in a vm or container. It allows for recursive dns lookups so you dont need a middle man like cloudflare and it offers great caching and speed.

  • @HardwareHaven

    @HardwareHaven

    Жыл бұрын

    Yeah, I should've at least talked about unbound. I think I cut too much to try and keep the video from being too long. Thanks for the input!

  • Жыл бұрын

    Always nice to have more control over router and clans ect. But setting up iptv from the ISP can be a pain to setup properly. I noticed myself doing so. IGMP needs to be enabled or other protocols, depending on how your ISP handles iptv. And you don't want to piss off others in the household. 😋 Going fiber is also a different challenge depending on compatible hardware.

  • @cyberpunk9487
    @cyberpunk9487 Жыл бұрын

    This is cool. I used XCP-ng when I virtualized my router because you don't need to passthrough the nics you just assign the lan and the wan ports to the vm xen routes the traffic from the physical to the virtual

  • @marcosscriven

    @marcosscriven

    Жыл бұрын

    Curious what the virtual drivers the hypervisor emulates though? Generally those can give very poor performance given the BSD based of pfsense.

  • @yushk19
    @yushk19 Жыл бұрын

    Great vid! I've been watching a few of your videos and really enjoying your music as well(Town Groove is a bop!). Any plans on releasing any of these?

  • @Dave-cx1tz
    @Dave-cx1tz Жыл бұрын

    Brilliant

  • @jokroast6912
    @jokroast6912 Жыл бұрын

    I'll be waiting for the followup

  • @pepeshopping
    @pepeshopping Жыл бұрын

    Cool project box but you better have a backup one for when the main goes down. For quite less that price, you can get a fully enclosed device with same cpu and 4 Ethernet ports, ready to go.

  • @Stev.3n
    @Stev.3n Жыл бұрын

    Same camp with the swap lol. Still running the old Unifi USG-3P even after I've started getting a pfsense box ready and have been doing some testing. It's currently been good and I have other Unifi gear, dynamic DNS and OpenVpn access server but I've considered switching to wireguard.

  • @HardwareHaven

    @HardwareHaven

    Жыл бұрын

    Oh nice! Good luck!

  • @alejandroglfm
    @alejandroglfm3 ай бұрын

    Great videos Colten!! what about using tailscale on an lxc as an exit node for tailscale and also allowing LAN??

  • @Tekgnome.
    @Tekgnome. Жыл бұрын

    I just built my firewall out of an old recycled Lenovo system with an i7 4770, threw in 16gb of ram, a 128gn boot SSD and a 10gb SFP+ card. I shoved it all in a 2u chassis and it's pretty solid for the age of it.

  • @HardwareHaven

    @HardwareHaven

    Жыл бұрын

    Sweet!

  • @BrianSimmons

    @BrianSimmons

    Жыл бұрын

    What's the power usage? I suspect buying a more modern power efficient device would actually save money in the long run. It's definitely something you need to consider when determining what devices to use.

  • @hotrodjones74
    @hotrodjones74 Жыл бұрын

    The blackhole router. Cool shit broski!

  • @JordanPlayz158
    @JordanPlayz158 Жыл бұрын

    4:55 interesting use for pi-hole, PFSense (or at least OPNSense) actually comes with Unbound DNS which I use personally that supports what you mean, it is under DNS Overrides tab and you can do exactly what you described.

  • @rageburst
    @rageburst Жыл бұрын

    Can I request that you can provide links to get the adapter, the computer case component, and the NIC? It helps to buy the exact thing since you've done a proven proof-of-concept. Also, I want to thank you for showing us this awesome build.

  • @LeoLijo
    @LeoLijo Жыл бұрын

    Really cool

  • @HardwareHaven

    @HardwareHaven

    Жыл бұрын

    Thanks Leo!

  • @TheKd4lyfe
    @TheKd4lyfeАй бұрын

    I think I may go this route, proxmox, pfsense, pi-hole, VPN, home assistant, NAS. Sick of my current router dropping out

  • @siwiskate
    @siwiskate10 ай бұрын

    Awesome video! I quite liked the idea of being able to boot from the passthrough drive in case something happens to Proxmox. In fact, I was trying to replicate it, moving my currently virtualized OPNSense to a spare drive, and realised something... If the EFI Disk lives in the LVM/ZFS Proxmox pool, would one still be able to boot from the OPNSense drive, bypassing Proxmox?

  • @HardwareHaven

    @HardwareHaven

    10 ай бұрын

    Hmm.. not sure

  • @emilemouannes2236
    @emilemouannes2236Ай бұрын

    I was wondering how to do you access your proxmox web interface from? Did you connect the proxmox lan bridge to the pfsense lan physically or virtually? Or are you accessing your proxmox web ui from your other router and on a different network?

  • @xpatrikpvp
    @xpatrikpvp Жыл бұрын

    the dedicated ssd for pfsense is a great idea

  • @OspreySoul
    @OspreySoul9 ай бұрын

    I only understand the surface-level of the features that you discussed here, but I would love to build a router like this with a built-in VPN and PiHole. Would you recommend a beginner just stick to PFSense for those features if they don't feel the need to separate it onto a VM?

  • @Rob-dd3mn
    @Rob-dd3mn Жыл бұрын

    I have seen those dual 2.5g nics on Aliexpress before, as you know a 2.5g nic can operate at 5gb in full duplex mode if transferring files from machine to machine over the lan. With 2, that's 10gbs worth of bandwidth. Can the PCIE interface support that much speed?

  • @spiritvateme
    @spiritvateme11 ай бұрын

    Thats super sweet quick question can i put my phone tu run okta an dpoint it to read different location

  • @CaHeoMapMap
    @CaHeoMapMap Жыл бұрын

    you are pro!

  • @juliang3439
    @juliang3439 Жыл бұрын

    looks like i found my next project. cheers bro ill sub to that!

  • @HardwareHaven

    @HardwareHaven

    Жыл бұрын

    Thanks! I’d probably use different hardware though haha

  • @juliang3439

    @juliang3439

    Жыл бұрын

    @@HardwareHaven i have some "old" office desktops and a pi 4 collecting dust, i think i can set something up with those hahah

  • @HardwareHaven

    @HardwareHaven

    Жыл бұрын

    For sure!

  • @datboi8140
    @datboi81405 ай бұрын

    do you need to have that specific seeed board with the RP2040 raspberry pi chip for this, or can you use older seeed model 4105 = ATSAMD21 chip?

  • @fotografm
    @fotografm Жыл бұрын

    Great video. I play with such things quite a lot. Is there a reason why you used iommu pass through instead of just making network bridges to the network card ?

  • @HardwareHaven

    @HardwareHaven

    Жыл бұрын

    Really just for more separation between proxmox and PFSense in case things go south. If I need to boot the PFS drive bare metal, I shouldn't have to load drivers or anything, and the interfaces SHOULD populate correctly. At least they did when I tested it.

  • @HardwareHaven

    @HardwareHaven

    Жыл бұрын

    Also not sharing any bandwidth if I were to run anything more data heavy using the network bridge

  • @davidbeesley5076
    @davidbeesley50763 ай бұрын

    QR Code did not disappoint

  • @carlosdantenicolasdelafuen1293
    @carlosdantenicolasdelafuen1293 Жыл бұрын

    👏👏👏 Gracias 👍

  • @JoJoJenkns
    @JoJoJenkns Жыл бұрын

    What connecters are you using on your bottom NIC. That thing lights up the whole LAN connector likes it is a Christmas tree, or is they just the angle of the camera?

  • @devincurrie4145
    @devincurrie4145 Жыл бұрын

    Would help to say the expected price point to build such system. What about using OPNsense instead as I heard that pfsense does not receive updates often? I still have an old Apple AirPort Extreme router, which I haven’t use for years. Any chance I can hack into it by installing third party software replacing Apple’s software? Or better to build new hardware?

  • @HardwareHaven

    @HardwareHaven

    Жыл бұрын

    As far as price, I’m not really sure. I probably wouldn’t recommend the exact route I went as there are pretty affordable dual/quad NIC mini PCs on the market that would probably be a wiser choice. As far as hacking the AirPort Extreme, you’re on the wrong channel😂 Seems like a super cool idea, I’m just not smart enough to give any advice

  • @shinigamiauthor
    @shinigamiauthor5 ай бұрын

    As a graphic designer, this all makes my mind melt..... but I love your content anyway

  • @HardwareHaven

    @HardwareHaven

    5 ай бұрын

    Because of the complexity of the topic or because of the terrible graphic design? Haha

  • @shinigamiauthor

    @shinigamiauthor

    5 ай бұрын

    @@HardwareHaven complexity

  • @HardwareHaven

    @HardwareHaven

    5 ай бұрын

    Haha gotcha. Both would’ve made sense 😂

  • @ichilvers
    @ichilvers Жыл бұрын

    Are there any throughput stats on this as a working router? So it can be compared to a Draytek router for example.

  • @rethinking3289
    @rethinking3289 Жыл бұрын

    you can save more resources by using pfblocker on pfsense itself instead of pihole. Its the same with more features.

  • @UloPe
    @UloPe5 ай бұрын

    For just local DNS resolution you don’t need pihole. Pfsense has that built in. And it may actually be counterproductive not to use the pfsense one since you loose the automatic registration of dhcp client names in the dns namespace.

  • @swordfish6975
    @swordfish6975 Жыл бұрын

    It's possible to do it all on one nic using a managed switch (I have the unifi 5 port), you just have to use vlans. It's how I have my network setup right now, proxmox with OPNsense.

  • @HardwareHaven

    @HardwareHaven

    Жыл бұрын

    Yep, but I don't want to do that if I don't have to.

  • @obvionaoe
    @obvionaoe Жыл бұрын

    You should look into Ansible in case you haven't used it before :)

  • @Quietcold007
    @Quietcold007 Жыл бұрын

    Do it! Just Do it!

  • @Subgeta
    @Subgeta Жыл бұрын

    What about ventilation? Does it get hot? Over heat c/would be an issue. How is it running after 4mo.?

  • @haydenc2742
    @haydenc2742 Жыл бұрын

    I prefer OPNSense, it is updated MUCH more often, and natively supports zenarmor, plus it works with MANY more nics types than PFsense, I have both, but prefer OPNSense Either way, Love that you have it setup on PROXMOX and I too have mine setup the same way, pihole, and pivpn on a separate debian install in my PROXMOX box Great howto, great build! Keep em coming!!!!

  • @HardwareHaven

    @HardwareHaven

    Жыл бұрын

    Thanks! And opnSense is definitely on my “try it out” list.

  • @athstreamsandmore
    @athstreamsandmore Жыл бұрын

    Virtualizing these services, how does ram utilization work with Proxmox?

  • @kolverttresd1068
    @kolverttresd1068 Жыл бұрын

    Nice content. :)

  • @HardwareHaven

    @HardwareHaven

    Жыл бұрын

    Thanks! 🙂

  • @franzpleurmann2585
    @franzpleurmann2585 Жыл бұрын

    I recently switched back to pfSense on bare metal because it is quite complicated to configure VLANs on a linux network bridge if you cant passthrough two dedicated nics.

  • @HardwareHaven

    @HardwareHaven

    Жыл бұрын

    Yeah, as cool as VLANs can be... I have a painful history with them lol

  • @bcboncs

    @bcboncs

    5 ай бұрын

    Have any recommendations for how that hardware and base os design looks with pfsense on bare metal?

  • @stevene_
    @stevene_ Жыл бұрын

    im after a 1 stop box that can connect to vdsl via pstn (here in Australia most of our net comes from vdsl) and would rather not have an extra modem. any suggestions on hardware to do it all?

  • @4856294zeeshan
    @4856294zeeshan10 ай бұрын

    Hi, we have captive portal networking in our building with radius server and voucher system, to access the internet each user have to purchase its own voucher, In our area internet is very expressive so plz tell us how can we use a router to login in to this network using single voucher and using router as a bridge to connect other 5 smart phones, and please also tell us which router is suitable for this type of networking Thanks

  • @gordr8024
    @gordr80247 ай бұрын

    What through put are you getting with this will it do gig-bite through put from isp to network

  • @MrRolloTamasi
    @MrRolloTamasi Жыл бұрын

    Built something similar here with a N5105 + 4 x 2.5 G eth ready made system with passive cooling. IMHO a quite solid base for a small network centric VM host. Where there specific reasons you opted for a more diy approach?

  • @HardwareHaven

    @HardwareHaven

    Жыл бұрын

    I had the parts on hand and it was fun. There is absolutely no other reason haha. well, I guess the extra SSD to boot bare metal was kinda cool, but I imagine some other machines offer that as well

  • @agoddamnferret
    @agoddamnferret Жыл бұрын

    do you have any good links to the seeed box you were running and any of the other hardware?

  • @HardwareHaven

    @HardwareHaven

    Жыл бұрын

    No not really, and I’d probably look into some of the dual or even 4 NIC mini PCs on Amazon and such instead. The odyssey is a lot of fun for projects it a bit expensive

  • @Cyhawkx
    @Cyhawkx6 ай бұрын

    Your link to the Shure SMB7 is wrong in the description, takes people to their orders ;)

  • @DomtronVox
    @DomtronVox Жыл бұрын

    Question about the hardware. I really like this and want to build it for my own network. I've tracked down all the hardware you used in the video, except I'm having a little trouble finding the M.2 to dual NIC card. The normal places I buy don't have anything like it, or it's $70+. I tried finding exactly what you bought on aliexpress and found something similar, but it has slightly different information on the page then what you showed in the video at 3:51 (price, rating, number of orders). Could you tell me what the company name was for the card you bought or even better just directly link it? (sorry if you already linked it, I've double checked and didn't see it anywhere in the description, video, or comments.) I've not used aliexpress before and am a bit worried I'm going to buy a bad product.

  • @HardwareHaven

    @HardwareHaven

    Жыл бұрын

    I believe this is the one www.aliexpress.us/item/3256804012790087.html?gatewayAdapt=glo2usa4itemAdapt&_randl_shipto=US also check out the LinkStar h68k from Seeed. It's arm based, but runs openwrt really well and that can run docker. I'm in the process of making a video on it, so I haven't had time to really test it out, but worth a look for sure! Even has built in WIFI so you don't need another access point

  • @claytevebaugh1100
    @claytevebaugh1100 Жыл бұрын

    I thought the blue boxes of this case looked a lot like electrical boxes. Now I want to build a pc in electrical boxes.

  • @fastshuther
    @fastshuther9 ай бұрын

    You should of cut the extra screw length popping out of the diy shield, just in case it doesn’t make ground somehow

  • @JMassengill
    @JMassengill Жыл бұрын

    Rather interesting. I have some 8 bay sata drive devices. Some of these configs might help make it more flexible. you are not lame, i have a bare metal opnsense PC made and it operates great but i haven't put it in use I want to redo the network wiring in my house and everything network related would have to move (and I have IP related issues i have to work out also).

  • @HardwareHaven

    @HardwareHaven

    Жыл бұрын

    I hope so!

  • @bcboncs

    @bcboncs

    5 ай бұрын

    Hey opnsense on bare metal is exactly what I want to achieve. Did you adhere to the freebsd hardware requirements for this or did you finagle another way to get this working? What Base os did you use? I want to have proxmox and docker underneath the bare metal firewall layer. Thank you in advance!

  • @KlausDieter764
    @KlausDieter764Ай бұрын

    Why not using the wireguard that pfsense already have?

  • @FallenAngels97
    @FallenAngels97 Жыл бұрын

    Do you have a link to the sata cable? So I can try it on my ASRock mb

  • @crimsonkarma13
    @crimsonkarma13 Жыл бұрын

    im new to all this but turning your pc into a router sounds amazing, and with you changing your router entirely, what do isp say about doing that?

  • @HardwareHaven

    @HardwareHaven

    Жыл бұрын

    I still use the modem provided by my ISP, it’s just that the router is now behind it

  • @lo0ops
    @lo0ops Жыл бұрын

    Bit odd. What font is used in the chapter titles? Loving your work.

  • @HardwareHaven

    @HardwareHaven

    Жыл бұрын

    consolas

  • @a9503128
    @a95031288 ай бұрын

    I’m confused, by the time you put all the hardware together it’s the same cost as a Protectli Vault 4 Port 🤷‍♂️ and the VPN and DNS filtering with PfSense native?

  • @andrewsontop
    @andrewsontop3 ай бұрын

    does this need an existing router to make pfsense make a 2nd router or pfsense is the router and doesnt need any existing ones? cuz i changed home and idont have router but i have a raspberry pi

  • @En1gma3069
    @En1gma3069 Жыл бұрын

    Well, what about 10G network cards? Can you do that with an m.2 nvme?

  • @sarundayo
    @sarundayo Жыл бұрын

    A top LCD for moitoring and pretty display would have been the cherry on top. Wouldn''t even need a monitor to see what's the deal inside.

  • @HardwareHaven

    @HardwareHaven

    Жыл бұрын

    Yeah that would be pretty sweet… I bet something could be rigged together especially with the GPIO

Келесі