I run Opnsense on a Proxmox VM (I followed this guide). I’m quite pleased with it. Opnsense is probably going to be more secure than any consumer router firmware, but you’re going to have to make a bigger upfront investment in hardware. I had never used Opnsense prior to using this system, and the fact that I’m running it on Proxmox is a huge benefit. If I’m ever about to do anything I’m unsure of, I can snapshot the VM in Proxmox. If my router config breaks as a result of my tinkering, I can easily restore from the snapshot.
I definitely don’t need the SATA ports. I have a vision of putting this board in a 1u chassis. I’m sure AliExpress also has a 1u version of this hardware…
Good tip. I’ve definitely looked at the Fujitsu boxes. However, I’m located in the US, and Fujitsu never sold those in the States, so they’re hard to find. The shipping fees from the EU seem to be in the $50-$90 range, which eliminates any cost savings.
[This Topton-brand mini-ITX motherboard on AliExpress](https://m.aliexpress.us/item/3256804571639255.html) seems like a pretty decent choice for an Opnsense/Pfsense-based home router setup. It has four Intel 2.5gbe ports, an integrated 10W TDP CPU, and way more storage options than necessary for my use case.
However, I’m leery of just about everything from AliExpress. In this case, I assume security is probably a distant consideration after function and price point.
Am I being overly paranoid? Are products like this riddled with back doors and other exploitable components? Has anyone else out there built a router using this board?
I run Opnsense on a Proxmox VM (I followed this guide). I’m quite pleased with it. Opnsense is probably going to be more secure than any consumer router firmware, but you’re going to have to make a bigger upfront investment in hardware. I had never used Opnsense prior to using this system, and the fact that I’m running it on Proxmox is a huge benefit. If I’m ever about to do anything I’m unsure of, I can snapshot the VM in Proxmox. If my router config breaks as a result of my tinkering, I can easily restore from the snapshot.