OPNsense Forum
English Forums => Hardware and Performance => Topic started by: Joonas42 on March 24, 2021, 04:57:04 pm
-
I have been searching for how to install OPNsense on ARM boxes. I see there are some topics around specific hardware like NanoPi R4S. I'm looking for a guide install OPNsense on any ARM device. Is the process so that I first install FreeBSD on my ARM device and then bootstrap OPNsense on? Does anyone have this guide to share?
Also I have a suggestion for the OPNsense project to have one official release image per version for one ARM device. What I gather from messages that general ARM release is difficult because different u-boot systems on each board. But having official ARM image and support even with just one reference board, would still benefit the whole ARM community by bringing official package/plugin support for all. This way one could get the "official" ARM hardware or figure out the booting for their own hardware.
There are quite many interesting hardware choices for ARM firewall boxes. Just a few
1.Macchiatobin(10Gig ports), Espressobin(cheap), Clearfog GT 8K(many 1Gig ports)
2.Raspberry PI 4 compute module(lot of compute module boards coming with multiple NICs)
3.NanoPi R4S (small, cheap, 6 core CPU)
-
I just got the NanoPi R4S and I’m trying to gather as much information as possible about how to proceed.
-
There are already ready made images available for NanoPi R4S https://mirror.fkardame.com/Linux/Images/FriendlyArm/NanoPi%20R4s/ and discussion here https://forum.opnsense.org/index.php?topic=20332.0
You can also compile your own ARM 64 bit packages and images with tools found here https://github.com/yrzr/tools/tree/preview and more detelais here https://www.yrzr.tk/opnsense-images-for-aarch64/ and discussion here https://forum.opnsense.org/index.php?topic=12186.0
The official OPNsense https://github.com/opnsense/tools/ here don't work on 64bit ARM at the moment on April 2021. The official code seems to refer to 64bit ARM as arm64 and aarch64 mixed in the code and that's why it mostly does not work(should be aarch64). Also some other issues fixed by yrzr. Hopefully YRZR fixes will be merged there some day and we will get official repos like I suggested in the first post.
-
Thanks a lot Joonas42!
-
Hi, is there a list, with supported device?
i need a cheap backup system :)
-
I guess nothing officially supported at the moment. But the YRZR ARM64 code is now 26.7.2021 merged to official code base. So you can compile your own ARM64 based images by following the guide at https://github.com/opnsense/tools
I have the DFrobot carrier board with dual 1Gb PCI NIC's and RPI4 compute module with 8GB RAM trying to get that to work at some point. But I think that still needs the FreeBSD 13 base that is coming in OPNsense 22.1
-
Now that 22.1 is out, how is the status of this?
-
Now that 22.1 is out, how is the status of this?
Building base and kernel for generic ARM64 works without problems. We just ran into some issues trying to build the packages.
I kinda sorted out the latter and am currently building the packages. If all goes well and works on my devices, I will do some PR.
With 22.1 more devices can be supported (theoretically) since the new release is based on FreeBSD 13.
Even though the device configs are not upstreamed yet, writing them should only take a few minutes.
Just to mention, PINE 64, PINE 64 LTS, ROCK64, ROCKPRO64 and RPI 4B should work now.
NanoPI R4S vs R2S were already supported in the previous release, so it's just a matter of building the packages and creating the images :)
-
Any progress on this?
-
Can anyone point me at a working RPI4 22.x build please.
Just to add my RPI4 boots first time with the standard freebsd 13.1 aarch64 image.
Cheers
-
Support for the "Banana Pi R1 Router Board" would be great!
I think, this would be the ideal ARM board for OPNsense!
Any plans in that direction?
-
I'ld love to pack a Raspberry or Banana Pi in my travel-gear to have a OPNsense for WG and alike with me...
Are there any official plans?
-
Just pack an APU4 ...
-
I can buy two of these:
https://www.amazon.com/GL-iNet-GL-A1300-Encrypted-Tethering-Pocket-Sized/dp/B0B4ZSR2PX
that run OpenWRT...
maybe we need to get the OPNsense to use NetBSD for other chipsets... :D
-
What about RockPi-X or Odroid? Has anyone had success with one of these?
RockPi-X suffers from the same limitation as an ARM based Pi: only one Ethernet port. So you have to use USB-Ethernet, which I would rather avoid. Or bring an extra switch and trunk. But then you could just use an EdgeRouter-X or similar ;)
-
sense + ARM -> waste of time and money, as long as the developers don't actively support it. we have to live with that decision by the the dev's as with other (debatable) decisions...
-
What about RockPi-X or Odroid? Has anyone had success with one of these?
RockPi-X suffers from the same limitation as an ARM based Pi: only one Ethernet port. So you have to use USB-Ethernet, which I would rather avoid. Or bring an extra switch and trunk. But then you could just use an EdgeRouter-X or similar ;)
Interesting comment regarding not using USB based ethernet. The testing I did on freebsd on Rpi4 showed the USB3 ethernet adaptor was just as good as the ethernet port which as we all know is not wire speed! But unless you have GB Wan connections more than good enough at about 700mb. If you have GB WAN etc. then you would be using more capable HW anyway.
Admittedly the xBSD ethernet drivers are S**t in general compared to the linux drivers. Running a basic Ubuntu 22.04 server on the rpi4 I could run both the internal GB Nic and the USB3 NIC at wire speed.
No point in escalating to the BSD devs as no one even picks up the reports and acknowledges the drivers have issues so they never make it into the dev pipeline.
-
you just gotta know where to report them. :)
-
Would be sweet if could run OPNSense on one of these (LinkStar-H68K-1432) for $119 ($89 if you don't want/need WiFi).
https://www.seeedstudio.com/LinkStar-H68K-1432-p-5501.html
Processor: Rockchip RK3568 for up to 2.0GHz
CPU: Quad-core 64-bit Cortex-A55
GPU: ARM G52 2EE
NPU: 1 TOPS@INT8
Multi-Media:
4K@60fps H.265/H.264/VP9 video decoder
1080@60fps H.265/H.264 video encoder
Support 8M ISP, HDR
Storage:
onboard 32GB eMMC
1x SD card slot for storage expansion
Operating System:
Pre-installed Android 11 OS
Support Ubuntu, Debian, Armbian, Android, Openwrt, Buildroot
Wireless:
Dual-band 2.4G/5G Wi-Fi 6
M7921E module
NIC:
2x 1G Ethernet NIC RTL8211F
2x 2.5G Ethernet NIC RTL8125B
Video Output: 1x HDMI2.0 interface for 4K output
Audio: 1x 3.5mm four-piece headphones for both input and output
USB:
1x USB 3.0 Type-A
1x USB 3.0 Type-C, capable of storage expansion and 5V power supply
2x USB 2.0 Type-A
Power Supply: operating voltage: 5V~24V DC(12V-1A DC recommended)
recommend: 12V-1A DC
recommend(with additional hardware driver): 12-2A DC
recommend(with Type-C connector): under 5V
Power Consumption: 8W
Operating temperature: -10 ~ 55°C
Dimensions: 80*60*40mm
-
if you got one, you could try NetBSD to see if it boots... :)
-
Several guys are trying to run FreeBSD 14.0 on a similar Rockchip RK3568 NanoPi-R5S board.
This is the first step to getting OPNsense on it.
There are some small successes.
https://bsd-hardware.info/?probe=7c644cc639#Host
-
you just gotta know where to report them. :)
And that would be where?
Cheers
Spart
-
Several guys are trying to run FreeBSD 14.0 on a similar Rockchip RK3568 NanoPi-R5S board.
This is the first step to getting OPNsense on it.
There are some small successes.
https://bsd-hardware.info/?probe=7c644cc639#Host
That would be really great! I have an R5S and this device would be just amazing for OPNsense. Three ports, low power consumption, running cool, what's not to like? So I will stay tuned if this gets OPNsense support.