Messages

more screenshot

It should work, see:

https://forum.opnsense.org/index.php?topic=12186.msg94969#msg94969

OPNsense on NanoPI R4S

Hi,

for those of you who managed to build an aarch64 image (e.g. for the NanoPi R1): Which FreeBSD version did you use for compiling and which OPNSense version (20.1 or 20.7) did you build? I tried to build 20.1 using FreeBSD 12.1 and failed.

Built natively on FreeBSD 13.0-CURRENT on NanoPC-T4.

Info about R2S with dual proper gbit has started to surface:
http://wiki.friendlyarm.com/wiki/index.php/NanoPi_R2S

But its not on their shop yet.

How feasible would it be to build for this? Seems like it uses Rockchip instead of Allwinner.

2 things needed, we need proper u-boot and if_ure needs support for rtl8153b chipset. On u-boot side rock64 u-boot can be used for testing. At least thj@ and ganbold@ (me) from FreeBSD developers have this boards so I hope we will make something workable, but hard to tell when it will be done.

As for IDS/IPS, suricata doesn't run yet on arm64 hardware.
loos@ said espressobin v7.2 is recommended once they are released.

You can stay with your PC if your usage is so heavy that it can't run on devices.

pfsense works on this device:

https://www.netgate.com/solutions/pfsense/sg-1100.html

As for OPNsense, you can try my image (it is not official one):

https://people.freebsd.org/~ganbold/OPNsense-201912171639-OpenSSL-arm-aarch64.img.xz

It works for me on espressobin.

Network wise either espressobin or machiatobin is better. IIRC, espressobin is cheapest OPNsense also works.

The image is at:

https://people.freebsd.org/~ganbold/OPNsense-201912171639-OpenSSL-arm-aarch64-nanopi-r1s-h5.img.xz

It is preconfigured, so better set it to default and start the configuration as needed.

OPNsense 20.1 works on Marvell Armada 3720 Community Board ESPRESSOBin v4 arm64 board:

https://dmesgd.nycbug.org/index.cgi?do=view&id=5266

Second ethernet is via USB so not so good performance:

https://people.freebsd.org/~ganbold/iperp3-nanopi-h5-r1s-ure.txt

awg0 has:

https://people.freebsd.org/~ganbold/iperp3-nanopi-h5-r1s-awg.txt

Above are done in FreeBSD current. So for home use maybe it is ok but for other cases it depends.

Was able to run OPNsense 20.1 on NanoPI R1S H5 version of board.

Was able to build OPNSense 20.1 (FreeBSD 13.0-CURRENT) and run on NanoPI-R1S-H5 board.

[$10 orange pi one]

I'm waiting already a couple of years... one more... one less isn't that hard :P

But even with a usb network card the raspberry will still be the shitiest thing for networking (all 4 usb and the internal mac shared in one(!) physical usb hub). For i/o - specially for network this is probably the worst case design flaw. Even a $10 orange pi one with a allwinner h3 is kicking the raspberries away in terms of network throughput simply because the ethernet and usb port's are not shared. Sadly it looks like there is no future for the h3 boards with opnsense  :(

check out nanopi-r1, RPI0,1,2,3 is not a really for router/firewall.

And that fixed it... :)


Now just the wifi to sort out.

There is no driver yet for wifi unfortunately.