[Work In Progress] OPNsense Ported into ARM Devices

[marjohn56]

You can try https://people.freebsd.org/~ganbold/OPNsense-201903201231-OpenSSL-arm-armv7-nanopi-r1.img.xz

Thanks, will give it a go at the weekend.

[pnewb]

You can try https://people.freebsd.org/~ganbold/OPNsense-201903201231-OpenSSL-arm-armv7-nanopi-r1.img.xz

Working just fine so far.  No interface for wireless, but it boots, recognizes wired/wireless, and otherwise seems to function great.

[marjohn56]

Not for me sadly, awg0 works fine as LAN or WAN, but ue0 does not work as either LAN or WAN, rather odd as I can see it when I netscan, and it has the correct address, but I cannot ping to it or ping from it to any client. If I reverse the assignments then LAN works but WAN doesn't. Any ideas?

[tsgan]

Not for me sadly, awg0 works fine as LAN or WAN, but ue0 does not work as either LAN or WAN, rather odd as I can see it when I netscan, and it has the correct address, but I cannot ping to it or ping from it to any client. If I reverse the assignments then LAN works but WAN doesn't. Any ideas?

Try to set ue0 in promisc mode and configure IP address if needed. That way it works.

[marjohn56]

And that fixed it... :)


Now just the wifi to sort out.

[tsgan]

And that fixed it... :)


Now just the wifi to sort out.

There is no driver yet for wifi unfortunately.

[NetGobbler]

Hi all,

I'm curious how the progress is coming along.

I posted maybe a year ago, I got the impression we were, about a year away.

This thread looks nice and active.

Do we think in the coming 3 to 6 months we may see a simple "download this image, burn to SD card and pop in the Pi, you're good to go" kind of situation?    It certainly seems mostly promising anyhow.

Bear in mind, I'm not foolish enough to expect it to operate on a 1Gbit internet line, but in my country, even just handling 25Mbits is probably more than enough.

Thanks all (and keep up the wonderful work)

[franco]

Long story short, the image for RPI-2 is here https://pkg.opnsense.org/FreeBSD:11:armv6/19.1/OPNsense-19.1-test-OpenSSL-arm-armv6-RPI2.img.bz2 and there might be an update before 19.7 but we have no plans to make 32-bit arm officially supported with rolling binary updates.

There's tools.git for everyone who wants to build a certain ARM device:

https://github.com/opnsense/tools#cross-building-for-other-architecures


Cheers,
Franco

[orangana]

Long story short, the image for RPI-2 is here https://pkg.opnsense.org/FreeBSD:11:armv6/19.1/OPNsense-19.1-test-OpenSSL-arm-armv6-RPI2.img.bz2 and there might be an update before 19.7 but we have no plans to make 32-bit arm officially supported with rolling binary updates.

There's tools.git for everyone who wants to build a certain ARM device:

https://github.com/opnsense/tools#cross-building-for-other-architecures


Cheers,
Franco

Any news/ideas about a raspberry pi 3 image or for a orange pi?

[franco]

There is no workable RPI3 support in HardenedBSD 11. We can add it when we are on HardenedBSD 12.


Cheers,
Franco

[NetGobbler]

There is no workable RPI3 support in HardenedBSD 11. We can add it when we are on HardenedBSD 12.


Cheers,
Franco

Hi Franco,

I'm confused by the post I've quoted above and this:
"and there might be an update before 19.7 but we have no plans to make 32-bit arm officially supported with rolling binary updates."


Am I mixing things up, is the Rpi3, 64bit and potentially viable long term but we just need to wait for Hardened BSD12?   (is this getting close?  the movement in this thread made me think that might be the case)

[franco]

Yes.

[NetGobbler]

I suspect that yes, is to about 3 of my questions in a row.
In that case, thank you, I'll wait patiently, should be a fun project.
Hopefully USB support is added, I suspect it will be needed for the Pi.

[franco]

Some USB should work out of the box, but performance is not great (the hardwired one is also USB).

We don't know if RPI3 is the right platform, the 1 ethernet default is relatively limiting. HBSD 12 is planned in early 2020. A lot can happen, or maybe not. These things are weird sometimes. ;)

Best way is to use a VLAN for small-scale deployments plus VLAN-switch to make a number of interfaces on the same NIC in and out.


Cheers,
Franco

[NetGobbler]

My understanding is also that it's "weeny" hardware and unsuitable, but there's a lot of Pi out there and some of us, in some terrible countries have internet under 25Mbit per second.  In those instances, I suspect a Pi might actually be a fully comprehensive piece of hardware for very little money.

I will wait patiently, I have 3 of them so I'm happy to experiment!