<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<p>Good discussion, everyone.<br>
<br>
I think there's merit to *WRT & *Sense distributions.<br>
<br>
Might I add a few other things to consider, if GUI isn't the
concern.<br>
<br>
If you want features & good stability/security:<br>
<b>VyOS</b> (<a class="moz-txt-link-freetext" href="https://vyos.io/">https://vyos.io/</a>) -- it's fairly easy to build the
image and have the latest LTS release. I have a license from the
Volunteer WISP I help operate</p>
<p>If you want lightweight / more exposure to the system:<br>
</p>
<p>You could scratch that & just roll debian/ubuntu/suse/rhel
and utilize the daemon itself, <b>FRR</b> (VyOS is just Debian
with a python wrapper for FRR): <a class="moz-txt-link-freetext" href="https://frrouting.org/">https://frrouting.org/</a> <br>
<br>
With FRR, forget having a daemon "like the big vendors" , big
vendors commit code to / use FRR.</p>
<p>Finally, there's nothing wrong with the good ol' OpenBSD
deployments -- <a class="moz-txt-link-freetext" href="https://www.openbsd.org/faq/pf/example1.html">https://www.openbsd.org/faq/pf/example1.html</a> ..
lots of IX's running on them for decades. Probably the best
security considering OpenBSD's commitment to it. OpenBGPD is a a
shining star.<br>
</p>
<p>If you want just BGP, roll with <b>BIRD</b> or <b>GoBGP</b>:</p>
<p><a class="moz-txt-link-freetext" href="https://bird.network.cz/?get_doc&f=bird.html&v=20">https://bird.network.cz/?get_doc&f=bird.html&v=20</a><br>
</p>
<p><a class="moz-txt-link-freetext" href="https://github.com/osrg/gobgp">https://github.com/osrg/gobgp</a></p>
<p>If GUI is a concern, I'd say *WRT or OPNSense are the way to go
today.<br>
<br>
In summary, there are <i>lots</i> of great options; We're quite
spoiled.<br>
<br>
Personally, I'm VyOS all the way. The syntax is right at home for
Operators who are familiar with JunOS & similar platforms. <br>
</p>
<p>Wish I could discuss this more at the next meeting, but I'll be
at a book launch.<br>
</p>
<p>- Mark<br>
</p>
<div class="moz-cite-prefix">On 2023-09-07 12:56, James Knott via
talk wrote:<br>
</div>
<blockquote type="cite"
cite="mid:cc68a201-80e9-4fd6-8de8-18676e109240@jknott.net">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<div class="moz-cite-prefix">On 2023-09-07 12:48, Scott Allen
wrote:<br>
</div>
<blockquote type="cite"
cite="mid:CAArSzsWFMCkupow61JO0WU5RXKE=tRXqGariJ-VPnWkc27MAnA@mail.gmail.com">
<pre class="moz-quote-pre" wrap="">On Thu, 7 Sept 2023 at 12:21, James Knott via talk <a
class="moz-txt-link-rfc2396E" href="mailto:talk@gtalug.org"
moz-do-not-send="true"><talk@gtalug.org></a> wrote:
</pre>
<blockquote type="cite" style="color: #1a5fb4;">
<pre class="moz-quote-pre" wrap="">it supports routing protocols such as OSPF & BGP
</pre>
</blockquote>
<pre class="moz-quote-pre" wrap=""><a
class="moz-txt-link-freetext"
href="https://www.linuxtechguy.com/2020/11/27/dynamic-routing-using-ospf-on-openwrt/"
moz-do-not-send="true">https://www.linuxtechguy.com/2020/11/27/dynamic-routing-using-ospf-on-openwrt/</a>
<a class="moz-txt-link-freetext"
href="https://docs.daper.io/networking/bgp/openwrt/"
moz-do-not-send="true">https://docs.daper.io/networking/bgp/openwrt/</a>
</pre>
</blockquote>
<br>
I don't doubt OpenWRT can do those things, but can they do them as
well as pfSense? You even said you were considering pfSense
because of all it's features.<br>
<br>
<br>
<fieldset class="moz-mime-attachment-header"></fieldset>
<pre class="moz-quote-pre" wrap="">---
Post to this mailing list <a class="moz-txt-link-abbreviated" href="mailto:talk@gtalug.org">talk@gtalug.org</a>
Unsubscribe from this mailing list <a class="moz-txt-link-freetext" href="https://gtalug.org/mailman/listinfo/talk">https://gtalug.org/mailman/listinfo/talk</a>
</pre>
</blockquote>
<pre class="moz-signature" cols="72">--
Mark Prosser
// E: <a class="moz-txt-link-abbreviated" href="mailto:mark@zealnetworks.ca">mark@zealnetworks.ca</a>
// W: <a class="moz-txt-link-freetext" href="https://zealnetworks.ca">https://zealnetworks.ca</a></pre>
</body>
</html>