Potentially a firewall OS for my needs
reddit / selfhosted

----------------------------------------------------------------------
AzBoi69 · 2023-11-01 19:08

I am totally new to this stuff and was wondering if there an os like
pfsense that has:

-VM or docker container support so that I could run windows VMs on it
for RDP
-Good enough Support for broadcom and realtek NICs.
-Tailscale or Zerotier support

I had the idea of running a virtualized firewall in a proxmox server
but that can get messy

----------------------------------------------------------------------
ElevenNotes · 2023-11-01 19:18

pfsense is a L3 appliance not a VM host. Do you mean Proxmox? Do you
plan on runing a virtual pfsense in Proxmox?

----------------------------------------------------------------------
braiam · 2023-11-01 19:21

You could use the balls to the wall with suricate or snort with
pfsense. There are guides about how to implement that. But that seems
way too complex if you are not planing to expose services to the
internet and only need a vpn port.

----------------------------------------------------------------------
thekrautboy · 2023-11-01 19:52

You want a OS that is like pfSense, but also can run VMs or
containers? No...

Look at installing Proxmox, run ~~pfSense~~ (**[fuck pfSense](https://
www.reddit.com/r/selfhosted/comments/17i1dns/pfsense_just_messed_with_
their_userbase_again/)**, run anything else, like OPNsense) in a VM,
run Windows in VM, whatever you want. And you can also run LXC.

> I had the idea of running a virtualized firewall in a proxmox server
but that can get messy

Only if you are messy.

----------------------------------------------------------------------
taxigrandpa · 2023-11-01 20:08

why not run pfsense?   i use it in a VM on proxmox, so far so good.

----------------------------------------------------------------------
junialter · 2023-11-01 20:50

OpenWrt supports podman container, which is very similar to docker but
a bit better (daemonless, full IPv6 support).

----------------------------------------------------------------------
AzBoi69 · 2023-11-01 21:15

Looks like Opnsense inside a Proxmox server is the only way to go
then..

----------------------------------------------------------------------
thekrautboy · 2023-11-01 21:17

No its not. Its one way to go.

----------------------------------------------------------------------
Redux28 · 2023-11-01 23:29

I've run both OPNsense and pfSense as VMs in Proxmox (currently
running pfSense). Both work perfectly fine virtualized.

I'm currently running Tailscale and vanilla wireguard without issues
in the pfSense VM.

----------------------------------------------------------------------
EnterpriseGuy52840 · 2023-11-02 02:42

Realtek? I hope yours aren't those stupid RTL8153 USB NICs. PVE's
kernel doesn't support them.

Run pfSense on Proxmox and use Proxmox to do all your VM work. Running
pfSense as a hypervisor is going to get even messier than if you just
used PVE and pfSense.