Hacker News Reader

Comment by zbrozek | Hacker News Reader

Why did you choose x86 openwrt over opnsense? I chose opnsense because it never occurred to me to run openwrt on not-a-consumer-router and now I'm wondering if I screwed up.

Like you, I run a single x86 box with a handful of guests for random stuff - including Home Assistant!

View on HN

openwrt is/was better for fq_codel and cake which were linux things. There may also be other packages that you may find on one or the other. I make extensive use of vpn-policy-routing on openwrt which does selective routing over a few different vpn interfaces (wg, openconnect, etc.). Not sure if something like this exists in bsd land.

I did try opnsense, but found that I wanted wireguard more than any of the features it offered. At the time wireguard wasn't a built-in option, so went back to OpenWrt which I was already familiar with anyway from running it on Linksys routers.

Makes sense! I'm using wireguard on opnsense (but it's a newish feature) and so far it's been a great experience.

I had a similar experience and ended up doing the same. OPNsense does include a userspace implementation of Wireguard, but is obviously inferior to what Linux already has. It ended up being that, how poorly the initial kernel space implementation was handled for FreeBSD and that I wanted Cake for QoS, which made me move back to OpenWRT.

I do want to ask though, has there been any downsides to using OpenWRT on x86?

Late reply but -

I haven't really run into notable downsides. Installation was somewhat of a pain since I had to resize the partition (all of the prebuilt images assume small hardware), and all of the default packages are as minimal as possible - like busybox for userspace/shell. Upgrading on X86 is I guess possible (I haven't tried yet), but most of OpenWRT's upgrading instructions/support are geared towards reflashing firmware, not updating packages on ext4.

But, there are a bunch of available packages - coreutils, zsh/bash, etc., that can be installed as desired. In general OpenWRT is pretty set-it/forget-it for me.

Reply on news.ycombinator.com