my OpenBSD router configuration
Switch branches/tags
Nothing to show
Clone or download
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Permalink
Type Name Latest commit message Commit time
Failed to load latest commit information.
script
src
.gitignore
LICENSE
README.md

README.md

kibble.bongo.zone

My OpenBSD gateway configuration, connected to NYCMesh. Intended as a how-to guide, in case I ever break this thing.

Network configuration

I connect to NYCMesh Node 1340.

 +-------------------+
 | Edge router (NAT) | +-----------------------------------------------------+----------------------+
 +-------+----+------+ | kibble.bongo.zone                                   | vmd                  |
         |    |        |-----------------------------------------------------|----------------------|
         |    v        |                                    3+-----------------+-> nycmesh-dns      |
DE/CIX<--+ NYCMesh     |                                 2+----------------+ | +-> tor              |
              ^        |      bridge 0                1+-------------+     | |                      |
              |        |      +--+--+--+--+---------+-------------------+------+-> <testvms>        |
      +-------+------+ |      |  |  |  |  |         |  |  |  |       |  |  | |                      |
      | nycmesh 1340 | |      +  +  +  +  +         +  +  +  +       +  +  | |                      |
      +-------+------+ |em 0  1  2  3  4  5  vether 0  1  2  3  vlan 0  1  2 |                      |
      802.11ac|        +------+--+--+--------------------------------+--+--+-+----------------------+
+-------------+----+ 1Gbps |  |  |  |                                [  [  [
| nycmesh-lbe-1659 +-------+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~%~~%
+------------------+          |  |  |                                [ VLAN tags
                              |  |  |                                ] 1: antenna admin
         +---------+ 100Mbps  |  |  |    VLAN tag for public SSID    [ 2: egress traffic
         + airport +----------+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~%
         +-+-- --+-+             |  |
           |     |               |  |
           |     v               |  |
           v    802.11a/n+b/g/n  |  |       802.11ac/n+n
         Public     ^            |  |           ^
          WiFi      |            |  |           |
               +----+----+ 1Gbps |  | 1Gbps +---+----+
               | macmini +-------+  +-------+ belkin |
               +---------+                  +--------+

Installation Overview

  1. Configure and install OpenBSD
  2. Install packages
  3. Configure services

Install packages with pkg_add

pkg_add alpine arping arpwatch bash bsd-airtools coreutils curl git gmake go hping htop iftop \
 iperf3 irssi keybase libxml lynx miniupnpd mosh nload nmap pkglocatedb py-pip py-setuptools \
 py-virtualenv quirks rsnapshot rsync rtl-sdr snort sshguard the_silver_searcher tmux-mem-cpu-load \
 vim vmm-firmware w3m wget wol zsh

Features

TODO

References