-
Notifications
You must be signed in to change notification settings - Fork 0
Router Operating Systems
There are a few router OS's I considered, including those bundled with hardware, which were ultimately shot down due to underperforming hardware and a lack of features (for example, EdgeRouters have slow hardware and use a fork of VyOS with a subset of its features). Other options like Sophos UTM and Untangle were discarded because they are not freely available, at least not with the required feature set.
Other plain operating systems like Linux or FreeBSD might be more beneficial for automation purposes, but are otherwise more difficult to set up and centrally manage like VyOS and the others allow.
| Features | VyOS | pfSense | OpnSense |
|---|---|---|---|
| BGP | Yes | Yes (frr package) |
Yes (frr package) |
| Wireguard | Yes | No (removed) | Yes (os-wireguard package) |
| GRE | Yes | Yes | Yes |
| RPKI | Yes (1.3.x+ branch) |
Yes | No |
| Looking Glass | Yes | Yes | Yes |
Ultimately, there are only a few features that are required out of a router OS for this project. VyOS meets these requirements the best, pfSense may properly support them soon (but currently is missing proper Wireguard support), and OpnSense unfortunately does not meet the requirements, specifically completely lacking support for RPKI. It would still be good to work hands-on with these router OS's, but ultimately VyOS seems to be the best option moving forward, given its expansive feature set and powerful command-line configuration style.