Skip to content

Router Operating Systems

dhellstern edited this page Oct 13, 2021 · 4 revisions

There are a few router OS's I considered, including those bundled with hardware, which were ultimately shot down due to underperforming hardware and a lack of features (for example, EdgeRouters have slow hardware and use a fork of VyOS with a subset of its features). Other options like Sophos UTM and Untangle were discarded because they are not freely available, at least not with the required feature set.

Features VyOS pfSense OpnSense
BGP Yes Yes (frr package) Yes (frr package)
Wireguard Yes No (removed) Yes (os-wireguard package)
GRE Yes Yes Yes
RPKI Yes (1.3.x+ branch) Yes No
Looking Glass Yes Yes Yes

Conclusion

Ultimately, there are only a few features that are required out of a router OS for this project. VyOS meets these requirements the best, pfSense may properly support them soon (but currently is missing proper Wireguard support), and OpnSense unfortunately does not meet the requirements, specifically completely lacking support for RPKI. It would still be good to work hands-on with these router OS's, but ultimately VyOS seems to be the best option moving forward, given its expansive feature set and powerful command-line configuration style.

Clone this wiki locally