• 1 Post
  • 79 Comments
Joined 1 year ago
cake
Cake day: June 11th, 2023

help-circle






  • Like many others, I have mixed feelings on this. If anyone is stopping by and doesn’t want to read through the linked forum thread, this is frameworks goal:

    This isn’t a program to get people to go to conferences and rep Framework, it’s a program to give people who are already going to conferences and showing off their Framework some swag and opportunities to talk with the team. It’s not assigning work, it’s just saying thank you to people who are excited about Framework and active in the Linux community.





  • That’s definitely something to be aware of, but the vdev expansion feature was mergered and will be released probably this year.

    Additionally, it looks like the authors main gripe is the current way to expand is to add more vdevs. If you plan this out ahead of time then adding more vdevs incrementally isn’t an issue, you just need to buy enough drives for a vdev. In homelab use this might an issue, but if OP is planning on a 40 drive setup then needing to buy drives in groups of 2-3 instead of individually shouldn’t be a huge deal.


  • You need to research raid 1,6,10 and zfs first. Make an informed decision and go from there. You’re basing the number of drives off of (uninformed) assumptions and that’s going to drive all of your decisions the wrong way. Start with figuring out your target storage amount and how many drive failures you can tolerate.



  • Ah ok. I’ve done opnsense and pfsense both virtualized in proxmox and on bare metal. I’ve done the setup both at two work places now and at home. I vastly prefer bare metal. Managing it in a VM is a pain. The nic pass through is fine, but it complicates configuration and troubleshooting. If you’re not getting the speeds you want then there’s now two systems to troubleshoot instead of one. Additionally, now you need to worry about keeping your hypervisor up and running in addition to the firewall. This makes updates and other maintance more difficult. Hypervisors do provide snapshots, but opnsense is easy enough to back up that it’s not really a compelling argument.

    My two cents is get the right equipment for the firewall and run bare metal. Having more CPU is great if you want to do intrusion detection, DNS filtering, vpns, etc. on the firewall. Don’t feel like you need to hypervisor everything