• 0 Posts
  • 4 Comments
Joined 3 years ago
cake
Cake day: June 25th, 2023

help-circle
  • VyOS for performance but if you don’t use a network device CLI regularly and it’s for home use OPNsense.

    OPNsense comes with a lot of pretty sane defaults for a gateway/firewall, VyOS you really do everything from scratch, as it’s more geared towards enterprise or service provider.

    VyOS does do well as a gateway/firewall and there is a lot you can install to extend features for stuff like what OPNsense has to the point that I have had 0 things I couldn’t do when I migrated a few years ago.


  • Depending on how your ISP is doing IPv6, the typical way would just route the entire prefix to your router, and the ISP would not know how many addresses are used, in the sense that there is no table (no neighbor discovery is needed). If your ISP is keeping data of flows from your prefix then it could start counting unique addresses, but there isn’t really good a reason to and it wouldn’t be accurate. Some devices pull and use more than one address, and quiet devices might not get picked up by flows which are typically sampled at a ratio.