TekLager.se

I think you are right (but I'm hooking into the connection before it reaches the VPN why I am a bit confunded).

Regarding the NAT; I want to be able to reach my selfhosted (as in, the server is located at my house) webserver. If I go to mydomain.com, while on another network but my own, it works just fine, but if I do the same while on my network I am unable to reach the webserver. IIRC this is due to NAT Loopback not working by default, but looking at the documentation I am not really able to understand how to solve my issue.

I have been able to add a Split DNS configuration s.t. www.mydomain.com takes me to the webserver when I am on my local network, but that means I need to have two configurations for all applications that I use both externally and internally (i.e. when I want to reach BNC, Nextcloud, Plex, etc. from my Laptop).

Any tips?

I had simply not looked in the right place. Thank you for encouraging me to take another look. Now it's working.

@teklager you might want to edit this part of your shop as it is in violation with Swedish law.

You write:
"14 days open purchase
In case of unbroken package"

Swedish law (konsumentköplagen) states that when purchasing a product over the internet you have the right to inspect and test the product.

Please see this section: "You have the right to inspect the product".
It states:
"To know whether you want to buy a product, you must be able to inspect it. But the product has to remain in its original condition if you are going to return it. You may not use or handle a product in an unnecessary way. If you do, the seller can demand that you pay for the reduction in the value of the product.".

https://www.hallakonsument.se/other-languages/english-engelsk...

https://www.konsumentverket.se/languages/english-engelska/

The exception from this law would be hygiene products and services that start before the 14 days have passed. I.e. earbuds, underwear, subscriptions, mobile phone agreements and other services of this kind.

Ökade leverantörspriser?
Inflation?

Impressive :]

Nice guide.

Ok, so was just about to put in an order for a Vilfo router when I stumbled over this thread.
Have had a good readup on PfSense/OpnSense and the different types of routers teklager offers.

I have a few questions to @teklager

1. I have a 1000/250 internet connection and want to use VPN, to reach those speeds it seems like i need to get the TLsense i5 right?
2. I also saw that you have a "new" product, TlSense j3p4 (celeron) what performance can
be expected from that hardware?

If i'm new to both OpnSense and PfSense what would you recommend I go for?

Cheers

@teklager:

Thanks for a very quick reply, and on a weekend as well

Currently looking at moving on from my Edgerouter 4 as i am getting tired of having to use the CLI for pretty much anything.
It doesn't really support high VPN speed either so thinking of killing two birds with one stone here getting a new router.

One of the reasons why I was a bit uncertain about Vilfo is what you pointed out, I am depending on them to deliver updates and support. Not saying they won't but at least with this solution I won't have to worry about that.

I have one more question that probably should be more aimed toward the OS manufacturer, but that maybe you could answer is:
I want to setup so some devices use VPN and some don't via the router either via VLAN or IP. Is that possible?
Also thinking of maybe mess around using two VPN providers.

I don't expect a massive answer or a step by step instruction, just curious if its possible since Vilfo has that as a USP (that might be so unique).

Cheers

@teklager:

Again, thanks for the fast and valuable reply.

I'm just going to decide on which one to get now, the celeron one is probably enough as the things that will use VPN isn't the one requiring most of the bandwidth.
At the same time its not that much of a price difference so if i wanna play around with things such as IDP/IDS and other things it might be worth getting the i5 version.

Would you say there are any difference in quality from the Celeron and I5 kit, it seems like its from 2 different manufacturers?

The i5 obviously has a lot more of everything, but apart from that things like building quality, quality of components and if you have had many faulty devices is always interesting to know.

Cheers

Mina 5 cent är att det kanske är bra att lägga lite mer krut på en vettig router/FW om du ska köra den på ett kontor (som jag misstänker är ett företag). Du kommer kanske vilja använda funktioner som kräver lite mer kraft framöver och vill övervaka och analysera trafik.

Är det företagsanvändning så skulle jag nästan tipsa att köpa en produkt med supportavtal så om enheten går sönder så får ni den utbytt asap om du inte kan bygga en redundant miljö.

Men nu gör jag en massa antaganden utifrån att ni är ett företag som är beroende av en internetlina.
Själv kör jag TLsense 5200u och den har fungerat riktigt bra från start. Så kan ge tummen upp för den produkten.

Bumpar denna om det är någon som letar efter en prisvärd router med ett OS där man har support ett bra tag + valfrihet.

Köpte min router med en i5 cpu, tanken var i början att köra en massa VPN så tog i lite med HW. Nu blev det inte så men jäklar vilken stabil HW och den gifter sig bra med OpnSense.

Om övriga billigare routers håller samma kvalitet så är det en no-brainer att köpa från teklager, några kronor dyrare men väldigt mkt bättre.

Håller helt med. Är själv supernöjd med supporten och har än inte haft några bekymmer. +1

Har spanat in teklagers prylar länge nu och igår dog nätdelen till nuvarande router. Nya modeller är ute och N100-kärran ser ju riktigt fin ut med strömförbrukning och bra nog prestanda. Inget avancerat, bara en OpenBSD-kärra med pf och OpenVPN på en 1000/1000-lina. Ska fundera lite till men är grymt sugen.

@teklager the power supply for these machines, fairly standard model easy to replace right?

@CCWarlock De använder 12V DC, och kommer med en 3-5A nätadapter. De finns att köpa "överallt", om inte TekLager i framtiden skulle lagerföra dem.