Add detailed hardware buying guide with purchasing options

HARDWARE_BUYING_GUIDE.md

@@ -0,0 +1,301 @@
+# OPNsense Hardware Buying Guide
+
+## 🛒 Recommended Purchase: Protectli VP2420
+
+### Why This Model?
+- **Perfect for gigabit internet** with DPI/IDS/IPS
+- **Future-proof** with 2.5GbE ports
+- **Expandable** RAM (8GB → 32GB)
+- **Low power** (6-10W, fanless, silent)
+- **Excellent support** from Protectli
+- **Coreboot firmware** (extra security)
+- **Made for 24/7 operation**
+
+### Specifications
+```
+CPU:     Intel Celeron J6412 (4 cores, 2.0 GHz)
+RAM:     8GB DDR4 (upgradeable to 32GB)
+Storage: 256GB M.2 SSD
+Network: 4x Intel i226-V 2.5GbE
+Power:   6-10W (passive cooling)
+Size:    Small, fanless, silent
+```
+
+### Performance Capabilities
+- ✅ 1 Gbps throughput with Zenarmor DPI
+- ✅ Suricata IDS/IPS + Zenarmor simultaneously  
+- ✅ ntopng network monitoring
+- ✅ Months of detailed logs
+- ✅ VPN server (WireGuard/OpenVPN)
+- ✅ Multiple VLANs for network segregation
+
+### Where to Buy
+
+#### Option 1: Protectli Direct (Recommended)
+**Website:** https://protectli.com/product/vp2420/
+- **Price:** ~$429 (8GB RAM, 256GB SSD)
+- **Shipping:** Usually 3-5 business days (US)
+- **Support:** Excellent US-based support
+- **Warranty:** 1-year standard, 3-year available
+- **Customization:** Can upgrade RAM/SSD before shipping
+
+**Configuration Options:**
+- 8GB RAM / 256GB SSD: $429
+- 16GB RAM / 256GB SSD: $479
+- 32GB RAM / 512GB SSD: $579
+
+**Recommended:** 8GB / 256GB (sufficient for home use)
+
+#### Option 2: Amazon
+**Search:** "Protectli VP2420"
+- **Price:** ~$450 (varies)
+- **Shipping:** Amazon Prime (2 days)
+- **Support:** Through Protectli
+- **Returns:** Amazon's easy returns
+
+**Pros:** Faster delivery, easy returns  
+**Cons:** Slightly higher price, limited configuration
+
+### Alternative Hardware Options
+
+#### Budget Option (~$250): Qotom Q555G6
+**Specs:**
+- CPU: Intel Celeron J4125 (4 cores, 2.0-2.7 GHz)
+- RAM: 8GB DDR4
+- Storage: 128GB mSATA
+- Network: 4x Intel i225-V 2.5GbE
+- Performance: 1 Gbps with Zenarmor Free/Home
+
+**Where:** Amazon, AliExpress  
+**Price:** $220-280  
+**Caveat:** Less support, longer shipping from China
+
+**Good for:** Tight budgets, tech-savvy users
+
+#### Premium Option (~$750): Protectli VP4650
+**Specs:**
+- CPU: Intel Core i5-1235U (10 cores, up to 4.4 GHz)
+- RAM: 16GB DDR4 (up to 64GB)
+- Storage: 512GB M.2 NVMe
+- Network: 6x Intel i226-V 2.5GbE
+- Performance: Multi-gigabit with full Zenarmor Business
+
+**Good for:** 
+- Multi-gigabit internet (2.5G+)
+- Running many services (Suricata + Zenarmor + VPN + more)
+- Future-proofing for 10+ years
+- Small business use
+
+**Overkill for:** Most home networks under 1 Gbps
+
+## 📦 What's Included
+
+### In the Box:
+- Protectli VP2420 unit
+- Power adapter (12V)
+- VESA mount kit
+- Quick start guide
+- WiFi antennas (if configured)
+
+### NOT Included:
+- **Monitor** (only needed for initial setup, then headless)
+- **Keyboard** (only for initial setup)
+- **Ethernet cables** (use existing)
+
+### Initial Setup Requirements:
+1. Monitor (HDMI) or laptop for console access
+2. USB keyboard (for initial config)
+3. Ethernet cable to modem/switch
+4. ~30 minutes of time
+
+After initial setup, manage entirely via web interface (no monitor needed).
+
+## 💳 Total Cost Breakdown
+
+### Hardware: Protectli VP2420
+- **Device:** $429 (8GB/256GB from Protectli)
+- **Shipping:** Free (usually)
+- **Tax:** Varies by state
+- **Total Hardware:** ~$430-460
+
+### Software: Zenarmor
+- **OPNsense:** FREE (open source)
+- **Zenarmor Free:** $0 (limited features)
+- **Zenarmor Home:** $59/year (recommended)
+- **Zenarmor Business:** $149/year (overkill for home)
+
+### First Year Total:
+- Hardware: $430
+- Zenarmor Home (Year 1): $59
+- **Total:** $489 first year
+- **Then:** $59/year ongoing
+
+### 5-Year Total Cost of Ownership:
+- Hardware: $430 (one-time)
+- Zenarmor: $59 × 5 = $295
+- **Total:** $725 over 5 years
+- **Monthly:** $12.08/month
+
+## 🆚 Cost Comparison
+
+### Commercial Parental Control Services:
+**Qustodio Premium:**
+- $138/year for up to 15 devices
+- 5 years: $690
+- **Does NOT include router/firewall**
+
+**Net Nanny:**
+- $90/year for 1 device, $140/year for unlimited
+- 5 years: $700
+- **Does NOT include router/firewall**
+
+**Circle Home Plus:**
+- $130 device + $10/month subscription
+- 5 years: $730
+- **Basic features compared to Zenarmor**
+
+### OPNsense + Zenarmor:
+- **$725 over 5 years**
+- **Includes enterprise firewall**
+- **Includes network security (IDS/IPS)**
+- **Includes traffic analysis**
+- **More features than commercial services**
+
+**Winner:** OPNsense for same cost, more features!
+
+## ⚡ Quick Buy Decision Guide
+
+### Buy VP2420 If:
+- ✅ Internet ≤ 1 Gbps (most homes)
+- ✅ Want to run Zenarmor + Suricata
+- ✅ Planning to use VPN
+- ✅ Need reliable 24/7 operation
+- ✅ Value excellent support
+
+### Buy Budget (Qotom) If:
+- ✅ Budget is critical ($250 vs $430)
+- ✅ Internet ≤ 500 Mbps
+- ✅ Okay with less support
+- ✅ Comfortable troubleshooting
+
+### Buy Premium (VP4650) If:
+- ✅ Internet > 1 Gbps (2.5G+ fiber)
+- ✅ Running many services
+- ✅ Small business use
+- ✅ Want maximum future-proofing
+
+### Don't Buy Any If:
+- ❌ Happy with basic MAC blocking
+- ❌ Don't need application visibility  
+- ❌ OpenWRT limitations are acceptable
+- ❌ $0 budget is absolute requirement
+
+## 🚚 Delivery Timeline
+
+### Protectli Direct:
+- **Order Processing:** 1-2 business days
+- **Shipping:** 3-5 business days (US)
+- **International:** 7-14 days
+- **Total:** 1 week domestic
+
+### Amazon:
+- **Prime:** 2 days
+- **Standard:** 5-7 days
+- **Total:** 2 days - 1 week
+
+### AliExpress (Budget Options):
+- **Shipping:** 2-4 weeks
+- **Customs:** May add delays
+- **Total:** 3-6 weeks
+
+## 📋 Pre-Purchase Checklist
+
+Before ordering, ensure you have:
+- [ ] Measured available space (device is ~6" × 4" × 1")
+- [ ] Confirmed power outlet near router location
+- [ ] HDMI monitor for initial setup (or laptop for serial console)
+- [ ] USB keyboard for initial setup  
+- [ ] Ethernet cables (CAT6 recommended for 2.5GbE)
+- [ ] Budget approved ($430 + $59/year)
+- [ ] Spouse/partner on board with purchase 😊
+
+## 🔧 What to Do When It Arrives
+
+### Day 1: Unboxing & Setup
+1. **Connect:** HDMI monitor, keyboard, power, ethernet to modem
+2. **Boot:** Install OPNsense (30 minutes)
+3. **Configure:** Basic WAN/LAN settings (30 minutes)
+4. **Test:** Verify internet works (10 minutes)
+
+### Day 2: Advanced Config
+5. **Install:** Zenarmor plugin (15 minutes)
+6. **Setup:** Zenarmor trial (15 days free) (30 minutes)
+7. **Configure:** Basic parental policies (2 hours)
+
+### Day 3: Home Assistant
+8. **Install:** OPNsense HA integration via HACS (30 minutes)
+9. **Setup:** API keys and entities (1 hour)
+10. **Test:** Device tracking and controls (1 hour)
+
+### Day 4-7: Optimization
+11. **Monitor:** Watch usage patterns
+12. **Adjust:** Fine-tune policies
+13. **Test:** Verify all features working
+14. **Deploy:** Set Archer AX72 Pro to AP mode
+
+## 🎁 Bonus: What Else You Can Do
+
+Once you have OPNsense running:
+- **VPN Server:** Access home network remotely (WireGuard)
+- **Guest Network:** Isolated WiFi for visitors
+- **IoT VLAN:** Segregate smart home devices
+- **Ad Blocking:** Network-wide ad blocking (AdGuard)
+- **DNS over HTTPS:** Privacy-enhanced DNS
+- **Traffic Shaping:** QoS for video calls
+- **Intrusion Detection:** Suricata IDS/IPS
+- **Network Monitoring:** ntopng analysis
+
+**All included FREE with OPNsense!**
+
+## 📞 Support Resources
+
+### Protectli Support:
+- **Email:** support@protectli.com
+- **Phone:** (720) 339-9885
+- **Hours:** Mon-Fri 9 AM - 5 PM MT
+- **Response:** Usually < 24 hours
+
+### OPNsense Community:
+- **Forum:** https://forum.opnsense.org/
+- **Documentation:** https://docs.opnsense.org/
+- **Reddit:** r/OPNsenseFirewall
+
+### Zenarmor Support:
+- **Forum:** https://forum.opnsense.org/index.php?board=76.0
+- **Email:** Via Zenconsole portal
+- **Documentation:** https://www.zenarmor.com/docs/
+
+## ✅ Final Recommendation
+
+**Buy the Protectli VP2420 for $430**
+
+It's the sweet spot for:
+- ✅ Performance (handles gigabit + DPI)
+- ✅ Price ($430 vs $750 premium)
+- ✅ Support (excellent from Protectli)
+- ✅ Reliability (designed for 24/7)
+- ✅ Future-proofing (expandable to 32GB RAM)
+
+**Order from:** Protectli.com (best support) or Amazon (faster delivery)
+
+**Add:** Zenarmor Home Edition trial (free for 15 days, then $59/year)
+
+**Result:** Enterprise-grade parental control system for your 3 kids!
+
+---
+
+**Ready to order? Visit https://protectli.com/product/vp2420/**
+
+---
+
+*This guide is specifically tailored for a household with 3 children (ages 14-17) and 22 devices needing comprehensive parental controls.*