Files
ha-wirelesscontrol-migration/HARDWARE_BUYING_GUIDE.md

8.4 KiB
Raw Permalink Blame History

OPNsense Hardware Buying Guide

Why This Model?

  • Perfect for gigabit internet with DPI/IDS/IPS
  • Future-proof with 2.5GbE ports
  • Expandable RAM (8GB → 32GB)
  • Low power (6-10W, fanless, silent)
  • Excellent support from Protectli
  • Coreboot firmware (extra security)
  • Made for 24/7 operation

Specifications

CPU:     Intel Celeron J6412 (4 cores, 2.0 GHz)
RAM:     8GB DDR4 (upgradeable to 32GB)
Storage: 256GB M.2 SSD
Network: 4x Intel i226-V 2.5GbE
Power:   6-10W (passive cooling)
Size:    Small, fanless, silent

Performance Capabilities

  • 1 Gbps throughput with Zenarmor DPI
  • Suricata IDS/IPS + Zenarmor simultaneously
  • ntopng network monitoring
  • Months of detailed logs
  • VPN server (WireGuard/OpenVPN)
  • Multiple VLANs for network segregation

Where to Buy

Website: https://protectli.com/product/vp2420/

  • Price: ~$429 (8GB RAM, 256GB SSD)
  • Shipping: Usually 3-5 business days (US)
  • Support: Excellent US-based support
  • Warranty: 1-year standard, 3-year available
  • Customization: Can upgrade RAM/SSD before shipping

Configuration Options:

  • 8GB RAM / 256GB SSD: $429
  • 16GB RAM / 256GB SSD: $479
  • 32GB RAM / 512GB SSD: $579

Recommended: 8GB / 256GB (sufficient for home use)

Option 2: Amazon

Search: "Protectli VP2420"

  • Price: ~$450 (varies)
  • Shipping: Amazon Prime (2 days)
  • Support: Through Protectli
  • Returns: Amazon's easy returns

Pros: Faster delivery, easy returns
Cons: Slightly higher price, limited configuration

Alternative Hardware Options

Budget Option (~$250): Qotom Q555G6

Specs:

  • CPU: Intel Celeron J4125 (4 cores, 2.0-2.7 GHz)
  • RAM: 8GB DDR4
  • Storage: 128GB mSATA
  • Network: 4x Intel i225-V 2.5GbE
  • Performance: 1 Gbps with Zenarmor Free/Home

Where: Amazon, AliExpress
Price: $220-280
Caveat: Less support, longer shipping from China

Good for: Tight budgets, tech-savvy users

Premium Option (~$750): Protectli VP4650

Specs:

  • CPU: Intel Core i5-1235U (10 cores, up to 4.4 GHz)
  • RAM: 16GB DDR4 (up to 64GB)
  • Storage: 512GB M.2 NVMe
  • Network: 6x Intel i226-V 2.5GbE
  • Performance: Multi-gigabit with full Zenarmor Business

Good for:

  • Multi-gigabit internet (2.5G+)
  • Running many services (Suricata + Zenarmor + VPN + more)
  • Future-proofing for 10+ years
  • Small business use

Overkill for: Most home networks under 1 Gbps

📦 What's Included

In the Box:

  • Protectli VP2420 unit
  • Power adapter (12V)
  • VESA mount kit
  • Quick start guide
  • WiFi antennas (if configured)

NOT Included:

  • Monitor (only needed for initial setup, then headless)
  • Keyboard (only for initial setup)
  • Ethernet cables (use existing)

Initial Setup Requirements:

  1. Monitor (HDMI) or laptop for console access
  2. USB keyboard (for initial config)
  3. Ethernet cable to modem/switch
  4. ~30 minutes of time

After initial setup, manage entirely via web interface (no monitor needed).

💳 Total Cost Breakdown

Hardware: Protectli VP2420

  • Device: $429 (8GB/256GB from Protectli)
  • Shipping: Free (usually)
  • Tax: Varies by state
  • Total Hardware: ~$430-460

Software: Zenarmor

  • OPNsense: FREE (open source)
  • Zenarmor Free: $0 (limited features)
  • Zenarmor Home: $59/year (recommended)
  • Zenarmor Business: $149/year (overkill for home)

First Year Total:

  • Hardware: $430
  • Zenarmor Home (Year 1): $59
  • Total: $489 first year
  • Then: $59/year ongoing

5-Year Total Cost of Ownership:

  • Hardware: $430 (one-time)
  • Zenarmor: $59 × 5 = $295
  • Total: $725 over 5 years
  • Monthly: $12.08/month

🆚 Cost Comparison

Commercial Parental Control Services:

Qustodio Premium:

  • $138/year for up to 15 devices
  • 5 years: $690
  • Does NOT include router/firewall

Net Nanny:

  • $90/year for 1 device, $140/year for unlimited
  • 5 years: $700
  • Does NOT include router/firewall

Circle Home Plus:

  • $130 device + $10/month subscription
  • 5 years: $730
  • Basic features compared to Zenarmor

OPNsense + Zenarmor:

  • $725 over 5 years
  • Includes enterprise firewall
  • Includes network security (IDS/IPS)
  • Includes traffic analysis
  • More features than commercial services

Winner: OPNsense for same cost, more features!

Quick Buy Decision Guide

Buy VP2420 If:

  • Internet ≤ 1 Gbps (most homes)
  • Want to run Zenarmor + Suricata
  • Planning to use VPN
  • Need reliable 24/7 operation
  • Value excellent support

Buy Budget (Qotom) If:

  • Budget is critical ($250 vs $430)
  • Internet ≤ 500 Mbps
  • Okay with less support
  • Comfortable troubleshooting

Buy Premium (VP4650) If:

  • Internet > 1 Gbps (2.5G+ fiber)
  • Running many services
  • Small business use
  • Want maximum future-proofing

Don't Buy Any If:

  • Happy with basic MAC blocking
  • Don't need application visibility
  • OpenWRT limitations are acceptable
  • $0 budget is absolute requirement

🚚 Delivery Timeline

Protectli Direct:

  • Order Processing: 1-2 business days
  • Shipping: 3-5 business days (US)
  • International: 7-14 days
  • Total: 1 week domestic

Amazon:

  • Prime: 2 days
  • Standard: 5-7 days
  • Total: 2 days - 1 week

AliExpress (Budget Options):

  • Shipping: 2-4 weeks
  • Customs: May add delays
  • Total: 3-6 weeks

📋 Pre-Purchase Checklist

Before ordering, ensure you have:

  • Measured available space (device is ~6" × 4" × 1")
  • Confirmed power outlet near router location
  • HDMI monitor for initial setup (or laptop for serial console)
  • USB keyboard for initial setup
  • Ethernet cables (CAT6 recommended for 2.5GbE)
  • Budget approved ($430 + $59/year)
  • Spouse/partner on board with purchase 😊

🔧 What to Do When It Arrives

Day 1: Unboxing & Setup

  1. Connect: HDMI monitor, keyboard, power, ethernet to modem
  2. Boot: Install OPNsense (30 minutes)
  3. Configure: Basic WAN/LAN settings (30 minutes)
  4. Test: Verify internet works (10 minutes)

Day 2: Advanced Config

  1. Install: Zenarmor plugin (15 minutes)
  2. Setup: Zenarmor trial (15 days free) (30 minutes)
  3. Configure: Basic parental policies (2 hours)

Day 3: Home Assistant

  1. Install: OPNsense HA integration via HACS (30 minutes)
  2. Setup: API keys and entities (1 hour)
  3. Test: Device tracking and controls (1 hour)

Day 4-7: Optimization

  1. Monitor: Watch usage patterns
  2. Adjust: Fine-tune policies
  3. Test: Verify all features working
  4. Deploy: Set Archer AX72 Pro to AP mode

🎁 Bonus: What Else You Can Do

Once you have OPNsense running:

  • VPN Server: Access home network remotely (WireGuard)
  • Guest Network: Isolated WiFi for visitors
  • IoT VLAN: Segregate smart home devices
  • Ad Blocking: Network-wide ad blocking (AdGuard)
  • DNS over HTTPS: Privacy-enhanced DNS
  • Traffic Shaping: QoS for video calls
  • Intrusion Detection: Suricata IDS/IPS
  • Network Monitoring: ntopng analysis

All included FREE with OPNsense!

📞 Support Resources

Protectli Support:

  • Email: support@protectli.com
  • Phone: (720) 339-9885
  • Hours: Mon-Fri 9 AM - 5 PM MT
  • Response: Usually < 24 hours

OPNsense Community:

Zenarmor Support:

Final Recommendation

Buy the Protectli VP2420 for $430

It's the sweet spot for:

  • Performance (handles gigabit + DPI)
  • Price ($430 vs $750 premium)
  • Support (excellent from Protectli)
  • Reliability (designed for 24/7)
  • Future-proofing (expandable to 32GB RAM)

Order from: Protectli.com (best support) or Amazon (faster delivery)

Add: Zenarmor Home Edition trial (free for 15 days, then $59/year)

Result: Enterprise-grade parental control system for your 3 kids!


Ready to order? Visit https://protectli.com/product/vp2420/


This guide is specifically tailored for a household with 3 children (ages 14-17) and 22 devices needing comprehensive parental controls.