302 lines
8.4 KiB
Markdown
302 lines
8.4 KiB
Markdown
# OPNsense Hardware Buying Guide
|
||
|
||
## 🛒 Recommended Purchase: Protectli VP2420
|
||
|
||
### Why This Model?
|
||
- **Perfect for gigabit internet** with DPI/IDS/IPS
|
||
- **Future-proof** with 2.5GbE ports
|
||
- **Expandable** RAM (8GB → 32GB)
|
||
- **Low power** (6-10W, fanless, silent)
|
||
- **Excellent support** from Protectli
|
||
- **Coreboot firmware** (extra security)
|
||
- **Made for 24/7 operation**
|
||
|
||
### Specifications
|
||
```
|
||
CPU: Intel Celeron J6412 (4 cores, 2.0 GHz)
|
||
RAM: 8GB DDR4 (upgradeable to 32GB)
|
||
Storage: 256GB M.2 SSD
|
||
Network: 4x Intel i226-V 2.5GbE
|
||
Power: 6-10W (passive cooling)
|
||
Size: Small, fanless, silent
|
||
```
|
||
|
||
### Performance Capabilities
|
||
- ✅ 1 Gbps throughput with Zenarmor DPI
|
||
- ✅ Suricata IDS/IPS + Zenarmor simultaneously
|
||
- ✅ ntopng network monitoring
|
||
- ✅ Months of detailed logs
|
||
- ✅ VPN server (WireGuard/OpenVPN)
|
||
- ✅ Multiple VLANs for network segregation
|
||
|
||
### Where to Buy
|
||
|
||
#### Option 1: Protectli Direct (Recommended)
|
||
**Website:** https://protectli.com/product/vp2420/
|
||
- **Price:** ~$429 (8GB RAM, 256GB SSD)
|
||
- **Shipping:** Usually 3-5 business days (US)
|
||
- **Support:** Excellent US-based support
|
||
- **Warranty:** 1-year standard, 3-year available
|
||
- **Customization:** Can upgrade RAM/SSD before shipping
|
||
|
||
**Configuration Options:**
|
||
- 8GB RAM / 256GB SSD: $429
|
||
- 16GB RAM / 256GB SSD: $479
|
||
- 32GB RAM / 512GB SSD: $579
|
||
|
||
**Recommended:** 8GB / 256GB (sufficient for home use)
|
||
|
||
#### Option 2: Amazon
|
||
**Search:** "Protectli VP2420"
|
||
- **Price:** ~$450 (varies)
|
||
- **Shipping:** Amazon Prime (2 days)
|
||
- **Support:** Through Protectli
|
||
- **Returns:** Amazon's easy returns
|
||
|
||
**Pros:** Faster delivery, easy returns
|
||
**Cons:** Slightly higher price, limited configuration
|
||
|
||
### Alternative Hardware Options
|
||
|
||
#### Budget Option (~$250): Qotom Q555G6
|
||
**Specs:**
|
||
- CPU: Intel Celeron J4125 (4 cores, 2.0-2.7 GHz)
|
||
- RAM: 8GB DDR4
|
||
- Storage: 128GB mSATA
|
||
- Network: 4x Intel i225-V 2.5GbE
|
||
- Performance: 1 Gbps with Zenarmor Free/Home
|
||
|
||
**Where:** Amazon, AliExpress
|
||
**Price:** $220-280
|
||
**Caveat:** Less support, longer shipping from China
|
||
|
||
**Good for:** Tight budgets, tech-savvy users
|
||
|
||
#### Premium Option (~$750): Protectli VP4650
|
||
**Specs:**
|
||
- CPU: Intel Core i5-1235U (10 cores, up to 4.4 GHz)
|
||
- RAM: 16GB DDR4 (up to 64GB)
|
||
- Storage: 512GB M.2 NVMe
|
||
- Network: 6x Intel i226-V 2.5GbE
|
||
- Performance: Multi-gigabit with full Zenarmor Business
|
||
|
||
**Good for:**
|
||
- Multi-gigabit internet (2.5G+)
|
||
- Running many services (Suricata + Zenarmor + VPN + more)
|
||
- Future-proofing for 10+ years
|
||
- Small business use
|
||
|
||
**Overkill for:** Most home networks under 1 Gbps
|
||
|
||
## 📦 What's Included
|
||
|
||
### In the Box:
|
||
- Protectli VP2420 unit
|
||
- Power adapter (12V)
|
||
- VESA mount kit
|
||
- Quick start guide
|
||
- WiFi antennas (if configured)
|
||
|
||
### NOT Included:
|
||
- **Monitor** (only needed for initial setup, then headless)
|
||
- **Keyboard** (only for initial setup)
|
||
- **Ethernet cables** (use existing)
|
||
|
||
### Initial Setup Requirements:
|
||
1. Monitor (HDMI) or laptop for console access
|
||
2. USB keyboard (for initial config)
|
||
3. Ethernet cable to modem/switch
|
||
4. ~30 minutes of time
|
||
|
||
After initial setup, manage entirely via web interface (no monitor needed).
|
||
|
||
## 💳 Total Cost Breakdown
|
||
|
||
### Hardware: Protectli VP2420
|
||
- **Device:** $429 (8GB/256GB from Protectli)
|
||
- **Shipping:** Free (usually)
|
||
- **Tax:** Varies by state
|
||
- **Total Hardware:** ~$430-460
|
||
|
||
### Software: Zenarmor
|
||
- **OPNsense:** FREE (open source)
|
||
- **Zenarmor Free:** $0 (limited features)
|
||
- **Zenarmor Home:** $59/year (recommended)
|
||
- **Zenarmor Business:** $149/year (overkill for home)
|
||
|
||
### First Year Total:
|
||
- Hardware: $430
|
||
- Zenarmor Home (Year 1): $59
|
||
- **Total:** $489 first year
|
||
- **Then:** $59/year ongoing
|
||
|
||
### 5-Year Total Cost of Ownership:
|
||
- Hardware: $430 (one-time)
|
||
- Zenarmor: $59 × 5 = $295
|
||
- **Total:** $725 over 5 years
|
||
- **Monthly:** $12.08/month
|
||
|
||
## 🆚 Cost Comparison
|
||
|
||
### Commercial Parental Control Services:
|
||
**Qustodio Premium:**
|
||
- $138/year for up to 15 devices
|
||
- 5 years: $690
|
||
- **Does NOT include router/firewall**
|
||
|
||
**Net Nanny:**
|
||
- $90/year for 1 device, $140/year for unlimited
|
||
- 5 years: $700
|
||
- **Does NOT include router/firewall**
|
||
|
||
**Circle Home Plus:**
|
||
- $130 device + $10/month subscription
|
||
- 5 years: $730
|
||
- **Basic features compared to Zenarmor**
|
||
|
||
### OPNsense + Zenarmor:
|
||
- **$725 over 5 years**
|
||
- **Includes enterprise firewall**
|
||
- **Includes network security (IDS/IPS)**
|
||
- **Includes traffic analysis**
|
||
- **More features than commercial services**
|
||
|
||
**Winner:** OPNsense for same cost, more features!
|
||
|
||
## ⚡ Quick Buy Decision Guide
|
||
|
||
### Buy VP2420 If:
|
||
- ✅ Internet ≤ 1 Gbps (most homes)
|
||
- ✅ Want to run Zenarmor + Suricata
|
||
- ✅ Planning to use VPN
|
||
- ✅ Need reliable 24/7 operation
|
||
- ✅ Value excellent support
|
||
|
||
### Buy Budget (Qotom) If:
|
||
- ✅ Budget is critical ($250 vs $430)
|
||
- ✅ Internet ≤ 500 Mbps
|
||
- ✅ Okay with less support
|
||
- ✅ Comfortable troubleshooting
|
||
|
||
### Buy Premium (VP4650) If:
|
||
- ✅ Internet > 1 Gbps (2.5G+ fiber)
|
||
- ✅ Running many services
|
||
- ✅ Small business use
|
||
- ✅ Want maximum future-proofing
|
||
|
||
### Don't Buy Any If:
|
||
- ❌ Happy with basic MAC blocking
|
||
- ❌ Don't need application visibility
|
||
- ❌ OpenWRT limitations are acceptable
|
||
- ❌ $0 budget is absolute requirement
|
||
|
||
## 🚚 Delivery Timeline
|
||
|
||
### Protectli Direct:
|
||
- **Order Processing:** 1-2 business days
|
||
- **Shipping:** 3-5 business days (US)
|
||
- **International:** 7-14 days
|
||
- **Total:** 1 week domestic
|
||
|
||
### Amazon:
|
||
- **Prime:** 2 days
|
||
- **Standard:** 5-7 days
|
||
- **Total:** 2 days - 1 week
|
||
|
||
### AliExpress (Budget Options):
|
||
- **Shipping:** 2-4 weeks
|
||
- **Customs:** May add delays
|
||
- **Total:** 3-6 weeks
|
||
|
||
## 📋 Pre-Purchase Checklist
|
||
|
||
Before ordering, ensure you have:
|
||
- [ ] Measured available space (device is ~6" × 4" × 1")
|
||
- [ ] Confirmed power outlet near router location
|
||
- [ ] HDMI monitor for initial setup (or laptop for serial console)
|
||
- [ ] USB keyboard for initial setup
|
||
- [ ] Ethernet cables (CAT6 recommended for 2.5GbE)
|
||
- [ ] Budget approved ($430 + $59/year)
|
||
- [ ] Spouse/partner on board with purchase 😊
|
||
|
||
## 🔧 What to Do When It Arrives
|
||
|
||
### Day 1: Unboxing & Setup
|
||
1. **Connect:** HDMI monitor, keyboard, power, ethernet to modem
|
||
2. **Boot:** Install OPNsense (30 minutes)
|
||
3. **Configure:** Basic WAN/LAN settings (30 minutes)
|
||
4. **Test:** Verify internet works (10 minutes)
|
||
|
||
### Day 2: Advanced Config
|
||
5. **Install:** Zenarmor plugin (15 minutes)
|
||
6. **Setup:** Zenarmor trial (15 days free) (30 minutes)
|
||
7. **Configure:** Basic parental policies (2 hours)
|
||
|
||
### Day 3: Home Assistant
|
||
8. **Install:** OPNsense HA integration via HACS (30 minutes)
|
||
9. **Setup:** API keys and entities (1 hour)
|
||
10. **Test:** Device tracking and controls (1 hour)
|
||
|
||
### Day 4-7: Optimization
|
||
11. **Monitor:** Watch usage patterns
|
||
12. **Adjust:** Fine-tune policies
|
||
13. **Test:** Verify all features working
|
||
14. **Deploy:** Set Archer AX72 Pro to AP mode
|
||
|
||
## 🎁 Bonus: What Else You Can Do
|
||
|
||
Once you have OPNsense running:
|
||
- **VPN Server:** Access home network remotely (WireGuard)
|
||
- **Guest Network:** Isolated WiFi for visitors
|
||
- **IoT VLAN:** Segregate smart home devices
|
||
- **Ad Blocking:** Network-wide ad blocking (AdGuard)
|
||
- **DNS over HTTPS:** Privacy-enhanced DNS
|
||
- **Traffic Shaping:** QoS for video calls
|
||
- **Intrusion Detection:** Suricata IDS/IPS
|
||
- **Network Monitoring:** ntopng analysis
|
||
|
||
**All included FREE with OPNsense!**
|
||
|
||
## 📞 Support Resources
|
||
|
||
### Protectli Support:
|
||
- **Email:** support@protectli.com
|
||
- **Phone:** (720) 339-9885
|
||
- **Hours:** Mon-Fri 9 AM - 5 PM MT
|
||
- **Response:** Usually < 24 hours
|
||
|
||
### OPNsense Community:
|
||
- **Forum:** https://forum.opnsense.org/
|
||
- **Documentation:** https://docs.opnsense.org/
|
||
- **Reddit:** r/OPNsenseFirewall
|
||
|
||
### Zenarmor Support:
|
||
- **Forum:** https://forum.opnsense.org/index.php?board=76.0
|
||
- **Email:** Via Zenconsole portal
|
||
- **Documentation:** https://www.zenarmor.com/docs/
|
||
|
||
## ✅ Final Recommendation
|
||
|
||
**Buy the Protectli VP2420 for $430**
|
||
|
||
It's the sweet spot for:
|
||
- ✅ Performance (handles gigabit + DPI)
|
||
- ✅ Price ($430 vs $750 premium)
|
||
- ✅ Support (excellent from Protectli)
|
||
- ✅ Reliability (designed for 24/7)
|
||
- ✅ Future-proofing (expandable to 32GB RAM)
|
||
|
||
**Order from:** Protectli.com (best support) or Amazon (faster delivery)
|
||
|
||
**Add:** Zenarmor Home Edition trial (free for 15 days, then $59/year)
|
||
|
||
**Result:** Enterprise-grade parental control system for your 3 kids!
|
||
|
||
---
|
||
|
||
**Ready to order? Visit https://protectli.com/product/vp2420/**
|
||
|
||
---
|
||
|
||
*This guide is specifically tailored for a household with 3 children (ages 14-17) and 22 devices needing comprehensive parental controls.*
|