Configuration files for my OpenBSD router. The best operating system for the job, hands down. Inspired by jaywillikers/openbsd-router.
Tested on OpenBSD 7.5 - 7.9.
- pf firewall
- IPv6 (dhcp6leased, rad)
- DHCP/NAT
- NTP
- Unbound for internet/local DNS resolution (DNS-over-TLS)
- WiFi via attached access point
- Router: 4x i226-V 2.5G LAN 12th Gen Intel N100 (8GB DDR5, 128GB NVMe)
- Access Point: ASUS RT-AC68U
- Modem: ARRIS Surfboard S33 DOCSIS 3.1
Eventually I may switch the router to a Protectli Vault. I want to use coreboot however the Protectli devices are expensive and/or have slower CPUs / 1Gbps NICs.
I am using a USB-C to RJ45 cable to access the device's serial console.
Add the following to /etc/boot.conf to invoke the serial console at every boot.
set tty com0
If you want an interactive console, modify /etc/ttys as described in the OpenBSD FAQ:
tty00 "/usr/libexec/getty std.9600" vt220 on secure
To access the device from MacOS, find the device name and use the built in cu:
$ ls -al /dev/tty.usbserial*
...
$ sudo cu -l /dev/tty.usbserial-CHANGEME
On Windows, you can use plink or SimplySerial.