RANCID Reviews

OPNsense Reviews

RANCID mentions (9)

• Cisco switch backup/restore?

  A decade ago I worked for a shop that needed to routinely back up 100+ cisco switches and routers and refused to pay for solarwinds. I setup a light weight freebsd vm to run this open source software: https://shrubbery.net/rancid/ (Rancid: Really Awesome New Cisco config Differ) and set it to scrape all the equipment every 12 errors. Source: over 1 year ago

• Version control for network configs

  Anyways Rancid does support cvs, svn, and git. Though I have only used it with cvs. Basically what it does, is checks out the configuration, downloads the configuration with other information about the state of the device, commits the configurations(which only changed ones will be in the latest check-ins, and then it can send an email of the changes. Source: almost 2 years ago

• Management Software for Cisco Devices?

  RANCID - Really Awesome New Cisco confIg Differ monitors a router's (or more generally a device's) configuration, including software and hardware (cards, serial numbers, etc) and uses CVS (Concurrent Version System), Subversion or Git to maintain history of changes. Source: almost 2 years ago

• What all are you doing with Ansible?

  If you want to use this as an opportunity to learn Ansible, or you don't want to add another tool to the stack, this is a fine use case. Otherwise, I would consider using either RANCID or Oxidized for configuration backup. Source: about 2 years ago

• Starting with python at 30

  Before I knew about RANCiD (https://shrubbery.net/rancid), I wrote my own Perl application to telnet into a Foundry Networks switch and TFTP its configuration to my computer so I could back it up. At a future employer, I rewrote another coworkers Perl application that collected SNMP values from devices and did stuff with it (forget what all I did then). Source: over 2 years ago

OPNsense mentions (94)

• How to bypass public IP and NAT

  Firmware's like Asuswrt-Merlin or OpenWRT can support dynamic-dns, or you can do like I do and run something like OPNsense in an x86 VM with a NIC passed through, or buy an inexpensive firewall appliance (up to 500mbps/1gbps/10gbps). Source: 6 months ago

• Stop ISP from getting into my Router

  The easiest solution is to buy your own router, set it up, disable the router functionality on the Fritzbox 7590 and plug your router into it. It'll be cheaper and easier than a Cisco Firewall, but if you want to go the dedicated firewall route then I would recommenced OPNsense. Source: 6 months ago

• OpenBSD Innovations

  BSDs may not have a significant presence on desktops, but they're well known in the networking world for their reliability. They also were the foundation used to build OSes for specific applications. OpnSense and XigmaNAS, for example, are two excellent FreeBSD based applications aimed at firewalling/security and NAS/services. https://opnsense.org/ https://xigmanas.com/xnaswp/. - Source: Hacker News / 11 months ago

• Switches That You Actually Own

  For switches? OpenWrt supports a few models toward the lower end, and SONiC support a bunch at the higher-end datacenter ToR market, but none of these options are SME production-ready like Linux servers or OPNsense firewalls. Source: 11 months ago

• Having to pay postage to ship back a DoA product sucks from a customer perspective

  That’s a stupid policy, and it looks like one of my UDMs is defective. I’m an idiot for not just buying good quality open boxes and putting https://opnsense.org/ on them. 🤦🏻‍♂️. Source: 12 months ago