Thermals are pretty much ok as long as you dont have the cpu at 100% 24/7. I’ve never had it go over ~50°C in normal use in my basement. Not sure if it can handle gbit on 2 ports but Iperf between two vlans on the same NIC works flawlessly with lots of cpu to spare

Mine sits at around ~11W during normal usage (~40mbps into a wireguard tunnel)

what about ::1?

Recently removed the A record from a few semi-public services that got hammered by AI crawlers, works like a charm

I patch as soon as possible and If I were to get pwned id restore a backup and patch again. All my public facing services are sitting in a own, isolated network so an attacker wouldnt get far. If my Hypervisor got compromised id do the same. Id be very fucked if something got into my Proxmox Backup Server tho.

ipv4 exhaustion. Devices are meant to have routable addresses. How would that make routing harder?

Why shouldnt they if you have enough ips? Nat still is an ugly workaround

the entire website looks like it was extruded by claude

Holy fucking slop

Currently running OPNsense on a small Dual-Nic Shuttle PC with an Pentium G4560 and 4 gigs of ram and it’s been handling everything I throw at it perfectly fine. Ive got 16 Interfaces, around 10 Wireguard Peers and a SIT tunnel to HE and Im still getting Line Speeds through the firewall.