{"id":"f50ba8c353111b6b5176c461ea420077dcc72c2ad519ffc2619e38406baefd2e","pubkey":"4eb88310d6b4ed95c6d66a395b3d3cf559b85faec8f7691dafd405a92e055d6d","created_at":1727749193,"kind":1,"tags":[["e","7c81d682fa8f35986b239417397969ad7a39ac59dc2df90c77af9b208f7653af","","root"],["e","f5929a9d1934ec6cf24ef7df1db12d8d08f617778917c48fd6da32f0dd795e97"],["e","62834abec210181fb9de1ec8d35f3675176958c55e102824626363c4a727cc85","","reply"],["p","4eb88310d6b4ed95c6d66a395b3d3cf559b85faec8f7691dafd405a92e055d6d"],["p","187857f50e00e066e411766b476ba84710a6fb53f51a4d17390f533b6eee5ccc"],["p","fc994dc4d95efe62e5ed1c84542f40a1f513e2c4bf9953003aa4dfe8ad649b11"]],"content":"Hardware firewalls running OPNsense on dedicated devices like Protectli offer superior security and advanced routing features. They're built for one job and do it well. \n\nOpenWRT, primarily designed for Wi-Fi routers, provides flexibility but can struggle when tasked with complex firewall and routing functions. \n\nWhile OpenWRT can be configured to do it all, it's not optimal for advanced security setups, similar to all-in-one ISP solutions that prioritize convenience over security. \n\nBest practice involves separating network functions: use a dedicated hardware firewall/router (like OPNsense) for security and routing, and a separate device running OpenWRT or similar firmware for Wi-Fi. \n\nThis approach ensures each component performs its specialized task efficiently, avoiding the compromises inherent in all-in-one solutions.","sig":"575af5e955addfac9656a6d4442f52201e091ba61e55e9d36f3ffb1f7ef79b2bb548fbcec20441fd754b791c1f6ddfec5a256e9b586168ac13e0de0e7fcfc285"}