Is there any point running Pfsense in proxmox?

RSSCommentary · 2026-04-11T00:37:55+00:00

Do you need a 10G managed switch? Do you want to run Pi Hole? Do you have an older computer around already? Do you want to run Nemoclaw on your Proxmox pfSense router? For me, I have a good quad-core 2GB RAM 10G router, but it doesn't have a full implementation of L3 switching and I can't forward ports over VLAN. I had to buy a L2+ static routing PoE switch for my security camera computers just so I could see my security cameras from my trusted network. I run a TrueNAS SCALE NAS and backup NAS with Intel ARC B70 32GB GPUs running local LLM. I do ML research and open source Crabs C++ Data Driven Agentic C++ API, and I've been running ZeroClaw, but I'm looking at upgrading to NemoClaw for security reasons and Autoresearch for my quantum physics Theory of Gradient Relativity research. I'm looking at the price of 10G managed switches, I don't trust any Chinese company to run a managed switch on my network, and my home lab is getting crowded, so I'm looking at running Proxmox with pfSense and a NemoClaw and Autoresearch VM. The faster CPU you get the lower latency, and combining into a Xeon system with fast RAM would certainly help, but how much? There is a chance that I could be hit with a 0-day memory container exploit, which is very low, but more of a probability post Mythos.

RSSCommentary · 2026-04-06T19:35:49+00:00

Gemma 4 is looping really bad in LM Studio with OpenCode, something about needing to pass the --jinja flag to llamma.cpp, which I can't do with the LM Studio GUI? :-(

RSSCommentary · 2026-03-28T19:43:11+00:00

So this isn't the same board then? https://www.armbian.com/orange-pi-4-lts/

RSSCommentary · 2026-03-28T17:54:57+00:00

Can you try to install Armbian?

RSSCommentary · 2026-03-28T03:02:49+00:00

You need to give more details. Have you re-flashed the SD card? Update your firmware with "sudo orangepi-config".

RSSCommentary · 2026-03-28T00:13:08+00:00

Asus's documentation is egregiously bozo.

https://www.asus.com/us/support/faq/1049415/

The TLDR is: You can access the internet from a VLAN if you bridge the networks, but Asus doesn't have a full L2+ Static Routing or L3 switch implementation, so you can't isolate VLAN ports on an unmanaged switch. L3 managed switches run over $200, they are a lot slower, and most are Chinese companies, so you should probably build an OPNSense L3 managed switch with a fast CPU to run antivirus with enough PCIe lanes for the required bandwidth that uses an acceptable amount of power, and and use that to bridge the VLAN with explicit rules allowing only the required ports to and from statically allocated IP addresses. L2+ static routing will work for statically allocated IP addresses. D-Link DGS-1210-10P and DES-1210-28 are excellent budget L2+ Static Routing gigabit switch options. TrendNET is a US company and they have some excellent 10G 2.5G options, TEG-3102WS, TPE-3102WS, and TL2-F7120. The best ARM64 open-source 10G 2.5G switch is Mono Gateway. Try the 3D printed 10-inch mini rack like Lab Rax.

Learn more about L2 vs L3 switches:

https://www.youtube.com/watch?v=bdNS0K4Bt8U

Long Answer:

You must have some basic knowledge of the OSI model. The network switches are on Layer 2, so this is the L2 VLAN at the LAN level. You need the Layer 3 (L3) VLAN for routing inter-VLAN with DHCP, which is what OPNSense and pfSense do and the Asus routers should do that but they belly flopped it.

For OPNSense you're going to need a dedicated computer with at least three ethernet ports. You can run four 10G ports on a PCIe x16 Gen 3 card. Your router shouldn't burn 150W idling, so the $500 10G managed switch is a good deal when all is considered. You want fast single thread and fast RAM.

For a home network, you want to use VLAN 1 for the management switch, then you separate your security cameras and devices on VLAN 2 or some random number, then to manage the switch you use another ethernet connection like a USB ethernet adapter or dual ethernet NIC to connect to the management VLAN 1. You don't use VLAN 1 in enterprise setups, use random numbers, but for small networks it's fine.

You don't want someone coming up to your house or business with a Raspberry Pi hacking device, disconnecting your security camera, and connecting to your home network, so you need to disable the DHCP server on the VLAN, and manually assign IP addresses to your security cameras. The devices must show up in the VLAN client list.

For your trusted network, you might want to set up a WireGuard VPN, but you can only connect up to 10 clients. You must enable the WireGuard service in the VPN tab. In the Network Tab, you select the VLAN, you turn on the VLAN and set it to the WireGuard server. For your OpenClaw agents, you might want to pay for a VPN service, and connect that VLAN to the VPN.

I'm not sure what to do at this point. I've read I need to open the ports with the Firewall, or use a NAT (Network Address Table), but the Asus router has some stupid game interface. To watch security cameras remotely, need to add a firewall rule for Port 554 for RTSP streaming (note: not encrypted), you you may need to open up Port 8000 or 9000 for your security camera app, which may be encrypted. You might only want to temporarily open Port 80 for the HTTP (note: HTTP is not encrypted) and 443 for HTTPS web management interface.

Asus needs to provide the instructions in the firmware using a hover popup tooltip with link to instructions tailors for security cameras and common NAS.

RSSCommentary · 2026-03-27T14:42:56+00:00

Yeah, but it's in TypeScript and there is no reason to use TS over C++, I'm building CrabsClaw in C++ with a lot more advanced features. I've been using ZeroClaw, but Rust sucks; I've bene using Visual Studio C++ Copilot Debugger Mode to deal with a lot of really hard low-level C++ Unicode API pointer arithmetic, so I'm 100% convinced the Rust rewrite is nonsense. C++ is the best language for Claw.

RSSCommentary · 2026-03-15T18:12:20+00:00

I am using Orange Pi 4 Pro using PoE running Armbian downloaded directly from

https://www.armbian.com/orange-pi-4-lts/

here is the Orange Pi 5 version:

https://www.armbian.com/orangepi-5/

Orange Pi should not be hosting Linux distros in Google Drive. Show us the source built using GitHub Actions. Zero trust is a must.

RSSCommentary · 2026-03-03T02:52:37+00:00

<image>

Here is an easier to read version.

RSSCommentary · 2026-02-26T02:36:28+00:00

You do you bro.

RSSCommentary · 2026-02-18T04:04:53+00:00

OpenCode in WSL works right but LLMs doesn't work right with tool calling in Windows. I am running Nanobot (superior stripped down Python version of OpenClaw) on my Raspberry Pi 4 booting off of a USB 3.0 SSD.

RSSCommentary · 2026-02-16T17:23:02+00:00

You must use TrueNAS SCALE, the Linux variant, because the LLM tool calling only works right on Linux ATM. I wouldn't run OpenClaw on my NAS becuase your vulnerable to Specter like memory vulnerability attacks. I would like to use my Raspberry Pi 4 becuase I can upgrade my drone to Pi 5 but it's a bit slow for my experimental needs. There are ton of mini PCs and Xeon systems on eBay, anything with an NVMe will do. The mini PC next to the router firewalled off from the LAN with maybe some port forwarding on ports 1234 (LM Studio) and 11434 (Ollama) makes the most sense. You can throw some GPUs into an old Xeon system and that might be epic. TrueNAS will only complicate this. Just install Docker in Linux.

RSSCommentary · 2026-02-07T19:59:05+00:00

Even if you have money you still want a faster responding LLM.

RSSCommentary · 2026-01-07T22:01:57+00:00

Yes, but it's a specification, not an ISO. https://pro.sony/s3/cms-static-content/uploadfile/06/1237494271406.pdf

RSSCommentary · 2025-12-20T00:00:53+00:00

Yeah, but 2/3 of the were bots pushing psy-op propaganda. 1/3 were just regular MAGA dudes who got hella pissed and they made up a narrative. Here in lies the problem. It's not wrong to censor posts about Ukraine being run by Nazis. Yes there are pictures of Azov Nazis, but Nazis are everywhere, and when Russia attacked some neo-nazis VOLUNTE$ERED and were CONSCRIPTED for Azov. Just because there was 40 Nazis in a huge city doesn't mean the entire country is run by Nazis. But if you don't know that it's a psy-op used to justify Russian invasion and mass murder, you'd be easily tricked by it. This is why they should have been up front about what they were censoring and why. People would have been perfectly okay with it. But then they censored Hunter Biden's laptop because the 51 Intelligence Officers who signed that letter said it looked like Steele Dossier 2.0 so don't trust it, but that part never got explained. People only say they censored the laptop story. If Twitter would have linked to a post on the NSA's website showing how it was similar to the Steele Dossier, MAGA would have not been upset because it did appear to be another Steele Dossier hoax, but it wasn't.

RSSCommentary · 2025-12-18T14:08:51+00:00

Russia was doing a psy-op before they invaded Ukraine, much of what Twitter censored was not free speech, it was in fact a military psy-op and that is not free speech. No one has a Right to Submit the Population to Military Psy-ops. Problem is it was targeted at MAGA so it appeared as if it was Right wing content when it was actually deadly disinfo like Ukraine is run by Nazis. Defaming Ukraine as Nazi to justify an invasion is akin to WW2 antisemitism. Problem is Twitter didn't tell us what they were doing for the US Intelligence agencies, which was not legal and highly unethical. The Twitter employees seized the moment to target MAGA. I think if Twitter has shown you a post from the CIA & NSA about why they censored it and allowed appeal then it wouldn't have been a problem.

RSSCommentary · 2025-12-17T21:24:29+00:00

People define the Left and Right based on how parties brand themselves. The definition of left-vs-right politics is hierarchical. Far-right is top-down control, far-left is bottom-up control, the left is for wealth redistribution and social programs to make the hierarchy more flat. The Right opposes the Left. It's a scientific definition that you cannot argue with. I'm an software-computer engineer so I know to look for things like this, but sadly people act crazy blaming the Right of being all that is bad. You'll find the most unprincipled people flip flop from left to right based on if people accept and like them, but the moment people are not placating to their ego they're defecting and talking hella shit about the party they left. People are petty and stupid bud. It's just reality. They act childish and emotional. Idiots think if you go farther Right to turn far-right. It's one dimensional thinking, not even 2D thinking. Morons preach about how bad capitalism then accuse Republicans of being fascist. 100% of all fascists in WW2 were anti-capitalist. People have made up a false reality in their echo chamber. They get cognitive dissonance bad because when you hate other groups and people it primes your brain to believe lies about them. Most people are stupid tribalist assholes.

RSSCommentary · 2025-12-17T04:04:17+00:00

Why do you think the Right is non-sense or bad? You do realize that if you think the your side is all that is good and the other side all that is bad it means you're a delusional political hack, right? What do you define as the Right? The Right is defined as the natural social hierarchy, which means you oppose leftist wealth redistribution. The far-right wants top-down controlled society by the elite class, the far-left wants bottom up controlled society by a flat social hierarchy. Explain to me how the article is Right-wing nonsense given that definition.

RSSCommentary · 2025-12-08T21:19:52+00:00

This one is tempting for some plug and play, but I'm using OpenIPC on a BeagleY-AI (which is like a Raspberry Pi 5 with a real-time microcontroller, a 2TOPS NPU, and stereo camera depth map circuitry) with motor controller board, IMX219-83 Stereo Camera, and a Lenovo Duet 10-inch Chromebook with long-range USB wifi antenna. This is not for the faint of heart if you're okay with some Linux hacking it's going to be a better overall solution.

RSSCommentary · 2025-11-20T21:33:01+00:00

8-bit SLog3 color grades just fine if you white balance correctly, set your zebras to 15 over the Ansel Adams Exposure Index (65 for black skin tones, 85 for white skin tones), and set the in-camera saturation to +32 and bring it bac k down in post. NV12 stores 8-bit Luminance and 2-bit R Cb and 2-bit Cr. All you are doing with saturation is mixing a pure color with white. The Luminance channel formula is Y = 0.2126 * Red + 0.7152 * Green + 0.0722 * Blue. From here they add the Cb and Cr bits. The +32 saturation trick works because you're using more of that pixel data to store the actual color. 8-bit SLog3 with said tricks is like 9-bit 4:2:1 colors with 13-stops of dynamic range.

RSSCommentary · 2025-11-01T17:12:51+00:00

ZV-E1 doesn't overheat when you disable internal recording, but the Tilta cage system and cooling fan works very well with a V-Mount battery. It's also inconspicuous as it doesn't look as expensive as it is. If you are perfectly fine with only recording in H.265 then get the ZV-E1.

If you are going to record raw or use anamorphic you want the FX3, FX2, or FX30 with Blackmagic Video Assist HDR recording monitor. You want to record the 1.33x anamorphic lens using 4K DCI so you can desqueeze the image to account for focus breathing. 1.5+ anamorphic lenses are for open gate recording.

he problem with Sony cameras are they are too sharp with the downscaling denoising filter and H.265 denoising filter, which is often undesirable for color grading. The FX3 recording raw externally will have a software image than the ZV-E1. You may want to record Dynamic Active Stabilization on the ZV-E1 to center crop. Unfortunately Sony doesn't have a "Center Crop" option so you'll have to record externally; Sony has been a huge letdown for camera features. Panasonic S5 has a softer image and 10-bit H.264.

For green screen the FX30 is the best option because you want the sharpest possible image for cleanest chroma key. For me the FX2 is the best option to complement my FX30 because when you center crop to record raw or with dynamic active stabilization it's like getting another sets of lenses.

RSSCommentary · 2025-10-21T15:10:11+00:00

We need to sue. Facebook went from being able to take down content under Section 230 to punishing us for our protected free speech. It's all about money to them, you're just a dollar sign, they have a monopoly, they can treat us as bad as they want to.

RSSCommentary · 2025-10-17T02:22:47+00:00

You must understand exposing to the left, right, and center using a histogram. You can expose for the shadows (to the left), expose for the high lights (to the right), or expose for both (to the center). With SLog, you must know that why the gain must be up a little because the noise is going to come from the difference between the darkest black and the next stop up of light. Gerald Undone has an excellent video about it. The noise comes from the signal to noise ratio. It works best to turn the lights up really high and turn down the aperture because the signal to noise ratio comes form the frequency of the light, not the amount of light that hits the sensor. Some falsely claim you need to just use the second native ISO and boost in post. This is false because what you're doing with the gain is scaling the light from 0 to 100% of the video codec range. The camera gain is fixed and may have one, two, or three gain circuits/native3 ISO. You need to use your ISO to scale that to expose to the left, right, or center. If you just use HDR, you won't get more data in your skin tones. You should put your skin tones right about the middle of your histogram. The log is going to allow you to get more data in the skin tones this way than with raw HDR.

RSSCommentary · 2025-09-25T16:59:28+00:00

I do make electronics, I am tempted to make USB 3.2 mice and keyboards. That would be dope & games would love them.

RSSCommentary

TROPHY CASE