Virtual device to act as proxy firewall

[iamcnunn]

Hi all,

I want to be able to monitor internet usage across my internal home LAN, my router does not have the capability to do this.
This is an approximation of my curent setup: (and forget the direction arrow for DHCP, its JUST an icon, not traffic direction)

and what I think I want would look something like this:



I'm not particularly concerned about the security aspects here, so any "work" the firewall is doing is going to be the proxy aspect, not necessarily filtering.
I still want the router to provide DHCP (I assume that pointing the DHCP "gateway IP address" to the new firewall is the bit that is going to change where clients get "internet", so if there is a problem with proxmox (like its turned off) I can simply change the DHCP advertised gateway back to itself. Might not be that simple!
Am I on the right track here? and if so, can anyone suggest a suitable firewall virtual device/appliance?

 

[fba]

Hi iamcnunn,

there are for sure many appliances available, e. g. OPNsense, which can provide statistics espsecially in combination with ntopng.

The DHCP-Part described is a bit unusual nevertheless. You would have to block the redirect messages of the firewall. which it will send, if it has to route within it's own network. It might be easier to disable the dhcp in the router and let the firewall appliance do it. If the vm is disabled, enable the router's dhcp again.