Hardware firewalls running OPNsense on dedicated devices like Protectli offer superior security and advanced routing features. They're built for one job and do it well. 

OpenWRT, primarily designed for Wi-Fi routers, provides flexibility but can struggle when tasked with complex firewall and routing functions. 

While OpenWRT can be configured to do it all, it's not optimal for advanced security setups, similar to all-in-one ISP solutions that prioritize convenience over security. 

Best practice involves separating network functions: use a dedicated hardware firewall/router (like OPNsense) for security and routing, and a separate device running OpenWRT or similar firmware for Wi-Fi. 

This approach ensures each component performs its specialized task efficiently, avoiding the compromises inherent in all-in-one solutions. 

 I gotta do some digging.  I just swapped my Unifi Security Gateway for OpnSense and am experiencing random internet drop offs.  I can still connect to it via the webUI but can't ping out on the WAN, rebooting fixes it for a few hours/days but I need to figure it out.  Are realtek ethernet ports as bad as Reddit makes it sound?  According to then it's Intel or nothing... 

 what do you like about OPnsense over pfSense?  I've been using pfSense since 2015. whenever I try to upgrade I always end up going back.  

 UI is so much better IMO, not to mention the questionable decisions/abuses of trust pfSense has made that has driven users to OPNsense. Both are good. I prefer OPNsense.