@lexinova @buyeuropean@feddit.uk @buyeuropean@mastodon.social @mikrotik Retaining your Unifi APs and running OPNSense on a pick-your-own-x86 router has plenty of appeal.OPNSense is more user-friendly than Mikrotik, IMO. And, under the UI it's regular FreeBSD which you can log into and diagnose with familiar networking tools.The APs don't need a 24/7 controller - although a VM running the Ubuntu based unifios works just fine. In fact it looks like you might be able to manage/configure them from a smart-phone app (haven't tried this).The APs can all be placed in a management VLAN with no external access while running different VLANs for their client's wifi traffic.In theory, the APs could still snoop by masquerading as a client but that has a higher risk of discovery which would certainly annoy the heck out of their entire enterprise market which is their bread and butter.I don't think you'll find Open Source APs that work as well as the unifi ones (or similar commercial offerings). The product range gives a lot of deployment flexibility and the integrated configuration management is pretty nice - as you know.