Fredric News

Tag: OPNsense

  • OPNsense WireGuard Client Handshake & Routing

    💡 OPNsense WireGuard Client Handshake & Routing — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for OPNsense WireGuard Client Handshake & Routing. WireGaurd Client hardware dependent issue References and Guidelines (NOTE) All of the cases below are issues that occur due to the declaration of a split tunnel. Possible solution with…

  • HomeLab OPNsense Topology: WAN, LAN, DMZ

    💡 HomeLab OPNsense Topology: WAN, LAN, DMZ — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for HomeLab OPNsense Topology: WAN, LAN, DMZ. L2 – NIC Definition L3 – IP band definition Total Interface name type NAT main purpose Band Allocation Use and Description WAN WAN Destination DHCP External Internet use /…

  • OPNsense Unbound DNS: Ad-blocking

    💡 OPNsense Unbound DNS: Ad-blocking — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for OPNsense Unbound DNS: Ad-blocking. References and Guidelines (NOTE) System Required: DNS Port forwarding Private domain registration References and Guidelines (NOTE) List instructing to allow the response even if the DNS query result includes a private IP address…

  • OPNsense Firewall XML Config Automated Git

    💡 OPNsense Firewall XML Config Automated Git — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for OPNsense Firewall XML Config Automated Git. 🔗 https://docs.opnsense.org/manual/git-backup.html Step0. Preparation (Github) Create SSH Keypair bash Copy mkdir opnsense ssh-keygen -f ~/opnsense/opnsense # 공개키 클립보드에 복사 cat ~/opnsense/opnsense.pub | pbcopy # 개인키 클립보드에 복사 cat ~/opnsense/opnsense…

  • OPNsense Internal CA & WebGUI SSL/TLS

    💡 OPNsense Internal CA & WebGUI SSL/TLS — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for OPNsense Internal CA & WebGUI SSL/TLS.

  • OPNsense Dynamic DNS (DDNS) with Cloudflare

    💡 OPNsense Dynamic DNS (DDNS) with Cloudflare — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for OPNsense Dynamic DNS (DDNS) with Cloudflare.

  • OPNsense Firewall Archi: Packet Filter & IDS

    💡 OPNsense Firewall Archi: Packet Filter & IDS — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for OPNsense Firewall Archi: Packet Filter & IDS. Installation Management Conceptual Definition IP Band Definition NAT system WireGuard to WAN References and Guidelines (NOTE) $$ \text{Client} \xleftrightarrow{[L3]tunnel/snat} \text{VPN Interface (Original Src)} \xrightarrow{[1]blocked} \text{WAN Interface (Dst)}…

  • HomeLab OPNsense Router & Firewall Setup

    💡 HomeLab OPNsense Router & Firewall Setup — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for HomeLab OPNsense Router & Firewall Setup. Step 0: Preparation Purchase Hardware Download Image 🔗 https://opnsense.org/download/ select amd64 → vga → downalod Create Bootable USB Disk bash Copy brew install balenaetcher –cask Boot BIOS entry: f2,…

  • WireGuard VPN on OPNsense: Server & Peer

    💡 WireGuard VPN on OPNsense: Server & Peer — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for WireGuard VPN on OPNsense: Server & Peer. References and Guidelines (NOTE) System Required: Required to reliably request a VPN instance endpoint from an external network Server in OPNSense Create instance and enable WG Instance…

  • HAProxy on OPNsense: SSL Offloading & Load

    💡 HAProxy on OPNsense: SSL Offloading & Load — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for HAProxy on OPNsense: SSL Offloading & Load. References and Guidelines (NOTE) OPNSense’s NAT provides very powerful L4 routing, but the HAProxy plugin may need to be utilized depending on the purpose specified in Features.…