Topics
Browse posts by category and tag — every topic we cover, with the latest pieces under each.
Tags
- #opnsense 18
- #homelab 6
- #firewall 5
- #hardware 4
- #protectli 3
- #appliance 2
- #buying-guide 2
- #failover 2
- #mini-pc 2
- #network-security 2
- #networking 2
- #security 2
- #acme 1
- #application-control 1
- #arm 1
- #beginner 1
- #beginners 1
- #blocklist 1
- #carp 1
- #deciso 1
- #dns 1
- #dns-filtering 1
- #firewall-rules 1
- #gateway-groups 1
- #getting-started 1
- #ha 1
- #haproxy 1
- #high-availability 1
- #https 1
- #ids 1
- #installation 1
- #intrusion-detection 1
- #iot 1
- #ips 1
- #learning-path 1
- #lets-encrypt 1
- #multi-wan 1
- #nat 1
- #network-segmentation 1
- #ngfw 1
- #pfsense 1
- #pfsync 1
- #port-forwarding 1
- #proxmox 1
- #raspberry-pi 1
- #remote-access 1
- #reverse-proxy 1
- #road-warrior 1
- #routing 1
- #sensei 1
- #setup 1
- #suricata 1
- #training 1
- #unbound 1
- #use-case 1
- #virtualization 1
- #vlan 1
- #vpn 1
- #web-filtering 1
- #wireguard 1
- #zenarmor 1
Categories
Hardware 4 posts
- Best OPNsense Hardware Appliance for Home: Protectli, Deciso, and What to SkipThe best OPNsense hardware appliance for home use comes down to NIC chipset, AES-NI, and honest sizing. Here are the purpose-built picks across three price tiers.
- OPNsense on Raspberry Pi: What Actually WorksOPNsense ships amd64-only images, so it will not boot on a Raspberry Pi. Here is what the Pi can still do for your firewall, and what to buy instead.
- Best Mini PC for OPNsense Homelab 2026: NIC and CPU SizingChoosing the best mini PC for an OPNsense homelab comes down to dual Intel NICs, AES-NI, and enough CPU headroom for Suricata. Here is what works.
- Best Hardware for OPNsense in 2026: Protectli and Mini-PCsHow to size CPU, NICs, and RAM for OPNsense in 2026, with picks across three tiers: fanless Protectli vaults, mini-PCs, and refurbished enterprise gear.
Firewall 3 posts
- OPNsense Port Forwarding: NAT Rules That Actually WorkOPNsense port forwarding needs a destination NAT rule plus a filter rule that matches the internal IP. Here is the correct order and the hairpin fix.
- OPNsense Firewall Rules Explained for BeginnersA beginner walkthrough of OPNsense firewall rules covering rule evaluation order, every field, block vs reject, aliases, and reading the live log.
- How to Install OPNsense on Proxmox VE: Step-by-Step GuideA walkthrough of how to install OPNsense on Proxmox VE: WAN and LAN bridge setup, VM sizing, the installer wizard, and interface assignment.
Networking 3 posts
- OPNsense Multi-WAN Failover with Gateway GroupsConfigure two ISP uplinks on OPNsense with gateway groups for automatic failover or load balancing: monitoring, NAT, DNS, and pitfalls that break it.
- HAProxy Reverse Proxy on OPNsense with Let's EncryptUse the os-haproxy and os-acme-client plugins to put one HTTPS front end in front of every homelab service on OPNsense, with automatic Let's Encrypt certs.
- OPNsense VLAN Configuration: Segment IoT, Guest, and TrustedHow to create and enforce VLANs on OPNsense to isolate IoT devices, guest Wi-Fi, and your trusted LAN, with the firewall rules that block inter-VLAN traffic.
Security 3 posts
- OPNsense DNS Blocklists: Unbound Setup and TuningOPNsense blocks ads and tracker domains natively through Unbound DNSBL. How to choose lists, scope them per VLAN, and fix the breakage they cause.
- Zenarmor (Sensei) on OPNsense: Free NGFW Setup and TuningInstall and tune Zenarmor (formerly Sensei) on OPNsense for application-aware filtering and web category blocking, plus what the Free edition includes.
- OPNsense Suricata IDS/IPS: Installation and Tuning GuideSet up Suricata as an inline IPS on OPNsense: install the plugin, enable ET Open and Abuse.ch rulesets, choose alert or drop, and tune out false positives.
Getting Started 2 posts
- OPNsense Training: A Self-Paced Learning PathA staged OPNsense training path for homelab operators: seven lab exercises from first install to CARP failover, each with a build and a verification step.
- OPNsense Initial Setup: Complete Installation Guide (2026)Install OPNsense on a Protectli vault or mini-PC step by step: installer options, interface assignment, WAN and LAN setup, and first-boot hardening.