Topics
Browse everything OPNsenseLab publishes by category and tag: every topic covered here, with the most recent guides listed under each one.
New to OPNsense? Start with the self-paced OPNsense training path.
Tags
- #opnsense 18
- #homelab 5
- #firewall 4
- #hardware 3
- #beginners 2
- #buying-guide 2
- #failover 2
- #network-security 2
- #networking 2
- #protectli 2
- #remote-access 2
- #security 2
- #vpn 2
- #wireguard 2
- #10gbe 1
- #acme 1
- #appliance 1
- #application-control 1
- #arm 1
- #blocklist 1
- #carp 1
- #dns 1
- #dns-filtering 1
- #firewall-rules 1
- #gateway-groups 1
- #getting-started 1
- #ha 1
- #haproxy 1
- #high-availability 1
- #https 1
- #ids-ips 1
- #installation 1
- #intel 1
- #iot-security 1
- #ipsec 1
- #learning-path 1
- #lets-encrypt 1
- #mini-pc 1
- #multi-wan 1
- #nat 1
- #network-segmentation 1
- #ngfw 1
- #nic 1
- #openvpn 1
- #pfsense 1
- #pfsync 1
- #port-forwarding 1
- #proxmox 1
- #raspberry-pi 1
- #reverse-proxy 1
- #road-warrior 1
- #routing 1
- #sensei 1
- #setup 1
- #suricata 1
- #training 1
- #unbound 1
- #use-case 1
- #virtualization 1
- #vlan 1
- #web-filtering 1
- #zenarmor 1
Categories
Firewall 3 posts
- OPNsense Port Forwarding: NAT Rules That Actually WorkOPNsense port forwarding needs a destination NAT rule plus a filter rule that matches the internal IP. Here is the correct order and the hairpin fix.
- OPNsense Firewall Rules Explained for BeginnersA beginner walkthrough of OPNsense firewall rules covering rule evaluation order, every field, block vs reject, aliases, and reading the live log.
- How to Install OPNsense on Proxmox VE: Step-by-Step GuideA walkthrough of how to install OPNsense on Proxmox VE: WAN and LAN bridge setup, VM sizing, the installer wizard, and interface assignment.
Hardware 3 posts
- Best NIC for OPNsense: Intel i226-V, i350, and 10G PicksWhy Intel i226-V, i350, and X520 NICs are the safe OPNsense picks on FreeBSD, where Realtek fits, and the iperf3 checks to run before you trust one.
- OPNsense on Raspberry Pi: What Actually WorksOPNsense ships amd64-only images, so it will not boot on a Raspberry Pi. Here is what the Pi can still do for your firewall, and what to buy instead.
- Best Hardware for OPNsense in 2026: Protectli and Mini-PCsHow to size CPU, NICs, and RAM for OPNsense in 2026, with picks across three tiers: fanless Protectli vaults, mini-PCs, and refurbished enterprise gear.
Networking 3 posts
- OPNsense VLAN Setup: Trusted, IoT, Guest, and ManagementBuild four routed VLANs in OPNsense with an 802.1Q trunk, switch tagging, DHCP, inter-VLAN firewall rules, mDNS discovery, and isolation tests.
- OPNsense Multi-WAN Failover with Gateway GroupsConfigure two ISP uplinks on OPNsense with gateway groups for automatic failover or load balancing: monitoring, NAT, DNS, and pitfalls that break it.
- HAProxy Reverse Proxy on OPNsense with Let's EncryptUse the os-haproxy and os-acme-client plugins to put one HTTPS front end in front of every homelab service on OPNsense, with automatic Let's Encrypt certs.
Security 3 posts
- OPNsense DNS Blocklists: Unbound Setup and TuningOPNsense blocks ads and tracker domains natively through Unbound DNSBL. How to choose lists, scope them per VLAN, and fix the breakage they cause.
- Zenarmor (Sensei) on OPNsense: Free NGFW Setup and TuningInstall and tune Zenarmor (formerly Sensei) on OPNsense for application-aware filtering and web category blocking, plus what the Free edition includes.
- OPNsense Suricata IDS/IPS: Installation and Tuning GuideSet up Suricata as an inline IPS on OPNsense: enable the built-in engine, add ET Open and Abuse.ch rules, choose alert or drop, and tune false positives.
Getting Started 2 posts
- OPNsense Training: A Self-Paced Learning PathA staged OPNsense training path for homelab operators: seven lab exercises from first install to CARP failover, each with a build and a verification step.
- OPNsense Initial Setup: Complete Installation Guide (2026)Install OPNsense on a Protectli vault or mini-PC step by step: installer options, interface assignment, WAN and LAN setup, and first-boot hardening.
VPN 2 posts
- How to Set Up OPNsense as a VPN Server: WireGuard, OpenVPNSet up OPNsense as a VPN server with WireGuard: instance, peers, WAN rule, MSS clamp and client config, plus when OpenVPN or IPsec IKEv2 fits better.
- OPNsense WireGuard Road Warrior: Remote Access SetupExplains OPNsense WireGuard remote-access setup: instances, peers, interface assignment, firewall rules, client routing, DDNS, and troubleshooting.