A couple of days ago, I successfully installed the free version of Zenarmor on OPNsense v25.7.8. During the install, Remote Elasticsearch Database was an option that appeared during the wizard. I used it and setup Elasticsearch on a separate computer. Everything was working great.
Today, I upgraded the hard drives in my OPNsense box and did a clean re-install of OPNsense. Installing Zenarmor was the last step. During the install, Remote Elasticsearch Databas is not listed as an option, only local Elasticsearch or local SQLite.
Any thoughts on why it's not showing up as an option in the wizard?
They decided to put remote elasticsearch option and log streaming behind a paywall.
I think Zenarmor is one of the worst examples of reverse feature creep I've ever seen in an application.
At the time, Sensei was actually one of the reasons that made me decide to switch from pf to OPN. Paid for home license for two years but after losing features year after year it was not worth it in the end. Looks like they are still trying to find ways to limit their application.
Hi all,
We sincerely apologize for the inconvenience, but we have detected extensive misuse of such features for commercial purposes. Despite our warnings, the misuse continues. We understand that this is not the fault of those who are not abusing the system, but unfortunately, we are compelled to take some measures due to the majority who do misuse it. While taking this step, we have also considered our valuable free user base. We believe you can continue using local Elasticsearch by increasing existing resources instead of creating a new Elasticsearch server.
Quote from: sy on December 04, 2025, 01:08:33 PMWe believe you can continue using local Elasticsearch by increasing existing resources instead of creating a new Elasticsearch server.
Yea I am sorry but no.
You can not do this on a bare-metal devices, such as any miniPC or DEC used to run OPNsense, which is the majority of the user base. You are resource limited.
This actually created another performance problem for ZA and Throughput. Cause one of the ways how to get higher throughput, e.g better performance, was to move the DB on a remote destination so it is not eating up into the Single core performance.
Regards,
S.
Configure a firewall port forward or a TCP reverse proxy from localhost:9200 (or whatever ZA/elasticsearch uses) to the destination host, maybe?