Text only | Text with Images

OPNsense Forum

English Forums => 26.1 Series => Topic started by: dbd on January 29, 2026, 01:47:07 PM

Title: Source NAT vs Outbound ?
Post by: dbd on January 29, 2026, 01:47:07 PM
Hi.
Just upgraded a small OPNSense setup from 25.7.11 to 26.1. It went well, including the migration of rules to the new system (although this was a very simple setup, and I'm a bit worried about my bigger production system which has thousands of rules, in a HA pair of OPNSense ...)
One thing I wonder now with the new rules interfaces, is the difference between NAT -> Source NAT and NAT -> Outbound (as the later is obviously a Source NAT too). Could someone clarify ? Will a later migration process be needed to migrate Outbound rules to Source NAT ? Or will this just be a manual process ?
Title: Re: Source NAT vs Outbound ?
Post by: Monviech (Cedrik) on January 29, 2026, 01:49:01 PM
https://docs.opnsense.org/manual/nat.html#source-nat

It's not finished yet, Outbound NAT is still the main page. About plans and possible migration, we don't know yet, it might be a roadmap item for a new release.
Title: Re: Source NAT vs Outbound ?
Post by: OPNenthu on February 12, 2026, 04:43:43 AM
I don't see a "static port" option on the new Source NAT interface (maybe that's one of the TBD items) but can I assume that source port randomization is still done by default? 

I'm currently using the Hybrid mode and tempted to try and migrate some manual rules from the Outbound UI but leave the automatic rules in place, and change it back to Automatic mode.  Bad idea at this time?
Title: Re: Source NAT vs Outbound ?
Post by: keeka on February 12, 2026, 09:54:04 AM
Quote from: OPNenthu on February 12, 2026, 04:43:43 AMI don't see a "static port" option on the new Source NAT interface

I was wondering the same. There is the 'Translate Source Port' field. Maybe setting this to the same port/alias as 'Source port', equates to static port mapping?
Title: Re: Source NAT vs Outbound ?
Post by: ProximusAl on March 23, 2026, 02:21:13 PM
I was literally looking at this right now.

I migrated most of my "Outbound" NAT rules to "Source NAT" but also noticed the missing "Static-port" option.

I saw a post by franco saying that Outbound NAT will become legacy, so thought I'd jump the gun, but the static-port option remains a bit of a mystery in Source NAT
Title: Re: Source NAT vs Outbound ?
Post by: OPNenthu on March 23, 2026, 02:24:31 PM
I noticed it was added a couple weeks ago: https://github.com/opnsense/core/issues/9928
Title: Re: Source NAT vs Outbound ?
Post by: ProximusAl on March 23, 2026, 02:34:05 PM
Oooooh nice.

Would be great to see this in a 26.1.x release :)
Title: Re: Source NAT vs Outbound ?
Post by: franco on March 23, 2026, 05:05:23 PM
Will be in 26.1.5.


Cheers,
Franco
Title: Re: Source NAT vs Outbound ?
Post by: ProximusAl on March 23, 2026, 07:05:34 PM
Quote from: franco on March 23, 2026, 05:05:23 PMWill be in 26.1.5.


Cheers,
Franco

Thanks Franco..... that's brilliant
Text only | Text with Images