Messages

Thanks for the reminder and guidlines.  I really appreciate it.  I have migrated everything.

Just wondering if OPNsense now is supporting Interface Group in NAT?  I have 7 tunnels tried using "Wireguard Group" in NAT and it seems experience is a lot snappier and latency is lower

What I see are both Source NAT and Outbound NAT.  If they are the same, why would OPNsense put those 2 if 1 is sufficient?  I'm using v26.7.3_8 community version.  Though, I tried Source NAT, it was able to address some connectivity problem when connecting to my SeedBox.

Oh wait.  It's just see "Outbound"  there's no trailing "NAT".  Are they different?

Thanks for the guide.  May I ask why SNAT?  Most guides use Outbound NAT and works perfectly as well

Same problem here.  I even regenerated new API.  No Luck

Hi!

Is there a guide on doing this?  The documentation found in OPNsense works only to non-Wireguard Interfaces.  My Present set-up port forwards all DNS queries to my Adguard home and it work flawlessly however, it doesn't work for Wireguard interfaces, Internet traffic stops.

MimuGmail

I've been getting this message when installing crowdsec ang Unifi

pkg: cached package <file name:> missing or size mismatch, fetching from remote

Then nothing happens

My immediate concern right now is my upload speed doesn't burst.  It's kept within 20Mbps for all Wireguard Servers.

When I fire-up my altalabs route10 router, both Download and Upload go all the way up almost to my subscribed speed.

Clearly. it has something to do with Firewall Rules or Nat

Can't figure it out for 3 years now

Dave

What if your VPN app is running in a client and not in OPNsense, How do we optimize the settings in OPNsense that would complement the VPN connection originating from a single machine?

@hoondi

We have to be patient and wait for mimugmail to update the plugin when he is ready

@meyergru

Do you happen to have a screenshot of your TS settings instead the xml format?

We have a similar issue.  In my case, if a client uses a VPN app, upload speed drops

What would be a good practice running Torguard App on Client Side?  Most of the guides found here are about running wireguard inside OPNsense.

What Firewall Rules and NATs need to be set for seamless flow of traffic both getting out and coming in?

Just a clarification.  Most guide uses "NAT Reflection:  Disabled".  What is the difference if you use system default?

Thanks for this guide.  I have a question though.  How should the firewall rules look like if wireguard and ProtonVPN is running exlusively in a client machine only?

@Seimus

There's a new Traffic Shaping feature in the Firewall Rule (experimental).  What would be a good practice for this?