Messages

1

Hardware and Performance / Recommend approach for Wifi APs

« on: October 07, 2024, 08:56:41 pm »

Regulations are forcing my client to update their firewall and access points.

Regulation call for 802.11ac or 802.11ax

They currently have about 15 802.11g APs and no more than 120 concurrent wifi users.

What equipment would work nicely with OPNSense for such a scenario?

2

24.7 Production Series / 24.7 Crash and Reboot Loop

« on: July 30, 2024, 12:03:58 am »

Hello,

I have opnsense virtualized in xcp-ng. I did upgrade to 24.7 and I found that the OS keeps rebooting. What seems to trigger it rebooting is visiting a website. I rolled back my VM twice and twice did the upgrade and twice had this crash/rebooting bug.

If you have idea on how I can collect logs for such an event, let me know, and I will provide the logs.

3

General Discussion / Re: Run two public servers on one IP with OPNSense

« on: April 27, 2024, 09:22:24 am »

Thanks, that worked half-way.

I got my second server working. But now my first server which is a docker contained nextcloud refuses to resolve.


edit: never mind figured  it out


had to point to my apache port under handlers

WOOOHOOO!!!

edit2:

I forgot to say, THANK YOU!

4

General Discussion / Run two public servers on one IP with OPNSense

« on: April 24, 2024, 09:17:19 am »

Please help me out, I spent the last two days swearing at my computer and following various HAProxy guides with no success. So I figured I'd ask for some help as I am making zero progress in achieving this goal.

Here's my struggle:

I have an XCP-NG box running OPNSense in a VM at 14.0.0.1:1776. I have been running a public facing Server1 for some years with great success, but now I need to run another server.

Server1 is located at 14.0.0.11 and server 2 is located at 14.0.0.22

I want server1.dogs.com to point to 14.0.0.11 and for server2.cats.net to point to 14.0.0.22. I want it to be accessible from WAN.

Both domains are on cloudflare.

So I figure I need some middle man server or plugin to point wan traffic to that will look at it and say: this visitor is going to server1.dogs.com so they are routed to 14.0.0.11 and this other visitor is going to server2.cats.net and he needs to go to 14.0.0.22.

I don't need this middle man to do anything with SSL or load balancing or . I don't care about having SSL on LAN. The servers I have running handle their own SSL. I just need it to see the URL that a visitor is going to and route them to the proper internal IP.

Please advise, what's the easiest way to do this?

I'm open to running a plugin or another VM or really anything.

5

24.1 Legacy Series / Re: kea-dhcpv4 does not start One or more hook libraries failed to load

« on: February 08, 2024, 10:57:33 pm »

I found that if CONTROL AGENT was started the KEA DHCP4 service failed to load.

Am I missing something? Is this intended operation?

6

24.1 Legacy Series / kea-dhcpv4 does not start One or more hook libraries failed to load

« on: February 08, 2024, 10:50:46 pm »

Hello,

I copied DHCP4 config to Kea, disabled DHCP4, and started KEA. But KEA does not start.

I rebooted computer. It still does not start

From general log search for KEA:

Code: [Select]

2024-02-08T13:46:19-08:00 Notice kernel <118>2024-02-08 13:46:19.103 ERROR [kea-dhcp4.dhcp4/90548.0x833b79000] DHCP4_INIT_FAIL failed to initialize Kea server: configuration error using file '/usr/local/etc/kea/kea-dhcp4.conf': One or more hook libraries failed to load
2024-02-08T13:46:19-08:00 Notice kernel <118>INFO/keactrl: Starting /usr/local/sbin/kea-ctrl-agent -c /usr/local/etc/kea/kea-ctrl-agent.conf
2024-02-08T13:46:19-08:00 Notice kernel <118>INFO/keactrl: Starting /usr/local/sbin/kea-dhcp4 -c /usr/local/etc/kea/kea-dhcp4.conf
2024-02-08T13:46:19-08:00 Notice kernel <118>Starting kea.

7

24.1 Legacy Series / Missing Tabs in Wireguard

« on: February 08, 2024, 07:43:41 am »

Hi, I'm trying to set up Wireguard, I had it previously set up via plugin. I've since resolved the plugin missing conflict for os-wireguard that came with the 24.1 opnsense update. But I have another problem.

I am following along with wireguard tutorials and they have access to tabs I do not see on my end.

Please see screenshots attached, mine is the dark mode one.