Messages

[Motivation:]

Hi, thanks a lot for chiming in directly and for building this project! It's always great to hear straight from the maintainer, and your transparent explanation definitely puts things into perspective. Especially knowing that the configuration stays entirely on the firewalls themselves.

Since you're here, I'd love to learn a bit more about the background of OPNexus:

• Motivation: What sparked the idea to build this? Were you scratching your own itch managing multiple boxes, or was something missing in the existing tools?
• Production use: Are you already running OPNexus in a production environment yourself (or managing multiple firewalls with it)?
• Roadmap: What are your future plans for the project? Are there specific features you're focusing on next?
• Licensing: Out of curiosity, what led you to choose the PolyForm Shield license over a traditional open-source license?

Hi everyone,I've come across a project called OPNexus (https://opnexus.dev and https://github.com/OPNexus-dev/OPNexus).
It presents itself as a self-hosted central management console for multiple OPNsense firewalls. But for free.

It is source-available (PolyForm Shield license), runs via Docker Compose, and claims to work purely through the OPNsense API.
I couldn't find any discussion about it in the OPNsense forum or elsewhere, so I wanted to ask:Has anyone here heard of OPNexus before?
Has anyone already tested or is currently using it?
Any experiences, impressions, or concerns (positive or negative)?

Thanks in advance for any feedback!

Hi everyone,
I'm running an OPNsense firewall with two separate WAN interfaces, each connected to a different ISP. Both WAN interfaces receive dynamic IP addresses via DHCP from the providers. I'd like to set up two independent OpenVPN servers, one on each WAN interface, both using UDP port 1194.
Is this possible, and if so, how can I configure it properly?

Here's some context about my setup:
WAN1: Dynamic IP via DHCP
WAN2: Dynamic IP via DHCP
Goal: Run one OpenVPN server on WAN1 (UDP 1194) and another on WAN2 (UDP 1194), each serving different clients or networks.

My questions: Is it feasible to run two OpenVPN instances on the same port (UDP 1194) when they are bound to different WAN interfaces?
How should I handle the dynamic IPs? As i understand you can set OpenVPN instances only to IP-addresses and not interfaces.
Would setting up Dynamic DNS (DDNS) for each WAN interface be sufficient, or are there other considerations?
Are there specific firewall or NAT rules I need to configure to avoid conflicts and ensure proper routing?
Any potential pitfalls or performance issues I should be aware of?

I'd appreciate any step-by-step guidance or pointers to relevant documentation. If anyone has a similar setup working, I'd love to hear about your configuration!
Thanks in advance for your help!