Menu

Show posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Show posts Menu

Messages - mcedars

#1
First and foremost, a heartfelt "thank you" for the response, flexibility and community spirit.

Both options are great. I'd be happy to contribute back to the community, relaying our experience within the scope of our specific use case. Softether is pretty broad in its configuration options. I'll put together an outline and DM you (mimugmail) the draft. The main thing to understand is that it essentially operates its own independent IP stack, and hence would best be separated from both the kernel and IP address of the OPNsense instance. Once you wrap your head around that, everything becomes pretty straightforward as you configure routing between two separate virtual devices with separate IP addresses that peacefully coexist.

Thinking about it, the final disposition for the softether package may probably best be within the mimugmail community repo. We already use it for the cloudflared package as undoubtedly many others do for the vast array of other useful packages it brings that are "just outside" what would otherwise be within the core scope of the OPNsense project itself, and IMHO that would aptly be true for softether as well in this case.

Thanks again,

Matt
#2
Quote from: franco on August 29, 2025, 12:30:19 PM...we're going to remove it in 25.7.3

Hi,

If there is any way to change your mind or to merely plead for this decision to be reversed, please reconsider. We have had great success with Softether on OPNsense for years, in production, for both road-warrior and site-to-site scenarios. It's in production on over a dozen instances serving quite a few sites and users.

It does require a touch of configuration (specifically not using its kernel IP NAT engine) but has been rock-solid and its removal from 25.7.3 would force us into a difficult bind regarding either delayed upgrades or a significant network overhaul.

Many thanks,

Matt