Hi, fellow OPNsense users!
We have been using OPNsense for some time now, currently alongside our hardware FW, but intend to move to a HA OPNsense setup soon. We don't want to run OPNsense as a virtual machine on ESXi or any other hypervisor, but also think that it would be a shame to waste good computing power :)
Is there any good solution to run jails / bhyve inside OPNsense without tampering with the BSD system? I imagine that this would potentially hurt upgrades.
I would want to run a few low prio encoding jobs, which should not bog down the main OPNsense system in case of, say, an attack - and also are encapsulated sufficiently to not pose any security risk.
I have only found one thread (Docker in the OPNsense environment?) which seems to be related - is this really such an unlikely use case?
Cheers,
Bernhard
We have been using OPNsense for some time now, currently alongside our hardware FW, but intend to move to a HA OPNsense setup soon. We don't want to run OPNsense as a virtual machine on ESXi or any other hypervisor, but also think that it would be a shame to waste good computing power :)
Is there any good solution to run jails / bhyve inside OPNsense without tampering with the BSD system? I imagine that this would potentially hurt upgrades.
I would want to run a few low prio encoding jobs, which should not bog down the main OPNsense system in case of, say, an attack - and also are encapsulated sufficiently to not pose any security risk.
I have only found one thread (Docker in the OPNsense environment?) which seems to be related - is this really such an unlikely use case?
Cheers,
Bernhard
"