"Recent posts
#1
26.7, 26.10 Series / HA setup cannot access gui on ...
Last post by pftoopn - Today at 04:58:10 AMHi, I'm running opnsense 26.7.8. I'm trying to configure it for HA. The master is on a Dell computer. The backup is on a VM. I have the master LAN set to 10.10.60.2 with VIP of 10.10.60.1. The backup has IP address 10.10.60.3. I cannot connect to the backup. The connection is refused. Both routers LAN setup is using LAGG with LACP on a netgear switch. What could be the issue?
To add more context, I can ping each routers IP from shell. The only network on the vm is the 4 port passed through nic. Option 11 to restart all services in the terminal works sometimes.
To add more context, I can ping each routers IP from shell. The only network on the vm is the 4 port passed through nic. Option 11 to restart all services in the terminal works sometimes.
#2
Development and Code Review / OpenSiruVault: Upcoming Beta ...
Last post by qtpl.svx - Today at 03:17:22 AMOpenSiruVault: OpenZFS Storage Capabilities for OPNsense | Community Beta
Hello OPNsense community,
I'm excited to introduce OpenSiruVault, an initiative to bring OpenZFS-powered storage capabilities into the OPNsense ecosystem.
OPNsense has built a strong reputation as an open, flexible and extensible firewall platform. We see an interesting opportunity to extend this ecosystem with storage capabilities while staying true to the principles of openness, transparency and community collaboration.
What is OpenSiruVault?
OpenSiruVault is an OpenZFS-based storage plugin initiative for OPNsense.
Our objective is to make storage services easier to deploy and manage alongside network infrastructure, opening up possibilities for home labs, SOHO environments and small and medium businesses.
Current Development Status
We are starting with a focused implementation:
We want to be transparent about the current scope rather than advertise features that are still under development.
We are inviting our first 50 community testers!
We would like to invite OPNsense users, FreeBSD enthusiasts, OpenZFS users, homelab builders and infrastructure professionals to participate in our initial community beta.
We are particularly interested in feedback on:
How to Join the Community Beta
If you are interested in participating, please reply to this thread or send me a private message with a brief introduction about your OPNsense setup and intended testing environment.
We will share beta access and installation instructions with selected participants.
Important Testing Guidance
This is an early-stage beta. Testing on real hardware is most welcome, as it will help us understand hardware compatibility and real-world behaviour.
However, please use a dedicated test system, disposable VM or dedicated test disks. Do not experiment with production storage or valuable data. Maintain independent backups before testing any storage configuration.
A Little About Us
We are QRAXA TECHNOLOGIES, an India-based infrastructure technology company working across FreeBSD, OpenZFS, storage systems, servers and infrastructure software.
OpenSiruVault is our effort to contribute another useful capability to the OPNsense ecosystem.
We believe the best way to build a product for this community is to develop it openly, listen carefully and improve through real-world feedback.
I will actively follow this thread, participate in discussions, answer technical questions and share development updates.
Looking forward to hearing your thoughts and building this together with the OPNsense community!
Thanks,
OpenSiruVault Team
Hello OPNsense community,
I'm excited to introduce OpenSiruVault, an initiative to bring OpenZFS-powered storage capabilities into the OPNsense ecosystem.
OPNsense has built a strong reputation as an open, flexible and extensible firewall platform. We see an interesting opportunity to extend this ecosystem with storage capabilities while staying true to the principles of openness, transparency and community collaboration.
What is OpenSiruVault?
OpenSiruVault is an OpenZFS-based storage plugin initiative for OPNsense.
Our objective is to make storage services easier to deploy and manage alongside network infrastructure, opening up possibilities for home labs, SOHO environments and small and medium businesses.
Current Development Status
We are starting with a focused implementation:
- NFS: Initial implementation available for community evaluation.
- OpenZFS: Storage foundation and integration work.
- SMB: Not yet available. Samba is not currently available as a supported package in the OPNsense repositories. We are working on the packaging and integration required to make this possible.
- iSCSI: Not currently planned. We would first like to understand whether there is sufficient demand from the community before prioritising it.
We want to be transparent about the current scope rather than advertise features that are still under development.
We are inviting our first 50 community testers!
We would like to invite OPNsense users, FreeBSD enthusiasts, OpenZFS users, homelab builders and infrastructure professionals to participate in our initial community beta.
We are particularly interested in feedback on:
- Installation and integration with OPNsense.
- Storage configuration and management workflows.
- NFS functionality and interoperability.
- Stability, performance and resource utilisation.
- Usability, documentation and future feature priorities.
How to Join the Community Beta
If you are interested in participating, please reply to this thread or send me a private message with a brief introduction about your OPNsense setup and intended testing environment.
We will share beta access and installation instructions with selected participants.
Important Testing Guidance
This is an early-stage beta. Testing on real hardware is most welcome, as it will help us understand hardware compatibility and real-world behaviour.
However, please use a dedicated test system, disposable VM or dedicated test disks. Do not experiment with production storage or valuable data. Maintain independent backups before testing any storage configuration.
A Little About Us
We are QRAXA TECHNOLOGIES, an India-based infrastructure technology company working across FreeBSD, OpenZFS, storage systems, servers and infrastructure software.
OpenSiruVault is our effort to contribute another useful capability to the OPNsense ecosystem.
We believe the best way to build a product for this community is to develop it openly, listen carefully and improve through real-world feedback.
I will actively follow this thread, participate in discussions, answer technical questions and share development updates.
Looking forward to hearing your thoughts and building this together with the OPNsense community!
Thanks,
OpenSiruVault Team
#3
26.7, 26.10 Series / Re: Does ISC’s KEA support Dyn...
Last post by (MARLOO) - Today at 03:00:07 AMQuote from: loaderladdy on November 01, 2026, 05:15:26 PMsearching my OPNsense filesystem I cannot find Kea's hook file "libddns_gss_tsig.so.What I want to know is there a way to install the necessary Kea GSS-TSIG file on OPNsense? "
it is not installable as a package .
OPNsense package isn't built that way..there is no file to copy in
Let Windows clients self-register via option 81 (Client FQDN), or move only D2 (kea-dhcp-ddns) to a Linux VM built with Kerberos enabled.
Don't use a shared-key TSIG on an AD-integrated zone set to Secure only
On the power cut: the DC is the real dependency, not the DHCP host --> the clients can register themselves once it's up
#4
26.1, 26.4 Legacy Series / Re: Unbound reporting stop wor...
Last post by wincent - Today at 02:53:46 AMIt works for me! The Unbound DNS Reporting is back. If you also have the same old platform and need to use the Unbound reporting function, you can also follow @Rick's method. Don't forget to lock the package when you're done.
Code Select
pkg lock py313-numpy #5
26.7, 26.10 Series / Re: ISC➞Kea migration
Last post by chemlud - November 04, 2026, 10:28:27 PMSo basically we have here a critical parameter which can be set from the GUI, but not be reversed?
What ist the fall-back, if I can't reach the opnsense anymore after switiching to Kea?
What commands do I have enter in the console to make static ARP go away on the infterface level?
What ist the fall-back, if I can't reach the opnsense anymore after switiching to Kea?
What commands do I have enter in the console to make static ARP go away on the infterface level?
#6
26.7, 26.10 Series / Re: ISC➞Kea migration
Last post by Monviech (Cedrik) - November 04, 2026, 09:03:56 PMI think there were some fixes that remove the staticarp flag after a reboot if ISC plugin is not installed. But better plan having administrative access anyway. I wouldnt do this remotely to be honest.
#7
26.7, 26.10 Series / Re: ISC➞Kea migration
Last post by chemlud - November 04, 2026, 08:59:30 PMOk, thanks. So what is correct way to avoid loosing access to interfaces while moving from ISC to KEA, when static ARP was enabled in ISC?
If I read the above thread correct it is not sufficient to disable static ARP in ISC to "reset" the interface ot non-static ARP.
If I read the above thread correct it is not sufficient to disable static ARP in ISC to "reset" the interface ot non-static ARP.
#8
Russian - Русский / Re: os-xray — плагин Xray-core...
Last post by cxmorgan - November 04, 2026, 08:48:20 PMДобрый день! Поставил форк от SpyLive, но у меня со старта не работает proxytun2socks
curl --socks5 127.0.0.1:10808 -s -o /dev/null -w "%{http_code}" https://1.1.1.1 --max-time 10
301
можете подсказать что сделать?
ps. разобрался, но почему то интерфейс нерабочий
curl --socks5 127.0.0.1:10808 -s -o /dev/null -w "%{http_code}" https://1.1.1.1 --max-time 10
301
можете подсказать что сделать?
ps. разобрался, но почему то интерфейс нерабочий
#9
26.7, 26.10 Series / Re: ISC➞Kea migration
Last post by Monviech (Cedrik) - November 04, 2026, 08:26:13 PMSince the pull request is open its not yet in any version, not even in development.
This will take some more time.
This will take some more time.
#10
26.7, 26.10 Series / Re: WAN_DHCP6 learns OPNsense ...
Last post by Patrick M. Hausen - November 04, 2026, 08:10:32 PMYou almost certainly have the two networks not quite as separated as you think they are.
