installing opnsense

[Rasha2206]

Hello,

I want to install opnsense on my network, but I do not want it to be where if I have to shutdown my computer where the firewall is, it shuts down my internet. is there a way around this?

[Patrick M. Hausen]

OPNsense is a dedicated firewall appliance. If you shut down the appliance, no firewall. How do you expect this to work differently?

[Rasha2206]

I get your point. However, what I was trying to say is that I do not want to have an issue where if I have shutdown my computer and do maintenance on it where the firewall is, I do not want my internet to be down at the same time. I would like to have it where I can still use my internet while maintenance is being done on the computer with the firewall.

[doktornotor]

And I would like to keep my money and spend it at the same time.

[Patrick M. Hausen]

I get your point. However, what I was trying to say is that I do not want to have an issue where if I have shutdown my computer and do maintenance on it where the firewall is, I do not want my internet to be down at the same time. I would like to have it where I can still use my internet while maintenance is being done on the computer with the firewall.

Buy two computers, set up a high availability pair, upgrade each node at a time. This is how data centres like mine do it and it is well supported by OPNsense.

Again, how would you expect things to work? Every firewall/router product will be unavailable during updates.

[Rasha2206]

@doktornotor
you're are absolutely right, I would love to keep all of my money. Unfortunately, that is not possible.

[Rasha2206]

I get your point. However, what I was trying to say is that I do not want to have an issue where if I have shutdown my computer and do maintenance on it where the firewall is, I do not want my internet to be down at the same time. I would like to have it where I can still use my internet while maintenance is being done on the computer with the firewall.

Buy two computers, set up a high availability pair, upgrade each node at a time. This is how data centres like mine do it and it is well supported by OPNsense.

Again, how would you expect things to work? Every firewall/router product will be unavailable during updates.

thank you! you have answered my question.  I am not saying that I do not want a firewall.  However, I was saying that I do not want any downtime on my internet if something should happen where the firewall goes down or maintenance is being done.  Again thanks, I will try the high availability approach.

[Patrick M. Hausen]

Your Internet uplink and ISP have to support that setup. As far as I know it won't work with a PPPoE based DSL connections. If you can get a routed public /29 from your ISP, you are all set.

Also internally you will need some real business networking gear like switches, preferrably managed ones ...

[Rasha2206]

Your Internet uplink and ISP have to support that setup. As far as I know it won't work with a PPPoE based DSL connections. If you can get a routed public /29 from your ISP, you are all set.

Also internally you will need some real business networking gear like switches, preferrably managed ones ...

I don't have dsl.  The only internet in my area is spectrum.  I also do have managed switches that run on my network.

[Rasha2206]

And I would like to keep my money and spend it at the same time.

you're are absolutely right, I would love to keep all of my money. Unfortunately, that is not possible. :)

[Patrick M. Hausen]

If your use case is sufficiently business oriented and large, please do consider buying "official" appliances from Deciso to help the project. I can assure you they will work splendidly and make a perfect high availability cluster.

https://shop.opnsense.com/product-categorie/hardware-appliances/

They have all the necessary performance figures in that shop to get a proper sizing and budget estimate.