Implementing Virtualized Firewall (VM/Container) in OPNsense (baremetal)

[vivekmauli14]

Hi,

I recently came across a feature in enterprise-level firewalls like Fortinet, where virtualized firewalls (virtual domains or VDOMs) can be used to isolate and manage different network segments or configurations. This concept seems incredibly useful, and I was wondering if OPNsense supports something similar, either through a virtual machine (e.g., using bhyve) or a containerized approach (e.g., Docker).

Has anyone tried implementing a virtualized firewall or additional OPNsense instance within an OPNsense setup? If so, I'd love to hear your recommendations or any guidance on how to configure this effectively.

Thanks!
Best,
VivekSP