OPNSense + VPN + PiHole + Wireguard = ?

Started by Sky22019, July 10, 2023, 10:51:24 PM

Previous topic - Next topic
Hello,

I have a rather tricky (regarding my perception) question in hand.

Recently my iptv provider decided that I should use a VPN in order to access his service. Hence this topic :)

Currently I am running latest OPNSense 23.1.11 where I have setup wireguard so that I am able to access my  home network when I am away from home.
OPNSense works as a router and DHCP server alongside a separate raspberry pi wherein lies my pihole.
PiHole acts as a recursive DNS server (https://docs.pi-hole.net/guides/dns/unbound/).

All of the above work flawlessly.

The million-dollar question is what is the best way to introduce a purchased VPN Service in all that.

Any reply is welcome.

Cheers!

If it is unicast then why not just configure OPNsense as a VPN client towards the VPN service?
2x 23.7 VMs & CARP, 4x 2.1GHz, 8GB
Cisco L3 switch, ESXi, VDS, vmxnet3
DoT, Chrony, HAProxy + NAXSI, Suricata
VPN: IPSec, OpenVPN, Wireguard
MultiWAN: Fiber 500/500Mbit dual stack + 4G failover

--
Available for private support.
Did my answer help you? Feel free to click [applaud] to the left

Hi,

If I am not terribly mistaken this is unicast transmission.

So you say I could simply configure OPNSense as VPN Client? Any limitations with regard to the service I should select?

Is there no need to mess with the settings of any of the following:
PiHole, Wireguard (in OPNSense)?

Cheers!

Quote from: Sky22019 on July 10, 2023, 11:35:24 PM
So you say I could simply configure OPNSense as VPN Client? Any limitations with regard to the service I should select?

Is there no need to mess with the settings of any of the following:
PiHole, Wireguard (in OPNSense)?

Cheers!

Yes, start by configuring OPNsense as a VPN client towards the provider. Any limitations depend on the VPN provider.

No need to mess with other services, unless you go with a provider that uses Wireguard in which case you should create a new tunnel.
2x 23.7 VMs & CARP, 4x 2.1GHz, 8GB
Cisco L3 switch, ESXi, VDS, vmxnet3
DoT, Chrony, HAProxy + NAXSI, Suricata
VPN: IPSec, OpenVPN, Wireguard
MultiWAN: Fiber 500/500Mbit dual stack + 4G failover

--
Available for private support.
Did my answer help you? Feel free to click [applaud] to the left

Hi,

Well this is the problem. I am not sure how to do that.
If there is a relevant guide it would help.
I guess I will first have to choose the provider and find out what protocol is in use from his side.

Thanks for your time.