OPNsense policy based routing?

Started by footwork_immortal201, September 21, 2025, 09:04:01 AM

Previous topic - Next topic
Is it possible for OPNsense to do policy-based routing? If so, is there a limit to the number of tunnels/VPNs that can be on simultaneously?

This is what I want to achieve. Instead of forcing an entire device to use the VPN, I want devices to be routed to the appropriate VPN based on the domains that it's using. For example, all queries to Chase will be routed to a US VPN. All queries to the BBC would be routed to a UK VPN. Any queries to domains not on a list would be routed directly to the Internet and not use a VPN.

Is it easy to set up this policy-based routing? If so, how do I set it up? Is there a guide out there?

Thank you!

- Possible.
- No practical limit, but we have seen people with a couple of hundred of VPN connections who ran into problems.
- Easy? Depends on your experience with IP, routing, networking in general, and firewalls.
Deciso DEC750
People who think they know everything are a great annoyance to those of us who do. (Isaac Asimov)