Firewall (How to Hypervise?)

[Stux]

@ThatNAS_Guy

Right, what is your experience with this setup? Do you prefer OPNsense or pfSense and why? I have been contemplating this as - seemingly the only reasonable option, but not entirely sure how it should be setup.

Experience was succinctly provided above

I’ve been running this setup for about 8 years on a variety of TrueNAS installs.

I use pfsense, but should probably switch to OPNsense

pfSense vs. OPNsense

About five years back, I started a thread on this question on the old forum which ended up being surprisingly active and long-running, with discussion frequently restarting after Netgate managed to once again shoot themselves in the foot. In the thought that it might still be helpful to folks here, I’m sharing the link here. Any further discussion can continue in this topic.

I might be able to get up to 3 x NIC for my server plus a switch if needed…

What do you mean about loosing internet?

You setup a router/firewall as a vm. The nas is then connected to the vm for internet. Or whatever. Thus when the vm is not running… no internet.

In my setups the entire lan runs through that router vm.

As I’ve stated its a server in a datacenter, so, idealy I would want TrueNAS to have always on internet connection and have VM’s go thry a firewall. I can lock TrueNAS everything to my personal IP so that fixes the access and security to the main server.

I was thinking something in line with

TrueNAS - connects directly to the datacenter router
VM’s and pfsence go to a switch and from it to the datacenter router

Would this be feaseable?

A valid approach.

I would still prefer to skip pfsence if possbile, and do the routing in the freenas os if possible , so I’ll just state this again, but – as far as I can tell - its not quite as possible?

It may be possible, it I wouldn’t recommend it. In my experience attempting to bend TrueNAS to your will like that doesn’t end well.

Install containers, dockers, VMs and sandboxes on top of the TrueNAS foundation and use those to effect your requirements.