![]() Then, on the OPNSense I'll route each container IP to its unique gateway which only that specific container will use. I'll most likely use WireGuard to set up communication channels between Docker VM & OPNSense VM, so each docker container (there will be many) can access the OPNSense Create a VM for docker, and a docker container for each client & assign a unique network interface for each container. ![]() Configure both the server and clients WireGuard tunnel interfaces. Create cryptographic key pairs (public and private) for both the server and the clients. VPN > WireGuard > Endpoints > + sign to add. Create a VM on proxmox for OPNSense which handles all the routing for me To utilize the WireGuard VPN tunnel, just follow the five major procedures outlined below: Update FreeBSD Install WireGuard on both the server and the clients. conf file you want to use with the WG Manager tool and save it locally. A few local services that many of my clients use are quite strictly rate-limited, so each client must be treated as a unique user, as they are. Each client has a unique gateway to access the internet, so other clients cannot block others in strictly rate-limited services. I host apps for many clients which require a unique gateway to access the internet, for example, NodeJS apps sending requests over the internet, and communicating 3rd party apps I have been learning networking a lot lately, and OPNSense seems to be the solution for me, but I'm not certain, so I decided to ask here for confirmation and possible tips for (physical) server components, and/or routers if I cannot achieve the goal on software level alone. To be more precise, unique gateways to access the internet. ![]() Which you can do from 'Services -> VPN -> WireGuard'. We want: Any connection into WG (WireGuard) to be allowed anywhere (any) For IPv4 or IPv6 So now after these configurations we are ready to setup WireGuard itself. One of the most important things I have to handle for my business is networking for my clients. OPNsense Firewall Rules WG: Edit Likewise for this rule - it is pretty easy to follow. I'll get my homelab setup later this week and I'll use proxmox for managing VMs and stuff.
0 Comments
Leave a Reply. |