OPNsense

OPNsense is an open-source firewall and routing platform that is designed to provide network security, privacy, and control to its users. OPNsense includes most of the features available in expensive commercial firewalls, and more in many cases. It brings the rich feature set of commercial offerings with the benefits of open and verifiable sources.

The features include forward caching proxy, traffic shaping, intrusion detection and easy OpenVPN client setup.

1. Click the button on the right. OPNsense will be automatically selected under Image/boot disk selection.

2. Specify the VM’s other parameters.

   • Under Computing resources, follow these specifications from OPNsense:

     • Minimum requirements: 2 GB RAM.
     • Reasonable requirements: 4 GB RAM, 40 GB SSD.
     • Recommended requirements (for higher loads): 8 GB RAM, 120 GB SSD.

   • Under Network settings, add a public IP address to the VM.

3. Create the VM and wait until its status is RUNNING.

4. On the VM’s page, on the left-hand panel, select Serial console.

5. Log in using the following credentials:

   • Login: root
   • Password: opnsense.

6. Reset the root password:

   1. Enter 3 (the option to reset the password) and press Enter.
   2. Enter y for confirmation and press Enter.
   3. Type a new password and press Enter.
   4. Type the new password again and press Enter.

7. Assign the VM’s network interfaces to OPNsense interfaces:

   1. Enter 1 (the option to assign interfaces) and press Enter.
   2. Press Enter twice to skip LAGG and VLAN interfaces.
   3. Type vtnet0 for a WAN interface and press Enter.
   4. Press Enter twice to skip LAN and optional interfaces.
   5. Enter y for confirmation and press Enter.

8. In the top right corner, disconnect from the serial console.

9. To connect to the GUI, go to https://<public_IP_address_of_VM>/ in your web browser and log in as root using the previously configured password.

For a detailed tutorial, see Deploying an OPNsense firewall in Nebius Israel.

• Providing a secure network environment.
• Preventing access to certain types of content based on predefined policies.
• Managing network traffic.

Nebius Israel does not provide technical support for the product. If you have any issues, please refer to the OPNsense support.