Routers

How to Configure DNS over TLS (DoT) Using Unbound DNS in OPNsense

How to Configure DNS over TLS (DoT) Using Unbound DNS in OPNsense

Increase the security and privacy of DNS requests? Yes please...

Previously, I wrote about how to configure DNS over HTTPS using DNSCrypt-Proxy. Since Unbound DNS in OPNsense does not support DNS over HTTPS (DoH) directly, it was necessary to use the DNSCrypt-Proxy plugin. The plugin also supports DNS over TLS (DoT). However, I discovered while browsing Reddit that Unbound gained native support for DoT at some point in time, which is very nice. Because of built-in support for DoT, the configuration of DNS over TLS becomes pretty trivial.
Create an OPNsense Virtual Machine in VirtualBox for Screenshot or Evaluation Purposes

Create an OPNsense Virtual Machine in VirtualBox for Screenshot or Evaluation Purposes

Want to create an OPNsense virtual machine to take screenshots or evaluate the features available in the web interface?

When creating content for this website, I often have the need to take screenshots of the OPNsense web interface. Sometimes I am able to use my actual home network router to take screenshots, but I have to be careful not to modify any settings. I sometimes have to resort to tweaking the screenshot slightly after taking it in order to show what the interface should look like without everything already configured.
How to Create a Basic DMZ (Demilitarized Zone) Network in OPNsense

How to Create a Basic DMZ (Demilitarized Zone) Network in OPNsense

Are you hosting publicly accessible services on your network? Protect your internal network with a DMZ

A DMZ (demilitarized zone) is a segmented part of a network that is used to host all publicly accessible websites and services. The intention is to protect the internal network from external threats. It is an effective strategy to minimize public exposure of your critical assets as well as limit the damage caused when an intruder is able to penetrate your network. A great definition of a DMZ can be found here.
How to Configure Dynamic DNS in OPNsense

How to Configure Dynamic DNS in OPNsense

Have a non-static public facing IP address and want to utilize dynamic DNS?

If you have software/services running on your local network that you want to remotely access, you may have encountered a situation in which your IP address changes periodically. Many ISPs do not assign static IP addresses to non-business accounts especially for IPv4 addresses because they are extremely limited and have technically been exhausted for some time now. When your modem stays connected for a long period of time with an ISP, it is possible your IP address will not change often.
How to Configure DHCP When Using VLANs in OPNsense

How to Configure DHCP When Using VLANs in OPNsense

Are you new to VLANs and want to configure DHCP in OPNsense?

When you are new to creating VLANs on your network, you may wonder about the necessary steps in order to create a properly functioning VLAN. If you set up OPNsense with one WAN and one LAN interface, it is kind enough to set up a basic configuration for the LAN interface with DHCP enabled and a single firewall rule that allows access to the Internet. You can consider this configuration to be a “flat” network, which means that every device is on the same network and can communicate.