core icon indicating copy to clipboard operation
core copied to clipboard

NDProxy support in OPNsense

Open andromaks opened this issue 1 year ago • 7 comments
trafficstars

Important notices

Before you add a new report, we ask you kindly to acknowledge the following:

  • [x] I have read the contributing guide lines at https://github.com/opnsense/core/blob/master/CONTRIBUTING.md
  • [x] I am convinced that my issue is new after having checked both open and closed issues at https://github.com/opnsense/core/issues?q=is%3Aissue

My mobile ISP provides /64 for me. This is the only internet connection at my place. Speed and latency is good. I would like to connect my homelab to IPv6. OPNsense is my router. My ISP is not willing to provide Prefix Delegation for mobile internet. At same time mobile internet becomes more and more popular as the main internet connectivity.

A clear and concise description of what the problem is including your motivation for the request, i.e. "For the purpose of [...] I am missing a solution that will [...]."

I checked that FreeBSD supports NDProxy. It would be interesting that OPNsense would support it also. This will allow me to use /64 from my mobile ISP for LAN devices.

A clear and concise description of what you want to happen. (e.g. I would like an input field in the /ui/firewall/alias which would add .... to ....)

I have 2 alternatives:

  • configure NDProxy kernel module by myself and pray that it will not break anything in OPNsense
  • change OPNsense to something else.

A clear and concise description of any alternative solutions or features you considered.

Thank you very much for support.

andromaks avatar Dec 16 '23 19:12 andromaks

See https://github.com/opnsense/plugins/issues/3609

doktornotor avatar Dec 16 '23 19:12 doktornotor

Thanks.

More and more people are interested in this.

andromaks avatar Dec 16 '23 19:12 andromaks

That’s good. Is somebody interested enough that a FreeBSD port exists yet? 😊

fichtner avatar Dec 16 '23 21:12 fichtner

That’s good. Is somebody interested enough that a FreeBSD port exists yet? 😊

Yes 😚 https://www.freshports.org/net/ndproxy/

MCterra10 avatar Jan 12 '24 04:01 MCterra10

Glad to see there's some other people interested since my original issue (now on the plugins repo)

@andromaks fyi I have built ndproxy myself and use it with opnsense with no problems. You will need to clone the OPNsense kernel sources and ports tree for FreeBSD yourself though. And you need to rebuild it each kernel update.

MCterra10 avatar Jan 12 '24 04:01 MCterra10

Glad to see there's some other people interested since my original issue (now on the plugins repo)

@andromaks fyi I have built ndproxy myself and use it with opnsense with no problems. You will need to clone the OPNsense kernel sources and ports tree for FreeBSD yourself though. And you need to rebuild it each kernel update.

Noob here, please can you provide instructions how to do it?

HyperEr00 avatar Apr 16 '24 12:04 HyperEr00

Glad to see there's some other people interested since my original issue (now on the plugins repo) @andromaks fyi I have built ndproxy myself and use it with opnsense with no problems. You will need to clone the OPNsense kernel sources and ports tree for FreeBSD yourself though. And you need to rebuild it each kernel update.

Noob here, please can you provide instructions how to do it?

https://gist.github.com/MCterra10/7e3930e54db0be10f42dd999e3263560

See this script, I'd try executing line by line and check over things, as I haven't tested it. Basically you need to clone the OPNsense kernel source code, then the FreeBSD ports repository, and build it from source code for the OPNsense kernel.

You need to rebuild with every OPNsense kernel update btw. You don't have to clone the repos all over again though. Update the script and use git pull instead of the rm -r and git clones

EDIT: Also please make sure your OPNsense is fully updated prior to doing the installation, otherwise the kernel version installed won't match the one from the source code.

MCterra10 avatar Apr 22 '24 03:04 MCterra10

This issue has been automatically timed-out (after 180 days of inactivity).

For more information about the policies for this repository, please read https://github.com/opnsense/core/blob/master/CONTRIBUTING.md for further details.

If someone wants to step up and work on this issue, just let us know, so we can reopen the issue and assign an owner to it.

OPNsense-bot avatar Jun 13 '24 18:06 OPNsense-bot