ansible-opnsense icon indicating copy to clipboard operation
ansible-opnsense copied to clipboard

Implement leader/follower Firewalls (central Firewall management)

Open ypid opened this issue 4 years ago • 0 comments

One might want to use the OPNsense GUI for come parts of the configuration still. Natrual examples are the widget configuration which look like this in the config.xml:

  <widgets>
    <sequence>system_information-container:00000000-col3:show,services_status-container:00000001-col4:show,gateways-container:00000002-col4:show,interface_list-container:00000003-col4:show</sequence>
    <column_count>2</column_count>
  </widgets>

Probably not something you want to write by hand. Or you might want to maintain Firewall rules in the GUI and push them out to boxes. There are a few reasons for it.

#41 provides a flexible implementation for all of this. This crushes regular central Firewall management solutions in terms of flexibility. The idea is that you can define one (or more) "leader" OPNsense instances from which certain aspects can be deployed to all the other instances.

ypid avatar Jan 25 '21 23:01 ypid