naturalis/ansible-opnsense

Implement leader/follower Firewalls (central Firewall management)

ypid opened this issue · 0 comments

ypid commented

One might want to use the OPNsense GUI for come parts of the configuration still. Natrual examples are the widget configuration which look like this in the config.xml:

  <widgets>
    <sequence>system_information-container:00000000-col3:show,services_status-container:00000001-col4:show,gateways-container:00000002-col4:show,interface_list-container:00000003-col4:show</sequence>
    <column_count>2</column_count>
  </widgets>

Probably not something you want to write by hand. Or you might want to maintain Firewall rules in the GUI and push them out to boxes. There are a few reasons for it.

#41 provides a flexible implementation for all of this. This crushes regular central Firewall management solutions in terms of flexibility. The idea is that you can define one (or more) "leader" OPNsense instances from which certain aspects can be deployed to all the other instances.