Book Image

OPNsense Beginner to Professional

By : Julio Cesar Bueno de Camargo
5 (1)
Book Image

OPNsense Beginner to Professional

5 (1)
By: Julio Cesar Bueno de Camargo

Overview of this book

OPNsense is one of the most powerful open source firewalls and routing platforms available. With OPNsense, you can now protect networks using features that were only previously available to closed source commercial firewalls. This book is a practical guide to building a comprehensive network defense strategy using OPNsense. You’ll start with the basics, understanding how to install, configure, and protect network resources using native features and additional OPNsense plugins. Next, you’ll explore real-world examples to gain in-depth knowledge of firewalls and network defense. You’ll then focus on boosting your network defense, preventing cyber threats, and improving your knowledge of firewalling using this open source security platform. By the end of this OPNsense book, you’ll be able to install, configure, and manage the OPNsense firewall by making the most of its features.
Table of Contents (25 chapters)
1
Section 1: Initial Configuration
6
Section 2: Securing the Network
13
Section 3: Going beyond the Firewall

Introduction to traffic shaping

Let's think about car traffic – on a bustling road, if an ambulance, fire truck, or police vehicle needs to pass, they have priority, right? The same situation also applies in the network packets world, where some packets need to be treated with higher priority to keep the protocols operating smoothly. With all sorts of different packets passing through the firewall, it is necessary to classify them to choose which traffic requires higher priority to keep an application, such as a voice over IP (VoIP) application. For example, if there are 20 VoIP packets and 1 for HTTP, the firewall or the streaming apps may work smoothly. The term QoS is also often used to refer to traffic shaping, and in this chapter, it will be used to refer to the classification and prioritization of packets.

To apply QoS to network traffic, OPNsense uses dummynet and ipfw, independent of the packet filter rules (which use pf). Ever heard of dummynet and ipfw before...