Book Image

OPNsense Beginner to Professional

By : Julio Cesar Bueno de Camargo
5 (1)
Book Image

OPNsense Beginner to Professional

5 (1)
By: Julio Cesar Bueno de Camargo

Overview of this book

OPNsense is one of the most powerful open source firewalls and routing platforms available. With OPNsense, you can now protect networks using features that were only previously available to closed source commercial firewalls. This book is a practical guide to building a comprehensive network defense strategy using OPNsense. You’ll start with the basics, understanding how to install, configure, and protect network resources using native features and additional OPNsense plugins. Next, you’ll explore real-world examples to gain in-depth knowledge of firewalls and network defense. You’ll then focus on boosting your network defense, preventing cyber threats, and improving your knowledge of firewalling using this open source security platform. By the end of this OPNsense book, you’ll be able to install, configure, and manage the OPNsense firewall by making the most of its features.
Table of Contents (25 chapters)
1
Section 1: Initial Configuration
6
Section 2: Securing the Network
13
Section 3: Going beyond the Firewall

Possible scenarios

Some possible scenarios are necessary or considered as contexts where it is a good practice to employ QoS in a network firewall. Let's explore two common scenarios.

Controlling hosts' and users' bandwidth usage

When sharing the same WAN connection across more than one host, it is a good idea to keep some control to avoid a single user consuming all the available bandwidth. A simple way to do that is by applying rules that will limit the maximum bandwidth that each user will have available.

Protocol prioritization

With the massive usage of VoIP and other streaming technologies, it is becoming rare to see someone use a PBX extension with a regular voice line. So, it is very important to prioritize packets for these kinds of application. For example, if there are 20 VoIP packets and 1 for HTTP, the firewall may send out 10 VoIP packets, the HTTP packet, and the rest of the VoIP packets. With all sorts of packets passing through our OPNsense...