Firewall

OPNsense

BSD-based firewall with REST API management, multi-VLAN routing, Kea DHCP, Unbound DNS, and firewall rules automation.

OPNsense is the single point of control for everything that crosses a VLAN boundary in the homelab, all inter-VLAN traffic is denied by default except what’s explicitly allowed.

See OPNsense in Self-Hosted Applications for more details.