• Notice regarding image hosts and attachments. See here.

Firewall failover Project

Associate
Joined
18 Dec 2008
Posts
769
Hello all!

I had to backup and update my OPNsense firewall the other day due to all this PHP H4xor situation.

Ultimately I was without wired Internet for a couple of hours.

I have two internet connections from EE (Openreach FTTP) and Virgin (DOCSIS).

The weakest link is only having one Firewall/Router

How would I go about setting up a backup firewall?

Having both firewalls to have the same IP addresses and rules for all my connected devices is a would be useful.

I don’t need instantaneous failover, although that would be interesting if possible, just something I could switch over if needed with minimal manual intervention.

My vision would be the 2nd firewall would be permanently switched off, only to be turned on when the primary firewall is unavailable.

I guess the simplest way to do this would be to build a 2nd firewall with the same hardware as the 1st, but I built it from a renewed DEL Office SFF PC which may not be available now.

I am not currently using my EE router for anything, could that be used?

Another option I think would be interesting would be to virtualise both firewalls on a single machine, although that does not help if there is a hardware issue.

What about running dual NAT with Virgin Media HUB in router mode direct to my network switch?

So many options...

What do you think?
 
Plus 'how to team two opnsense routers' into Google and it will tell you about CARP. I've not done it myself, mind you.
 
Back
Top Bottom