Homelab

22 readers

1 users here now

Rules

Be Civil.
Post about your homelab, discussion of your homelab, questions you may have, or general discussion about transition your skill from the homelab to the workplace.
No memes or potato images.
We love detailed homelab builds, especially network diagrams!
Report any posts that you feel should be brought to our attention.
Please no shitposting or blogspam.
No Referral Linking.
Keep piracy discussion off of this community

founded 1 year ago

MODERATORS

communick@selfhosted.forum

rglullis@communick.news

I made an online pfsense to opnsense converter for r/homelab & r/selfhosted (alien.top)

submitted 1 year ago by KellyKlarkson@alien.top to c/homelab@selfhosted.forum

14 comments fedilink hide all child comments

TL;DR - www.pf2opn.com

I read about the desire for a converter here in r/homelab and on r/selfhosted this morning and I thought it would be an interesting Saturday afternoon project. I did not write this to claim a bounty.

pf2opn accepts a configuration file from pfsense in xml, does some basic sanity checks, and renders the result which you can copy. You can also download the generated xml, if you wish. The conversion happens in-memory, there are no trackers on the site, and I don't use any external services to convert your configuration. Reading and converting your configuration happens and stays on your machine. It does not cache the converted file.

I'm not running either platform in my own homelab, but I was able to find a few example configurations for pfsense and opnsense. I'd appreciate some feedback from you all as I don't think the mappings are 100% correct yet. But I think it'll spit out a nearly-usable opnsense configuration as is. However, the more sample feedback we get, the closer we can nail the conversion.

Don't forget to create backups and please don't deploy straight to prod.

you are viewing a single comment's thread
view the rest of the comments

[–] jaskij@alien.top 1 points 1 year ago (1 children)

Do pfSense configs include passwords? I'd think so, at least some. An instruction how to scrub them manually before uploading would be a welcome addition.

[–] kelthuzad12@alien.top 1 points 1 year ago

password

Just a heads up at one point the haproxy stats didn't redact the user's password in the configs. I noticed in config export (on 2.7.0 now) that it contained both my username and password in these fields. Either way I wouldn't feel too comfortable using a 3rd party for this purpose.

https://redmine.pfsense.org/issues/10794

Edit: Looks like the openvpn-client-export package had it saved in there too =/