SRBox

Features

Remote configuration

With SRBox, all of your OPNSense installations are provisioned from a central panel (with profiles):

  • Hostname, DNS, mirror
  • Localizations (timezone, language)
  • Authentication (password, SSH keys, TOTP)
  • Firewall (rules, with templating system)

From our panel, you can:

  • Check network/NAT configuration
  • Consult live DHCP leases
  • Manage VPN Wireguard plugin
  • Manage wpad.dat file
  • Download full configuration
  • Reboot

And more to come 🙂

Monitoring


Automatically (zero-conf!) monitored by Zabbix.

Live status on our panel:
  • CPU and memory usage
  • Network traffic
  • Disk usage
Email and Slack alarms:
  • Connection status changes
  • Status of the services

Automatic full config backup every night.

Maintenance



With SRBox, you can remotely update your OPNSense installations.


It’s also possible to schedule updates during a defined maintenance period.

About OPNSense

OPNSense


OPNsense® is an open source, easy-to-use and easy-to-build HardenedBSD based firewall and routing platform.
OPNsense includes most of the features available in expensive commercial firewalls, and more in many cases. It brings the rich feature set of commercial offerings with the benefits of open and verifiable sources.

OPNSense© is a trademark registered by Deciso BV.
SRBox is a commercial product from SimpleRezo, and we are not affiliated with the OPNSense project.
All legal notices about OPNSense can be consulted here.

More about SR-Box

Technical details

Our solution is provided as an OPNSense plugin.
This plugin will connect to our cloud panel (making request through a custom API). Every instance will establish a SSH tunnel to our hub (forwarding SSH and HTTP for OPNSense API) and our panel is connected through a VPN to this hub. With this solution, you do not need to expose any port from your OPNSense installation AND you do not need a public IP.

Network requirements:

  • TCP 22 to hub.simplerezo.com (SSH tunnel)
  • TCP 443 to hub.simplerezo.com (plugin repository)
  • TCP 443 to www.simplerezo.com (direct API communication)
  • TCP 10050 to zabbix.simplerezo.com (monitoring)

Our solution have severals technicals depencies (custom framework, SSH tunnelings, Zabbix server…).
So unless you have a substantial budget ;), the only option available is SaaS (Software as a Service).

Want more information ? Want to try it ?

Contact-us