Jacopo Clark 7f5786f40f feat(backend): add OPNsense backend (#743) ...

Manages interfaces and peers on OPNsense through the WireGuard API in
OPNsense core, so a stock appliance needs nothing installed. OPNsense
calls a tunnel a "server" and a peer on it a "client"; those map to
PhysicalInterface and PhysicalPeer.

Reads go through searchXxx because getXxx returns select fields as
{value, selected} maps that cannot be posted back to a write. Validation
failures arrive as HTTP 200 with a "result": "failed" body, so the body
is checked and not the status code.

Firewall rules are not managed, matching the pfSense backend: a new
tunnel handshakes but carries no traffic until a pass rule exists.

Alpha, and documented as such.

Signed-off-by: clark-ja <37738506+clark-ja@users.noreply.github.com>

2026-09-10 22:27:17 +02:00

..

examples.md

Improved default peer handling (#674)

2026-04-16 21:55:41 +02:00

overview.md

feat(backend): add OPNsense backend (#743)

2026-09-10 22:27:17 +02:00