# opnsense/core

**Attribution required: if you use, quote, or summarise this content, you must credit and link back to [awesome-repositories.com](https://awesome-repositories.com/repository/opnsense-core).**

4,493 stars · 957 forks · PHP · BSD-2-Clause

## Links

- GitHub: https://github.com/opnsense/core
- Homepage: https://opnsense.org/
- awesome-repositories: https://awesome-repositories.com/repository/opnsense-core.md

## Topics

`api` `bsd` `captive-portal` `firewall` `gui` `hacktoberfest` `ips` `proxy` `routing` `shaping` `vpn`

## Description

This project is the core management framework for a security appliance, providing the primary infrastructure for firewall management, network intrusion prevention, and high-availability networking. It serves as the centralized system for controlling network security policies, filtering traffic, and administering a security appliance dashboard.

The system is distinguished by its high-availability capabilities, which include synchronizing configurations and connection state tables across redundant nodes to enable automatic hardware failover. It also features a modular plugin architecture for extending backend logic and user interfaces, alongside a JSON-based API for programmatic management of firewall rules and system settings.

The platform covers a broad range of capability areas, including network configuration for IPv4 and IPv6, secure VPN tunneling, captive portal administration, and comprehensive monitoring and observability tools. It further integrates identity management with multi-factor authentication and provides tools for configuration backup, version tracking, and deployment across x86-64 hardware.

## Tags

### DevOps & Infrastructure

- [Firewall Failover Clusters](https://awesome-repositories.com/f/devops-infrastructure/high-availability-clustering/firewall-failover-clusters.md) — Pairs firewalls in failover clusters using virtual IP addresses and CARP for seamless stateful failover. ([source](https://docs.opnsense.org/manual/how-tos/carp.html))
- [Node Maintenance Modes](https://awesome-repositories.com/f/devops-infrastructure/cluster-node-management/node-maintenance-modes.md) — Toggles maintenance mode to gracefully migrate traffic to a backup node for zero-downtime updates. ([source](https://docs.opnsense.org/manual/how-tos/carp.html))
- [Configuration Synchronization](https://awesome-repositories.com/f/devops-infrastructure/configuration-synchronization.md) — Schedules periodic synchronization of settings to backup nodes via background tasks to ensure high availability. ([source](https://docs.opnsense.org/manual/hacarp.html))
- [CARP Failover Implementations](https://awesome-repositories.com/f/devops-infrastructure/high-availability-clustering/failover-testing/carp-failover-implementations.md) — Implements Common Address Redundancy Protocol (CARP) to enable automatic hardware failover between firewalls. ([source](https://docs.opnsense.org/manual/hacarp.html))
- [High Availability Deployments](https://awesome-repositories.com/f/devops-infrastructure/high-availability-deployments.md) — Implements high-availability deployments that synchronize state and configuration across redundant nodes to ensure continuous uptime. ([source](https://docs.opnsense.org/intro.html))
- [Infrastructure Redundancy Protocols](https://awesome-repositories.com/f/devops-infrastructure/high-availability-instance-redundancy/infrastructure-redundancy-protocols.md) — Coordinates failover and redundancy between firewall appliances using standard address redundancy protocols. ([source](https://docs.opnsense.org/firewall.html))
- [DHCP State Synchronization](https://awesome-repositories.com/f/devops-infrastructure/high-availability-services/dhcp-state-synchronization.md) — Coordinates state between multiple DHCP servers to ensure service availability during failover. ([source](https://docs.opnsense.org/manual/kea.html))
- [State and Configuration Replication](https://awesome-repositories.com/f/devops-infrastructure/state-and-configuration-replication.md) — Copies firewall rules and active connection state tables from a master node to a backup node. ([source](https://docs.opnsense.org/manual/how-tos/carp.html))
- [Virtual IP Failovers](https://awesome-repositories.com/f/devops-infrastructure/virtual-ip-failovers.md) — Manages virtual IP addresses across a cluster to ensure seamless failover and service continuity. ([source](https://docs.opnsense.org/manual/firewall_vip.html))
- [Boot Sequence Automation](https://awesome-repositories.com/f/devops-infrastructure/automation-orchestration/task-execution-frameworks/automation-frameworks/action-execution/script-sequences/boot-sequence-automation.md) — Uses a phased hook system to automate the execution of tasks and scripts during the system boot process. ([source](https://docs.opnsense.org/development/backend.html))
- [Auditable Configuration Histories](https://awesome-repositories.com/f/devops-infrastructure/configuration-as-code/auditable-configuration-histories.md) — Compares historical configuration versions using a diff format to identify changes and revert to previous states. ([source](https://docs.opnsense.org/manual/backups.html))
- [Network Control APIs](https://awesome-repositories.com/f/devops-infrastructure/network-control-apis.md) — Provides an API to programmatically update IP entries for host, network, and external aliases to automate address mapping. ([source](https://docs.opnsense.org/manual/aliases.html))
- [Release Lifecycle Management](https://awesome-repositories.com/f/devops-infrastructure/release-lifecycle-management.md) — Manages the operational lifecycle of software releases with curated upgrade paths to ensure enterprise stability. ([source](https://docs.opnsense.org/BE_releases.html))
- [Service Lifecycle Management](https://awesome-repositories.com/f/devops-infrastructure/service-lifecycle-management.md) — Coordinates service behavior across boot and shutdown stages using a hook-based lifecycle management system. ([source](https://docs.opnsense.org/development/architecture.html))

### Security & Cryptography

- [Firewall Management](https://awesome-repositories.com/f/security-cryptography/firewall-management.md) — Provides a centralized system for configuring network-level access restrictions, traffic filtering, and firewall rule management.
- [Configuration Policy Synchronization](https://awesome-repositories.com/f/security-cryptography/configuration-policy-synchronization.md) — Copies configuration changes from a primary system to secondary firewalls to ensure consistent security policies. ([source](https://docs.opnsense.org/manual/hacarp.html))
- [Network Address Translation](https://awesome-repositories.com/f/security-cryptography/firewalls/network-address-translation.md) — Provides comprehensive network address translation to map private internal IPs to public external interfaces. ([source](https://docs.opnsense.org/firewall.html))
- [Intrusion Prevention Systems](https://awesome-repositories.com/f/security-cryptography/intrusion-prevention-systems.md) — Detects and automatically blocks malicious network activity using packet inspection and threat signatures.
- [Network Intrusion Detection](https://awesome-repositories.com/f/security-cryptography/network-intrusion-detection.md) — Inspects network traffic in real-time against rule sets to alert on or drop malicious packets. ([source](https://docs.opnsense.org/manual/ips.html))
- [Network Traffic Filtering](https://awesome-repositories.com/f/security-cryptography/network-traffic-filtering.md) — Defines security policies to allow, block, or reject network traffic based on interface and direction. ([source](https://docs.opnsense.org/firewall.html))
- [Secure Remote Access](https://awesome-repositories.com/f/security-cryptography/secure-remote-access.md) — Establishes encrypted tunnels using IPsec, OpenVPN, or WireGuard for secure site-to-site and remote user connectivity. ([source](https://docs.opnsense.org/intro.html))
- [Signature-Based Threat Detectors](https://awesome-repositories.com/f/security-cryptography/threat-detection/signature-based-threat-detectors.md) — Provides the ability to download and update signature sets from third-party providers to detect known attack patterns. ([source](https://docs.opnsense.org/manual/ips.html))
- [Access Control Lists](https://awesome-repositories.com/f/security-cryptography/access-control-lists.md) — Defines specific permissions and access rules for users to restrict or grant access to system resources. ([source](https://docs.opnsense.org/development/components.html))
- [API Access Security](https://awesome-repositories.com/f/security-cryptography/api-access-security.md) — Secures API access by controlling which endpoints are accessible to specific API keys based on user privileges. ([source](https://docs.opnsense.org/development/api.html))
- [Cloud-Synced Configurations](https://awesome-repositories.com/f/security-cryptography/configuration-encryption/cloud-synced-configurations.md) — Saves system settings to encrypted cloud storage with integrated version history tracking. ([source](https://docs.opnsense.org/intro.html))
- [Certificate Authority Management](https://awesome-repositories.com/f/security-cryptography/cryptography/ssl-tls-certificate-management/certificate-authority-management.md) — Generates and manages the full lifecycle of client, server, and authority certificates, including signing requests. ([source](https://docs.opnsense.org/manual/certificates.html))
- [Custom Detection Rules](https://awesome-repositories.com/f/security-cryptography/custom-detection-rules.md) — Allows the creation of user-defined patterns and fingerprints to block specific sites or network traffic patterns. ([source](https://docs.opnsense.org/manual/ips.html))
- [Trust Store Managers](https://awesome-repositories.com/f/security-cryptography/governance-policy-frameworks/development-security-infrastructure/trust-store-managers.md) — Manages system-wide trust constraints for intermediate CAs, CRL storage, and cipher protocols. ([source](https://docs.opnsense.org/manual/certificates.html))
- [Revocation List Management](https://awesome-repositories.com/f/security-cryptography/governance-policy-frameworks/security-infrastructure/tls-certificate-management/certificate-revocation-validation/revocation-list-management.md) — Creates and maintains Certificate Revocation Lists to verify the validity of digital certificates before they expire. ([source](https://docs.opnsense.org/manual/certificates.html))
- [One-Time Passwords](https://awesome-repositories.com/f/security-cryptography/one-time-passwords.md) — Secures system access using time-based or event-based one-time password verification for multi-factor security. ([source](https://docs.opnsense.org/intro.html))
- [Packet Normalization](https://awesome-repositories.com/f/security-cryptography/packet-normalization.md) — Scrubs and cleans network packets to ensure they conform to standards and prevent evasion. ([source](https://docs.opnsense.org/firewall.html))
- [Rule Priority Logic](https://awesome-repositories.com/f/security-cryptography/policy-based-access-control/rule-priority-logic.md) — Defines priorities and actions for intrusion rules based on metadata to refine malicious traffic blocking. ([source](https://docs.opnsense.org/manual/ips.html))
- [Dependency Vulnerability Scanning](https://awesome-repositories.com/f/security-cryptography/security-auditing/dependency-vulnerability-scanning.md) — Scans installed system packages against known vulnerability databases to identify security flaws. ([source](https://docs.opnsense.org/manual/firmware.html))
- [Exhaustion Prevention](https://awesome-repositories.com/f/security-cryptography/tcp-state-exhaustion-attacks/exhaustion-prevention.md) — Uses syncookies to defer memory allocation until a TCP handshake is completed to prevent state exhaustion. ([source](https://docs.opnsense.org/manual/firewall_settings.html))
- [Web Application Firewalls](https://awesome-repositories.com/f/security-cryptography/traffic-filtering/web-application-firewalls.md) — Inspects and blocks malicious HTTP requests using a rule-based web application firewall. ([source](https://docs.opnsense.org/be.html))
- [TOTP Seed Generators](https://awesome-repositories.com/f/security-cryptography/two-factor-authentication/totp-seed-generators.md) — Generates one-time password seeds for multi-factor authentication that can be scanned by mobile devices. ([source](https://docs.opnsense.org/manual/lobby_password.html))

### System Administration & Monitoring

- [Firewall Management Interfaces](https://awesome-repositories.com/f/system-administration-monitoring/firewall-management-interfaces.md) — Provides a comprehensive graphical interface and API for controlling firewall settings and system behavior. ([source](https://cdn.jsdelivr.net/gh/opnsense/core@master/README.md))
- [Cluster Monitoring](https://awesome-repositories.com/f/system-administration-monitoring/cluster-monitoring.md) — Tracks the state of high availability groups and manages maintenance mode for redundant nodes. ([source](https://docs.opnsense.org/manual/firewall_vip.html))
- [Firewall Log Analyzers](https://awesome-repositories.com/f/system-administration-monitoring/firewall-log-analyzers.md) — Records and inspects firewall events to monitor connectivity and troubleshoot security policy blocks. ([source](https://docs.opnsense.org/firewall.html))
- [Programmable Security APIs](https://awesome-repositories.com/f/system-administration-monitoring/firewall-management-interfaces/programmable-security-apis.md) — Provides a programmatic API for managing backend security settings and firewall rules to bypass the graphical interface. ([source](https://docs.opnsense.org/development/howtos.html))
- [Infrastructure Service Deployment](https://awesome-repositories.com/f/system-administration-monitoring/infrastructure-service-deployment.md) — Deploys and manages essential infrastructure tools including DHCP, DNS, and captive portals to ensure client connectivity. ([source](https://docs.opnsense.org/))
- [Real-Time Traffic Monitoring](https://awesome-repositories.com/f/system-administration-monitoring/real-time-traffic-monitoring.md) — Displays a live stream of matched firewall rules filtered by source or destination in real time. ([source](https://docs.opnsense.org/manual/logging_firewall.html))
- [Security Event Monitoring](https://awesome-repositories.com/f/system-administration-monitoring/security-event-monitoring.md) — Views and analyzes triggered intrusion events to collect details about detected security threats. ([source](https://docs.opnsense.org/manual/ips.html))
- [Network Session Monitors](https://awesome-repositories.com/f/system-administration-monitoring/system-activity-monitoring/session-activity-monitors/network-session-monitors.md) — Provides real-time monitoring of active network traffic sessions, including source, destination, and protocol. ([source](https://docs.opnsense.org/manual/diagnostics_firewall.html))
- [Security Operation Dashboards](https://awesome-repositories.com/f/system-administration-monitoring/web-based-dashboards/security-operation-dashboards.md) — Features a centralized dashboard for monitoring system status and configuring security settings in real time. ([source](https://docs.opnsense.org/lobby.html))
- [Remote Node Administration](https://awesome-repositories.com/f/system-administration-monitoring/administrative-operations/linux-system-administration/networking/connection-lifecycle-management/remote-server-connectivities/remote-backup-transfers/remote-node-administration.md) — Monitors service status and triggers restarts on backup servers from a centralized management interface. ([source](https://docs.opnsense.org/manual/hacarp.html))
- [Backend Service Execution](https://awesome-repositories.com/f/system-administration-monitoring/backend-service-execution.md) — Implements a centralized backend service to execute system actions, run scripts, and manage daemons. ([source](https://docs.opnsense.org/development/architecture.html))
- [Configuration Backups](https://awesome-repositories.com/f/system-administration-monitoring/configuration-backups.md) — Exports system settings and statistics to password-protected files or remote cloud storage for backup. ([source](https://docs.opnsense.org/manual/backups.html))
- [DHCP Lease Managers](https://awesome-repositories.com/f/system-administration-monitoring/dhcp-servers/dhcp-lease-managers.md) — Triggers the release or renewal of IP addresses for interfaces using dynamic configuration. ([source](https://docs.opnsense.org/manual/interfaces_overview.html))
- [DNS Resolution Testers](https://awesome-repositories.com/f/system-administration-monitoring/dns-resolvers/dns-resolution-testers.md) — Includes tools to resolve hostnames to IP addresses directly from the system to verify DNS resolution. ([source](https://docs.opnsense.org/manual/diagnostics_interfaces.html))
- [Firewall Performance Metrics](https://awesome-repositories.com/f/system-administration-monitoring/firewall-performance-metrics.md) — Provides detailed metrics including packet counters per interface and active rule timeouts. ([source](https://docs.opnsense.org/manual/diagnostics_firewall.html))
- [Log Analysis](https://awesome-repositories.com/f/system-administration-monitoring/logging-and-telemetry/log-analysis.md) — Visualizes firewall log lines across various properties to identify network traffic patterns. ([source](https://docs.opnsense.org/manual/logging_firewall.html))
- [Traffic Shaping and Prioritization](https://awesome-repositories.com/f/system-administration-monitoring/network-configuration-services/traffic-shaping-and-prioritization.md) — Prioritizes applications and limits bandwidth consumption per user using traffic shaping queues. ([source](https://docs.opnsense.org/firewall.html))
- [Flow Record Querying](https://awesome-repositories.com/f/system-administration-monitoring/network-flow-visualizations/flow-record-querying.md) — Allows filtering network flow records by date, interface, or IP to investigate specific traffic events. ([source](https://docs.opnsense.org/manual/how-tos/insight.html))
- [Network Health Monitors](https://awesome-repositories.com/f/system-administration-monitoring/network-health-monitors.md) — Provides real-time status, assigned IP addresses, and link details to verify network interface health. ([source](https://docs.opnsense.org/manual/interfaces_overview.html))
- [Network Statistics Tracking](https://awesome-repositories.com/f/system-administration-monitoring/network-statistics-tracking.md) — Provides real-time metrics and status updates on network traffic and interface activity. ([source](https://docs.opnsense.org/manual/diagnostics_interfaces.html))
- [System Health Monitoring](https://awesome-repositories.com/f/system-administration-monitoring/observability-instrumentation/system-health-monitoring.md) — Runs diagnostic checks on connectivity and disk integrity to troubleshoot system update failures. ([source](https://docs.opnsense.org/manual/firmware.html))
- [Reachability Testing](https://awesome-repositories.com/f/system-administration-monitoring/reachability-testing.md) — Sends ICMP echo requests to remote hosts to verify network reachability and routing. ([source](https://docs.opnsense.org/manual/diagnostics_interfaces.html))
- [Resource Monitoring Widgets](https://awesome-repositories.com/f/system-administration-monitoring/resource-monitoring-widgets.md) — Ships a dashboard with widgets for real-time monitoring of CPU, memory, and disk utilization. ([source](https://docs.opnsense.org/intro.html))
- [System Event Logging](https://awesome-repositories.com/f/system-administration-monitoring/system-event-logging.md) — Displays event logs for firewall components within the management interface to assist in troubleshooting. ([source](https://docs.opnsense.org/manual/logging_services.html))
- [System Configuration Restorers](https://awesome-repositories.com/f/system-administration-monitoring/system-restoration/android-package-restorations/package-state-restorers/system-configuration-restorers.md) — Reinstates previous configuration states while allowing the exclusion of hardware-specific console settings. ([source](https://docs.opnsense.org/manual/backups.html))

### Part of an Awesome List

- [DHCP and DNS Services](https://awesome-repositories.com/f/awesome-lists/data/ip-address-management/dhcp-and-dns-services.md) — Integrates DHCP and DNS services to provide automatic IP assignment and local hostname resolution. ([source](https://docs.opnsense.org/intro.html))
- [Perimeter Security Management](https://awesome-repositories.com/f/awesome-lists/security/perimeter-security-management.md) — Filters and routes network data using rules and aliases to secure the network perimeter. ([source](https://docs.opnsense.org/intro.html))

### Networking & Communication

- [Gateway Reachability Monitoring](https://awesome-repositories.com/f/networking-communication/api-integration-frameworks/api-management-integration/api-gateways/api-gateway-configurations/gateway-reachability-monitoring.md) — Tracks gateway reachability and triggers automatic routing changes when a connection fails. ([source](https://docs.opnsense.org/manual/gateways.html))
- [Captive Portal Authentication](https://awesome-repositories.com/f/networking-communication/captive-portal-authentication.md) — Validates user identities via local accounts, LDAP, Radius, or simple splash-screen interactions for network access. ([source](https://docs.opnsense.org/manual/captiveportal.html))
- [Captive Portal Implementations](https://awesome-repositories.com/f/networking-communication/captive-portal-implementations.md) — Implements a captive portal that forces user authentication or acceptance of terms before granting network access. ([source](https://docs.opnsense.org/manual/captiveportal.html))
- [Connection State Synchronization](https://awesome-repositories.com/f/networking-communication/connection-state-synchronization.md) — Replicates active connection tables and configuration settings across nodes to enable seamless hardware failover.
- [Default Gateway Selection](https://awesome-repositories.com/f/networking-communication/default-gateway-selection.md) — Determines the primary exit route using priority rankings and upstream status flags. ([source](https://docs.opnsense.org/manual/gateways.html))
- [DHCP Address Distribution](https://awesome-repositories.com/f/networking-communication/dhcp-address-distribution.md) — Distributes IP addresses to clients using defined ranges and supports gateway discovery. ([source](https://docs.opnsense.org/manual/dnsmasq.html))
- [DHCP Address Provisioning](https://awesome-repositories.com/f/networking-communication/dhcp-address-provisioning.md) — Configures address ranges and gateways to automatically provision network settings to clients. ([source](https://docs.opnsense.org/manual/dhcp.html))
- [High Availability Synchronization](https://awesome-repositories.com/f/networking-communication/dhcp-servers/high-availability-synchronization.md) — Coordinates state between DHCP servers using split pools to prevent IP conflicts during failover. ([source](https://docs.opnsense.org/manual/dnsmasq.html))
- [Gateway Configuration](https://awesome-repositories.com/f/networking-communication/gateway-configuration.md) — Provides tools for setting up routing paths and managing multi-WAN failover and IP assignments. ([source](https://docs.opnsense.org/manual/gateways.html))
- [High Availability Networking](https://awesome-repositories.com/f/networking-communication/high-availability-networking.md) — Ensures continuous network connectivity by synchronizing configuration and state across redundant routing paths.
- [IPv6 Address Assignment](https://awesome-repositories.com/f/networking-communication/ipv6-address-assignment.md) — Assigns IPv6 addresses to interfaces using static blocks, DHCPv6, or SLAAC. ([source](https://docs.opnsense.org/manual/ipv6.html))
- [Multi-WAN Routing Logic](https://awesome-repositories.com/f/networking-communication/multi-wan-routing-logic.md) — Defines gateway enforcement and reply-to logic to manage traffic across multiple WAN setups. ([source](https://docs.opnsense.org/manual/firewall_settings.html))
- [Named Network Aliasing](https://awesome-repositories.com/f/networking-communication/named-network-aliasing.md) — Groups IP addresses, hostnames, or ports into named entities to simplify the management of firewall rules. ([source](https://docs.opnsense.org/manual/aliases.html))
- [Network Routing and Traffic Management](https://awesome-repositories.com/f/networking-communication/network-infrastructure-routing/network-routing-traffic-management.md) — Directs data packets between interfaces and gateways to support multi-WAN and high-availability networking. ([source](https://docs.opnsense.org/))
- [Network Interface Management](https://awesome-repositories.com/f/networking-communication/network-interface-management.md) — Manages the assignment of physical ports to logical interfaces and configures IP, MTU, and MAC settings. ([source](https://docs.opnsense.org/interfaces.html))
- [Weighted Route Failovers](https://awesome-repositories.com/f/networking-communication/network-traffic-routing/weighted-route-failovers.md) — Automatically switches traffic to an alternative gateway when the primary route becomes unreachable. ([source](https://docs.opnsense.org/manual/gateways.html))
- [Network Traffic Segmentation](https://awesome-repositories.com/f/networking-communication/network-traffic-segmentation.md) — Isolates network zones and implements VLAN support to provide granular traffic control and segmentation. ([source](https://docs.opnsense.org/intro.html))
- [Cross-Node Session Replication](https://awesome-repositories.com/f/networking-communication/session-state-management/cross-node-session-replication.md) — Replicates active connection tables across nodes to maintain existing sessions during hardware transitions. ([source](https://docs.opnsense.org/manual/hacarp.html))
- [Connection State Management](https://awesome-repositories.com/f/networking-communication/tcp-connection-lifecycles/connection-state-management.md) — Allows searching, filtering, and removing entries from the firewall state table to terminate connections. ([source](https://docs.opnsense.org/manual/diagnostics_firewall.html))
- [Virtual IP Management](https://awesome-repositories.com/f/networking-communication/virtual-ip-management.md) — Assigns shared virtual addresses across multiple interfaces to enable seamless fail-over. ([source](https://docs.opnsense.org/manual/how-tos/carp.html))
- [Virtual IP Routing](https://awesome-repositories.com/f/networking-communication/virtual-ip-management/virtual-ip-routing.md) — Configures outbound NAT rules to use virtual addresses for seamless transition between nodes. ([source](https://docs.opnsense.org/manual/how-tos/carp.html))
- [VPN Tunnels](https://awesome-repositories.com/f/networking-communication/vpn-tunnels.md) — Establishes encrypted network tunnels using IPsec, OpenVPN, and WireGuard for secure remote connectivity. ([source](https://docs.opnsense.org/))
- [Cellular Connectivity Modules](https://awesome-repositories.com/f/networking-communication/cellular-connectivity-modules.md) — Integrates 3G and 4G LTE modems to serve as primary or backup WAN interfaces. ([source](https://docs.opnsense.org/manual/interfaces.html))
- [Cellular WAN Management](https://awesome-repositories.com/f/networking-communication/cellular-wan-management.md) — Configures internal wireless networks and manages cellular modem connections for internet access. ([source](https://docs.opnsense.org/interfaces.html))
- [IPv6 Prefix Advertisements](https://awesome-repositories.com/f/networking-communication/communication-protocols-architectures/communication-protocols-standards/network-protocols/ipv6-network-stacks/ipv6-prefix-advertisements.md) — Sends router advertisements to clients to facilitate automatic IPv6 network configuration. ([source](https://docs.opnsense.org/manual/dhcp.html))
- [Prefix Delegations](https://awesome-repositories.com/f/networking-communication/communication-protocols-architectures/communication-protocols-standards/network-protocols/ipv6-network-stacks/ipv6-prefix-advertisements/prefix-delegations.md) — Provides IPv6 prefix delegation to downstream routers using dynamic leases or static mappings. ([source](https://docs.opnsense.org/manual/ipv6.html))
- [DHCP Client Tagging](https://awesome-repositories.com/f/networking-communication/dhcp-client-tagging.md) — Assigns labels to clients based on vendor IDs to deliver customized settings via DHCP. ([source](https://docs.opnsense.org/manual/dnsmasq.html))
- [DHCP Request Relaying](https://awesome-repositories.com/f/networking-communication/dhcp-request-relaying.md) — Routes DHCP requests received on one interface to a designated server on another network. ([source](https://docs.opnsense.org/manual/dhcrelay.html))
- [DHCP Request Relaying](https://awesome-repositories.com/f/networking-communication/dhcp-servers/dhcp-request-relaying.md) — Forwards DHCP requests from one interface to a server on a different network. ([source](https://docs.opnsense.org/manual/dhcp.html))
- [DNS Registration](https://awesome-repositories.com/f/networking-communication/dhcp-servers/lease-management/dns-registration.md) — Automatically maps DHCP-assigned IP addresses to hostnames for easier local device discovery. ([source](https://docs.opnsense.org/manual/dnsmasq.html))
- [Lease Statistics](https://awesome-repositories.com/f/networking-communication/dhcp-servers/lease-management/lease-statistics.md) — Tracks IP assignments and client hostnames to provide diagnostics on DHCP lease usage. ([source](https://docs.opnsense.org/manual/isc.html))
- [Alias Resolution](https://awesome-repositories.com/f/networking-communication/dns-resolution/dynamic-hostname-resolution/alias-resolution.md) — Handles resolution frequency and certificate validation for external hostnames used in network aliases. ([source](https://docs.opnsense.org/manual/firewall_settings.html))
- [Rule Categorizations](https://awesome-repositories.com/f/networking-communication/filtering-rule-repositories/threat-detection-rule-repositories/rule-categorizations.md) — Assigns labels to firewall rules to enable filtered views and simplified ruleset maintenance. ([source](https://docs.opnsense.org/manual/firewall_categories.html))
- [GeoIP-Based IP Blocking Tools](https://awesome-repositories.com/f/networking-communication/geoip-database-integrations/geoip-based-ip-blocking-tools.md) — Blocks or allows network traffic based on geographic country data using integrated GeoIP databases. ([source](https://docs.opnsense.org/manual/aliases.html))
- [Remote List Synchronization](https://awesome-repositories.com/f/networking-communication/ip-address-management-systems/bypass-ip-lists/remote-list-synchronization.md) — Fetches IP address tables from remote servers in text or JSON format on a predefined schedule. ([source](https://docs.opnsense.org/manual/aliases.html))
- [MAC Address Reservations](https://awesome-repositories.com/f/networking-communication/ip-address-management-systems/shared-ip-address-assignments/mac-address-reservations.md) — Maps client identifiers or MAC addresses to fixed IP addresses to ensure consistent network identity. ([source](https://docs.opnsense.org/manual/kea.html))
- [IPv6 Tunneling](https://awesome-repositories.com/f/networking-communication/ipv6-tunneling.md) — Creates IPv6 over IPv4 connectivity using tunneling protocols to enable traffic over older infrastructure. ([source](https://docs.opnsense.org/manual/ipv6.html))
- [Logical Interface Grouping](https://awesome-repositories.com/f/networking-communication/logical-interface-grouping.md) — Combines multiple interfaces into a single logical entity to apply uniform security policies. ([source](https://docs.opnsense.org/manual/firewall_groups.html))
- [NAT Reflection Controllers](https://awesome-repositories.com/f/networking-communication/nat-reflection-controllers.md) — Implements NAT reflection to allow internal clients to access local services via their public WAN IP. ([source](https://docs.opnsense.org/manual/firewall_settings.html))
- [IP Alias Management](https://awesome-repositories.com/f/networking-communication/network-addressing/interface-based-ip-assignments/ip-alias-management.md) — Adds extra network addresses to an interface to bind services or define rules. ([source](https://docs.opnsense.org/manual/firewall_vip.html))
- [Network Address Set Management](https://awesome-repositories.com/f/networking-communication/network-addressing/network-address-set-management.md) — Specifies source or destination addresses using CIDR notation, aliases, or interfaces for traffic filtering. ([source](https://docs.opnsense.org/manual/firewall_generic.html))
- [Route Tracing](https://awesome-repositories.com/f/networking-communication/network-infrastructure-routing/network-routing-traffic-management/network-routing/route-tracing.md) — Maps the route traffic takes to a destination to identify hops and network latency. ([source](https://docs.opnsense.org/manual/diagnostics_interfaces.html))
- [Packet Capture Implementations](https://awesome-repositories.com/f/networking-communication/network-packet-parsers/packet-capture-implementations.md) — Intercepts traffic on specified interfaces using filters to capture packets into pcap files for analysis. ([source](https://docs.opnsense.org/manual/diagnostics_interfaces.html))
- [Network Traffic Normalization](https://awesome-repositories.com/f/networking-communication/network-traffic-processors/network-traffic-normalization.md) — Standardizes inconsistent protocol packets on a per-interface basis to protect internal machines from protocol-based attacks. ([source](https://docs.opnsense.org/manual/firewall_scrub.html))
- [Network Task Offloads](https://awesome-repositories.com/f/networking-communication/packet-capture-engines/hardware-offloads/network-task-offloads.md) — Allows disabling hardware checksumming and segmentation to ensure compatibility with intrusion prevention systems. ([source](https://docs.opnsense.org/manual/interfaces_settings.html))
- [Daemon Control Sockets](https://awesome-repositories.com/f/networking-communication/socket-communication/daemon-control-sockets.md) — Executes system actions and controls daemons via a centralized service using a socket-based interface.
- [Static DHCP Mappings](https://awesome-repositories.com/f/networking-communication/static-dhcp-mappings.md) — Links a client identifier to a specific IP to ensure a constant network address via DHCP. ([source](https://docs.opnsense.org/manual/isc.html))
- [IPv6 Traffic Suppression](https://awesome-repositories.com/f/networking-communication/traffic-routing-rules/ipv6-routing-rules/ipv6-traffic-suppression.md) — Implements mechanisms to ignore IPv6 configurations and block all transit IPv6 traffic. ([source](https://docs.opnsense.org/manual/interfaces_settings.html))
- [Traffic Normalization Rules](https://awesome-repositories.com/f/networking-communication/traffic-tunnels/firewall-rule-configurations/traffic-normalization-rules.md) — Enforces TCP/IP constraints such as maximum MSS and minimum TTL based on firewall criteria to normalize traffic. ([source](https://docs.opnsense.org/manual/firewall_scrub.html))

### Software Engineering & Architecture

- [Modular Plugin Architectures](https://awesome-repositories.com/f/software-engineering-architecture/modular-plugin-architectures.md) — Extends system functionality via a modular architecture that allows installing optional software packages with backend logic and UIs.
- [Configuration Version Control](https://awesome-repositories.com/f/software-engineering-architecture/configuration-version-control.md) — Integrates with Git to maintain a traceable and auditable history of all system setting modifications. ([source](https://docs.opnsense.org/manual/backups.html))
- [Engine Behavior Configuration](https://awesome-repositories.com/f/software-engineering-architecture/engine-behavior-configuration.md) — Allows behavioral tuning of the network inspection engine using custom YAML templates and tags. ([source](https://docs.opnsense.org/manual/ips.html))
- [Controller-Based Routing](https://awesome-repositories.com/f/software-engineering-architecture/integration-extensibility/api-design-management/api-patterns/controller-based-routing.md) — Uses architectural patterns to map incoming network requests to specific backend operations via structured interface handlers.
- [Plugin Installation and Management](https://awesome-repositories.com/f/software-engineering-architecture/integration-extensibility/extensibility/plugin-architectures/plugin-installation-utilities/plugin-installation-and-management.md) — Provides a full lifecycle for building, installing, and managing plugins that extend backend logic and user interfaces. ([source](https://docs.opnsense.org/manual/firmware.html))
- [Modular Plugin Extensions](https://awesome-repositories.com/f/software-engineering-architecture/modular-plugin-extensions.md) — Provides a modular plugin architecture for extending the system with new administrative features and UIs. ([source](https://docs.opnsense.org/development/examples.html))

### Web Development

- [Administrative API Endpoints](https://awesome-repositories.com/f/web-development/api-management-tools/api-development-management/web-apis/administrative-api-endpoints.md) — Provides structured JSON endpoints for modifying system security data and executing administrative actions. ([source](https://docs.opnsense.org/development/api.html))
- [Service Control APIs](https://awesome-repositories.com/f/web-development/api-integration-services/service-control-apis.md) — Allows controlling the operational state and configuration of background services through programmable API calls. ([source](https://docs.opnsense.org/development/examples.html))
- [JSON APIs](https://awesome-repositories.com/f/web-development/json-apis.md) — Provides programmable endpoints using JSON payloads to modify security data and execute administrative actions.

### Content Management & Publishing

- [System Configuration Templates](https://awesome-repositories.com/f/content-management-publishing/text-template-processing/system-configuration-templates.md) — Produces service and application configuration files from templates by merging them with system-specific variables.

### Data & Databases

- [Guest Access Vouchers](https://awesome-repositories.com/f/data-databases/data-governance-modeling/data-management-governance/data-lifecycle-retention/data-lifecycle-management/key-expiration-policies/access-link-expiration/access-link-generators/guest-access-links/guest-access-vouchers.md) — Creates time-limited access tickets for guest users and exports them to CSV files for distribution. ([source](https://docs.opnsense.org/manual/captiveportal.html))
- [Static IP Reservations](https://awesome-repositories.com/f/data-databases/naming-conventions/device-identifier-mappings/mac-address-tracking/static-ip-reservations.md) — Binds a specific IP address to a unique client MAC address to ensure consistent addressing. ([source](https://docs.opnsense.org/manual/dhcp.html))
- [Network Traffic Export](https://awesome-repositories.com/f/data-databases/network-traffic-export.md) — Extracts network traffic totals and flow records into CSV format for external security analysis. ([source](https://docs.opnsense.org/manual/how-tos/insight.html))

### Development Tools & Productivity

- [Service Configuration Templates](https://awesome-repositories.com/f/development-tools-productivity/application-templates/service-configuration-templates.md) — Uses a built-in template engine to produce precise configuration files for installed services and applications. ([source](https://docs.opnsense.org/development/architecture.html))
- [Service](https://awesome-repositories.com/f/development-tools-productivity/lifecycle-hooks/service.md) — Synchronizes background service behavior across boot and shutdown stages using a phased event system.
- [System Package Managers](https://awesome-repositories.com/f/development-tools-productivity/software-package-repositories/system-package-managers.md) — Tracks installed packages, verifies licenses, and manages version locking to prevent unwanted software updates. ([source](https://docs.opnsense.org/manual/firmware.html))
- [System Service Managers](https://awesome-repositories.com/f/development-tools-productivity/system-service-managers.md) — Provides an interface to track, start, stop, and restart background system services. ([source](https://docs.opnsense.org/development/backend.html))

### Graphics & Multimedia

- [Network Traffic Flow Visualizers](https://awesome-repositories.com/f/graphics-multimedia/visualization-mapping/geospatial-visualizations/connection-visualizers/flow-pattern-visualizers/network-traffic-flow-visualizers.md) — Provides graphical visualizations of network traffic patterns to identify top users and destination ports. ([source](https://docs.opnsense.org/manual/how-tos/insight.html))

### Operating Systems & Systems Programming

- [x86_64 Device Support](https://awesome-repositories.com/f/operating-systems-systems-programming/legacy-device-support/x86-64-device-support.md) — Provides full kernel-level and operational support for x86-64 architectures across diverse hardware form factors. ([source](https://docs.opnsense.org/manual/hardware.html))
- [System Data Template Generators](https://awesome-repositories.com/f/operating-systems-systems-programming/system-administration-maintenance/file-system-management/file-systems/file-template-generators/system-data-template-generators.md) — Generates environment-specific system configuration files from templates to ensure consistency across nodes. ([source](https://docs.opnsense.org/development/backend.html))
- [Daemon API Interfaces](https://awesome-repositories.com/f/operating-systems-systems-programming/system-administration-maintenance/system-services/background-daemons/daemon-api-interfaces.md) — Provides a specialized socket-based interface for starting, stopping, and controlling background system daemons. ([source](https://docs.opnsense.org/development/architecture.html))

### User Interface & Experience

- [Dashboard Widgets](https://awesome-repositories.com/f/user-interface-experience/dashboard-widgets.md) — Ships modular interface components for at-a-glance monitoring and quick function access on the system dashboard. ([source](https://docs.opnsense.org/development/frontend.html))