OPNSense in HA with CARP with dual WANs

1.7K

This tutorial explains how to join 2+ OPNSense boxes in a cluster (pfSync) with LAN + WAN High Availability (CARP). We will configure a consumer-grade router as an example to receive web traffic and share it via CARP with the main OPNSense unit that runs HAProxy. Buckle in for a ride that you will not forget!

This is what the end product will look like:

Expected Hardware to Start With Set up the SYNC interface + Firewall rules Set up pfsync + XML-RPC Configure CARP on LAN & WAN interfaces Set up your WAN router to work with CARP Verify CARP functionality on LAN + WAN