STACKIT pfSense Deployment

Terraform script to deploy an pfSense firewall into STACKIT Cloud.

Deployment overview:

The Terraform deployment consists of:

• WAN Network
• WAN Router with external RouterIP
• LAN Network
• LAN Router with static default gateway router to the pfSense firewall
• pfSense firewall VM + disk volume
• FloatingIP for firewall VM
• deactivating port security on firewall ports

Setup

Requirements:

• Terraform installed
• Access to a STACKIT project
• UAT (OpenStack) credentials

Installation

1. Clone Repo
2. Setup enviroment (.env) variables
3. Run Terraform terraform apply

Default Configuration

Interfaces

1. vtnet0 WAN
2. vtnet1 LAN

NAT

Masqurade (Outbound NAT) Traffic from LAN to WAN

DNS

Disable build in unbound DNS resolver and forward all DNS queries to public DNS Servers OpenDNS & Quad9

Dashboard

Customized Widgets and CSS settings

Password

Set default password for admin to STACKIT123!

Interface Access

Disabled Referer-Check Enable allow all wan adresses to connect to the WebUI

Now you can enter the WebUI via the FloatingIP on port 443 the default login is admin:STACKIT123!