Native IPv6 on OPNsense: Delegated Prefixes Across VLANs
Configure DHCPv6 prefix delegation and a unique /64 per VLAN in OPNsense, choose the right RA mode, preserve IPv6 firewall isolation, and test each client path.
Home networking and self-hosted lab guides built around hardware a household can actually justify buying.
Set up a WireGuard road-warrior tunnel with protected keys, working DNS, scoped forwarding, and explicit IPv4/IPv6 verification.
Configure DHCPv6 prefix delegation and a unique /64 per VLAN in OPNsense, choose the right RA mode, preserve IPv6 firewall isolation, and test each client path.
Configure OPNsense WAN failover with monitored gateways, LAN policy routing, a local DNS exception, default gateway switching and realistic state recovery tests.
Use Pi-hole’s current allowlist priority, query log, wildcard allow, and regex test mode to restore a blocked site with the narrowest justified exception.
Route ordinary DNS through Pi-hole, limit DoT, configure managed browsers, and test exactly which DoH bypasses your network policy covers.
Configure automatic Home Assistant OS backups to a Samba NAS, protect the encryption key, verify scheduled files, and practice a current restore path.
Move from Pi-hole to AdGuard Home with a tested rollback: preserve settings, rebuild filtering rules, configure DoH upstream, then switch clients and DHCP safely.
Build and test OPNsense IPv4 IoT rules that allow chosen local services, block internal destinations and permit external access only on a schedule.
Restore mDNS discovery across VLANs with an Avahi reflector or OPNsense repeater, then verify Home Assistant discovery and the separate device firewall path.
Set up Zigbee2MQTT with Home Assistant, a supported coordinator and MQTT; verify pairing and discovery while keeping unsupported devices on their existing bridge.
Drive-managed SMR can slow sustained ZFS writes and resilvers. Learn how to check a specific model, diagnose the bottleneck, and choose documented CMR.