Amer Zec azec-pdx

OPNsense + ProtonVPN + Wireguard

Published: 16 December 2022

Reference: https://docs.opnsense.org/manual/how-tos/wireguard-selective-routing.html

Goal: Set up one or more Wireguard connections from ProtonVPN on OPNsense, with policy based routing, and optional Killswitch.

I'm writing this guide first as a reference for my future self for when I inevitably forget how to do this, but also to help others out. I found there were not many guides on this specific configuration, particularly not with multiple concurrent connections, and these were some steps which were not at all obvious. I did begin with the guide in the official OPNsense documentation, but even that was missing info to make ProtonVPN work. If you are a pfSense user, it is very similar to OPNsense, and you should be able to follow along with some success, but I have not tested it myself.

	/**
	* Runs commands using /bin/sh and returns stdout as string
	*
	* <p>
	* If the exit code of the command is non-zero, the stderr of the command is printed to stderr
	* and a RuntimeException will be thrown.
	* </p>
	* <b>Example</b>
	* <pre><code>
	* def files = sh('ls $HOME').split()

	urlencode() {
	# urlencode <string>

	old_lc_collate=$LC_COLLATE
	LC_COLLATE=C

	local length="${#1}"
	for (( i = 0; i < length; i++ )); do
	local c="${1:$i:1}"
	case $c in

	// Usage: mongo {Server without mongodb:// example 127.0.0.1:27017}/{DbName} [-u {Username}] [-p {Password}] < ./mongo-ls.js

	var collections = db.getCollectionNames();

	print('Collections inside the db:');
	for(var i = 0; i < collections.length; i++){
	var name = collections[i];

	if(name.substr(0, 6) != 'system')
	print(name + ' - ' + db[name].count() + ' records');

Amer Zec azec-pdx

OPNsense + ProtonVPN + Wireguard

Table of Contents

set -e, -u, -x, -o pipefail