A killer solution is to run OPNsense in a virtual machine, and then adjust the virtual<->physical NIC mappings when moving between hosts. Its super powerful and

A killer solution is to run OPNsense in a virtual machine, and then adjust the virtual<->physical NIC mappings when moving between hosts. Its super powerful and has plugins galore (haproxy, nginx proxy, dynamic dns updaters, openvpn etc). I run two VM's in high availablity mode and can take down any virtualization host without any downtime(important with WFH).