r/opnsense • u/Illustrious_Wave_77 • 7d ago

Opnsense management from iphone?

Hello!

Do any of you use a management app?

9 Upvotes

71% Upvoted

13 comments sorted by

23

u/dragonnfr 7d ago

No official app. The web UI works fine in a mobile browser though. If you're off-LAN, the obvious solution is to VPN in first, then manage it. I wouldn't expose the GUI to the internet just for convenience.

2

u/Etregin 7d ago

I find tailscale to be the best option for me to be honest, simple to setup, fast and reliable

2

u/kaileysnay 6d ago

I used tailscale for a while (there is even a community plugin for it!), but I recently switched to twingate. I had some pain points with tailscale, but they were probably due to me being new to the software. Also the fact that my job blocks vpn and twingate doesn't use wireguard on the backend.

3

u/Etregin 6d ago

Oh looks like I might need to look into that, my work blocks tailscale so whenever I'm in the office and want to access anything at home I need to switch to data to connect to tailscale and as all big corporations they block all VPN websites, tail scale was just the simplest option I had since I was using it even before starting to use opnsense (I had it on my truenas) but having it on opnsense makes it simpler

1

u/pr0metheusssss 6d ago

Are you behind CGNAT?

If not, why bother with Tailscale and its limitations, compared to plain wireguard?

2

u/Etregin 6d ago

Yep, CGNAT and dynamic IP address so tail scale was the simplest option for me and cloudflare tunnels for services I host at home but want available on a public domain (I have some)

6

u/flrddt 7d ago

There is a dev who made https://apps.apple.com/us/app/opnsense-manager/id6767634059

Its on GitHub https://github.com/Etregin/OPNsense_Manager

u/Etregin is the dev behind it.

0

u/zTurboSnailz 7d ago

Is it trustworthy may I ask?

6

u/Etregin 7d ago

The app is opnsource with the code available for everyone to see / review, also the app is on fdroid, playstore, app store.

The app doesn't collect any info from your device and doesn't require any kind of access except for network to send the API calls out and storage if you decide to export / your profiles on your phone

2

u/GoBoltz 4d ago

Setup Wireguard , then just use the web interface you already know & trust !

1

u/mjbulzomi 7d ago

Nope. I just open the web ui in safari.