pfSense & OPNsense

pfSense and OPNsense can route your whole network through RealVPN with an OpenVPN client. The flow: import certificates → create the client → assign an interface → outbound NAT.

1. Get your OpenVPN certificates

   On realvpn.io/settings choose OpenVPN UDP, a location and New manual device, then press Generate config. RealVPN.ovpn is saved to your Downloads.

   Then press Certificates (.zip) and unzip it — you’ll need ca.crt, client.crt, client.key and the server name in server.txt.

   

2. Import the CA and the client certificate

   pfSense: System → Cert Manager → CAs → Add → Import an existing Certificate Authority, paste ca.crt. Then Certificates → Add/Sign → Import an existing Certificate, paste client.crt and client.key.

   OPNsense: the same under System → Trust → Authorities and System → Trust → Certificates.

3. Create the OpenVPN client

   pfSense — VPN / OpenVPN / Clients / Edit

   VPN / OpenVPN / ClientsSave

   Server modePeer to Peer (SSL/TLS)

   ProtocolUDP on IPv4 only

   Server host · portde-fra.realvpn.space · 1194

   TLS keyUnchecked

   Peer CA / Client certRealVPN CA / RealVPN client

   Data ciphersAES-256-GCM

   OPNsense: VPN → OpenVPN → Instances → +, Role Client, remote de-fra.realvpn.space:1194, protocol UDP, certificate and CA as above.

4. Assign the interface and add NAT

   Interfaces → Assignments: add ovpnc1, enable it (no IP config). Firewall → NAT → Outbound: switch to Hybrid and add a rule for your LAN network on the new interface. To send only some devices through RealVPN, create a LAN firewall rule with the RealVPN gateway.