OSUI DASHBOARD

Network Monitoring // Parental Controls // Threat Detection // VPN Management for OPNsense

OPNsense port of pfUI Dashboard — uses the OPNsense REST API instead of PHP CLI

LIVE TRAFFIC

Watch WAN traffic in real-time. See blocked threats and allowed connections as they happen with country flags and GeoIP data.

THREAT DETECTION

Automatic port scan detection with configurable thresholds. Identifies attackers scanning multiple ports and generates alerts.

PARENTAL CONTROLS

Per-device internet blocking, domain filtering, and time-based schedules. Enforcement tracking follows devices across IP changes.

THREAT MAP

Visual world map showing attack origins in real-time. Color-coded markers indicate threat severity and frequency.

ABUSEIPDB

Integrated reporting to AbuseIPDB. Automatically report port scanners with smart filtering to avoid false positives.

DNS MONITOR

Real-time DNS query logging showing which devices are accessing which domains. Track browsing activity across your network.

DHCP LEASES

View all Kea DHCP leases with hostname resolution. See which devices are connected and their assigned IP addresses.

TOP TALKERS

Bandwidth monitoring per device using pfctl. See which devices are using the most data with upload/download separation.

BLOCKED IPS

View and manage blocked attacker IPs through OPNsense aliases. Manual blocking and automatic autoblock integration.

DEVICE MANAGEMENT

Rename devices, assign types, and organize your network. Per-device offline alert toggles, quick links to web interfaces, and remote access.

ATTACK HEATMAP

Visual heatmap showing attack frequency by country and time. Identify patterns in malicious traffic targeting your network.

SETTINGS

Theme selection, API key management, network detection, SSH management, speed test, backup & restore with auto-reboot.

EMAIL ALERTS

Get notified by email when your WAN goes down, comes back up, or when a monitored device goes offline. Works with Gmail, Outlook, or any SMTP provider. Per-device alert toggles with debounce and cooldown to prevent spam.

SECURE LOGIN

Password-protected dashboard with SHA256 hashing. Session-based authentication with configurable auto-logout timeout.

WIREGUARD VPN

Full WireGuard VPN management. Create servers, add peers, generate QR codes for instant mobile setup, download client configs, and monitor connections — all through the OPNsense API. Auto-creates firewall rules on setup.

OPNSENSE API

All firewall operations use the OPNsense REST API. No SSH required for daily operation — secure, fast, and fully integrated.

PORT FORWARDING

Create and manage port forwarding rules through a simple interface. Add, edit, and delete NAT rules without touching the OPNsense web UI.

WAN UPTIME

Track your internet connection uptime with real-time monitoring. See current status, uptime percentage, latency, and outage history at a glance.

BANDWIDTH HISTORY

Per-device bandwidth graphs showing upload and download over time. View sites visited (DNS queries) and detailed traffic history for any device on your network.

SSH TERMINAL

Built-in web-based SSH terminal for direct access to your OPNsense shell. No separate SSH client needed — manage your firewall from the dashboard.

// REQUIREMENTS

  • OPNsense version 24.1 or newer
  • Python 3.11+ installed on OPNsense (pkg install python311)
  • SSH access enabled on OPNsense (for initial installation only)
  • OPNsense API key configured for dashboard access (see Installation guide)
  • Optional: AbuseIPDB API key for threat reporting
  • Optional: GeoLite2-City.mmdb for country flags and threat map
  • Optional: SMTP email account (Gmail, Outlook, etc.) for email alerts