Management Pfsense from centralized location.
-
I was just wondering if there is any plan to have some centralized management software like fortimanager / panorama. so that users with multiple sites can push configs and do backup etc. etc.
-
They've been talking about it for years. From JimP via Reddit 3 months ago:
"It's not on our immediate radar at the moment. The current design does not lend itself well to central management. pfSense needs to gain a proper API first which is quite a large undertaking. There have been a few attempts that have happened with little success over the years, most of these from third parties, They've attempted to hack things in or double down on bad habits. We thought we might have a chunk of that done for 2.5 but it's not looking that way now.
In this area at the moment most of our current focus is on TNSR, which has a RESTCONF API and will be easy (by comparison) to hook into this kind of central management system. We've already cooked up a few rather cool things with RESTCONF that we'll be showing in the near future.
That doesn't mean we don't have some ideas here for pfSense/non-TNSR applications or a path forward, just that it isn't happening as soon as we'd hoped.
tl;dr We don't want to half-ass it so it's not happening yet."
-
@kom said in Management Pfsense from centralized location.:
They've been talking about it for years. From JimP via Reddit 3 months ago:
"It's not on our immediate radar at the moment. The current design does not lend itself well to central management. pfSense needs to gain a proper API first which is quite a large undertaking. There have been a few attempts that have happened with little success over the years, most of these from third parties, They've attempted to hack things in or double down on bad habits. We thought we might have a chunk of that done for 2.5 but it's not looking that way now.
In this area at the moment most of our current focus is on TNSR, which has a RESTCONF API and will be easy (by comparison) to hook into this kind of central management system. We've already cooked up a few rather cool things with RESTCONF that we'll be showing in the near future.
That doesn't mean we don't have some ideas here for pfSense/non-TNSR applications or a path forward, just that it isn't happening as soon as we'd hoped.
tl;dr We don't want to half-ass it so it's not happening yet."
Thanks KOM for this information.
What is this TNSR ? something made out of Pfsense? is it paid ? -
https://www.netgate.com/products/tnsr/
