pfsense VM + VPN routing

[Marlinjones]

Hello. I have a scenario I'm struggling with. I'm setting up a Proxmox Host with pfsense as a VM to handle all network traffic. I want to restrict a different container to only connect to the VPN and disconnect from the internet if the VPN goes down (i.e. kill switch).

What would be the proper settings to use to achieve this functionality? I know I could set up a VPN instance inside the container and kill switch from there but I would rather handle it from the router level.

The VPN provider is Mullvad if that matters any.

 

[r.jochum]

This needs a complicated setup, you need:

- 1 Additional bridge on Proxmox
- Connect the container to only that bridge
- A bridge inside pfsense
- connect the VPN with pfsense to the pfsense bridge
- connect the pfsense to the proxmox bridge and connect this interface to the pfsense bridge

So outbound Networking goes like that:

Container -> Promox Bridge -> pfSense interface -> pfSense bridge -> VPN.

 

[r.jochum]

Ahh i forgot something, somehow you need to make pfSense make to route traffic from the bridge through VPN.