In this article, we will see the steps to install pfSense on the DigitalOcean droplet. Bobcares, as a part of our DigitalOcean Managed Services, offers solutions to every query that comes our way.

pfSense-DigitalOcean

Installing pfSense on a DigitalOcean droplet involves mainly 3 steps:

• Firstly, creating the droplet on DigitalOcean and then grabbing the public IP and SSH into it as root after booting the created droplet.
• Then installing pfSense.
• Lastly, deployment of pfSense on DigitalOcean.

Let’s now take a closer look at each of the steps.

DigitalOcean Droplet Creation

We have to follow the below steps to create a droplet on DigitalOcean.

1. Firstly, create a new droplet by logging into the DigitalOcean Dashboard.
2. Then select ‘FreeBSD 11.1 x64’ as the droplet image
3. Now choose the data center region of preference.
4. If we want IPv6 and Private Networking, click those boxes.
5. Then add the SSH key
6. Now provide a hostname
7. Finally, click the ‘Create’ button.

Upon starting the droplet after it has been formed, take note of its public IP and SSH in as root. Put “sudo” in front of all the commands following step 7 if we don’t SSH in as root.

PfSense Installation

1. Visit pfSense’s official site to download the software.
2. Then choose ‘AMD64 (64-bit)’ as the architecture.
3. Choose ‘USB Memstick Installer’ as the installer.
4. Choose ‘VGA’ for the console.
5. Pick whichever mirror we want.
6. Right click the ‘Download’ button and select ‘Copy Link Location.’
7. Run the following command on the droplet’s SSH connection:

   cd /tmp
   curl -O <URL FROM STEP 6>
   
   # Example
   curl -O https://nyifiles.pfsense.org/mirror/downloads/pfSense-CE-memstick-2.4.4-RELEASE-p1-amd64.img.gz

    
8. Now Disable SWAP using the code:

   swapoff -a

    
9. Then enable debug mode for GEOM using the code:

   sysctl kern.geom.debugflags=0x10

    
10. Write the ISO of pfSense to /dev/vtbd0:

    gunzip <PFSENSE DOWNLOAD> | dd of=/dev/vtbd0 bs=512k
    
    # Example:
    gunzip -c pfSense-CE-memstick-2.4.4-RELEASE-p1-amd64.img.gz | dd of=/dev/vtbd0 bs=512k

     
11. Finally, reboot the droplet and the pfSense installer will start.

    reboot

     

Deployment of pfSense on DigitalOcean Droplet

Go back to the DigitalOcean interface, select the droplet and open the console window to complete the deployment process.

1. Press ENTER to accept the copyright notice after the installer starts.
2. Now select ‘Install’.
3. Then choose ‘>>> Continue with default keymap’.
4. Also, choose ‘Manual’.
5. Delete all listed EXCEPT for vtbd0, vtbd0s2 and vtbd0s2a.
6. Select “vtbd0” and hit “C,” then click “OK.”
7. Choose vtbd0s1 and then hit “C”.
8. Now change the mount point to “/” and select ‘OK’.
9. Select ‘Finish’
10. Then select ‘Commit’
11. Finally, select “No” and “Reboot after the installation is finished.”

We will be at the initial configuration wizard for setting up pfSense on DigitalOcean once the droplet reboots. Since the deployment varies depending on the user, we may customize it to suit our needs.

[Looking for a solution to another query? We are available 24/7.]

Conclusion

In this article, we have shown you the steps from our Support team to set up pfSense on a DigitalOcean droplet.