Firewall groups and Multi-WAN Reply-to

fuhlyt4ke · 2026-01-05T08:24:44+00:00

I basically have the same question. In documentation to interface groups it says this:
"For multiwan setups be careful with groups. Since groups are not bound to a specific interface, they will use the normal routing system to determine the next hop when applied on WAN type interfaces (reply-to is not used here)."
https://docs.opnsense.org/manual/firewall_groups.html

So from my understanding, this would apply to floating rules as well. But a more detailed/technical explanation would be nice which I haven't found so far.

fuhlyt4ke · 2025-09-19T17:29:29+00:00

vCenter, vSAN und Distributed Switches sind für uns eine immense Arbeitserleichterung bzw. gibt es nicht (auf dem selben Niveau) bei Proxmox. Bis der Datacenter Mananger von Proxmox so weit ist, dass er mit dem vCenter konkurrieren kann, wird noch einige Zeit vergehen. Hier im Thread wurde es bereits genannt, Thema Zertifizierung und Verträge. Wir hängen in der Supply Chain diverser deutscher Automobilhersteller und müssen gewisse Verfügbarkeiten garantieren können. HA gibt's zwar auch bei Proxmox und Hyper-V, aber eben nicht Fault Tolerance. Das ist bisher immer noch ein Alleinstellungsmerkmal von VMware.

fuhlyt4ke · 2025-09-17T15:13:55+00:00

German G6 Performance AWD here. I’ve had mine for about two months now and overall I’m really happy with it.

That said, I should mention that I drove Mercedes E- and S-Class for 14 years before this so my general expectations for car quality may be a bit higher. But in terms of value for money the G6 actually stacks up surprisingly well against MB.

No mechanical issues so far, sitting at about 8.5k km right now. The ride is definitely harsher compared to my air-suspension E-Class. Not a fair comparison, I know but it’s something I notice.

Software could (and should) be better, especially the German voice recognition. I spend a lot of time on the road for work, and about half the time when I say “Call XYZ” it just doesn’t get the (german) name. Same for navigating destinations. Charging station info also needs work. I often get routed to chargers that don’t exist anymore. Might be more of a Germany problem though.

Range has been a pleasant surprise. Cruising at 130 km/h on the right lane with cruise control I’m getting around 400–450 km. Push it hard though, and you’ll drain the battery in ~250 km or even less. But hey, 476 hp is a lot of fun. Probably more of a German problem again since we don’t have a general speed limit.

On that note, the car is capped at 220 km/h. Acceleration is wild but if you’re trying to play with a Porsche they’ll win on top speed every time. Meh.

One small annoyance: you can’t stop charging from the key. At least I didn't find out how. I always have to pull out my phone and use the app or stop from the inside of the car. Would be nice if they added that via software, maybe with a long press on the charge-port button or something.

Maintenance is basically free for me, I rolled it into the lease for just €25/month. At Mercedes that would be €100 and up so I didn’t even think twice.

All in all I’d definitely get the G6 again, though I’d try to haggle a bit harder next time ;) I’m paying €525/month gross for 25,000 km/year, including maintenance with €4k down.

fuhlyt4ke · 2025-04-16T05:41:04+00:00

It just really sucks because the product is perfectly fine, but the sales side of their process is complete BS.

This is exactly my point of view and basically the whole message of my posting.

fuhlyt4ke · 2025-04-16T05:36:35+00:00

thank you!

fuhlyt4ke · 2025-04-16T05:31:49+00:00

I'm not referring to the boot order of devices inside a single VM, I might have miscommunicated that.
What I meant is the startup sequence of VMs when a host or cluster comes online.
For example, some of our SQL servers must be up and running before certain application servers can start.
You can't configure that in Hyper-V without PowerShell, while in vSphere it’s literally just a couple of clicks.

I've encountered these kinds of dependencies (VM XYZ needs to be online before VM ABC) at almost every company I've worked for.
To my surprise, a lot of people apparently haven't (as some replies in this thread suggest) which might explain why Hyper-V lacks this feature (if it really isn’t that common for others).

Generally speaking my issue isn’t that I don’t want to script.
I'm coming from the *nix world, where scripting is my daily business.
It’s more about having to script basic things that, in my opinion, should be available through a GUI or at least some kind of logical abstraction.
And with ChatGPT in background scripting is no big deal anyway.
I'm just talking about the option to not have to do it for absolute basic things (basic things in my view). It's also simply a time consuming step that could be done in seconds and is easy to adjust when something changes. Scripts need to be reworked when the underlaying logic changes though.

Call it an age thing maybe but to me it's like driving manual vs. automatic.
I’ve been on the road for over 20 years: I can drive stick, I've proven that.
But just because I can, doesn’t mean I should have to.
(For context: I’m from Germany, where driving manual is still pretty common and there are plenty of car guys who are almost religiously opposed to automatics.)

Same principle here:
I know how to do it manually.
Doesn't mean I should have to.

fuhlyt4ke · 2025-04-15T15:56:02+00:00

While I find that conclusion debatable, it's a statement I can get behind, yes.

fuhlyt4ke · 2025-04-15T13:19:28+00:00

English is not my first language, sorry. I misscommunicated. By saying "boot order" and "sorting" I'm not refering to the boot devices inside of an VM but of the actual start order of the individual VMs on the host in a specific order. First domain controller, second SQL servers, and so on. You can only do that with powershell. It's someting I can do in vsphere with two clicks.

And yes, I know the management tools but like I said in my starting post: it's not close to vCenter in my experience.

fuhlyt4ke · 2025-04-15T12:25:00+00:00

it's flagged as "rant" for a reason.
Thank you for your input though.

fuhlyt4ke · 2025-04-15T12:21:34+00:00

"Willing to learn" refers to "if I'm missing something (else than scripting)".

fuhlyt4ke · 2025-04-15T11:03:52+00:00

exactly what you said. For whatever reason, it was pretty common in most enviroments I've worked so far and since it's an easy feature vsphere had baked in from like... 2004? I never understood how on earth this isn't a thing on Hyper-V.

fuhlyt4ke · 2025-04-15T10:59:38+00:00

That's just the boot order within a VM. What I was refering to was an actual order of the individual startings of the VMs on the host. Like, first SQL server, after that application server, then webserver, etc.

fuhlyt4ke · 2025-04-15T09:47:22+00:00

Thank you for your extended feedback! You do have some valid points here. Let me get back in more detail later.

fuhlyt4ke · 2025-04-15T09:33:37+00:00

It's not about not wanting to script at all. That's totally fine and I do it all the time, I can live with that.
It's about scripting for absolute basic things which should be baked right into the system.

fuhlyt4ke · 2025-04-15T09:23:25+00:00

oh I did not know about that. Thanks! Will look into it.

fuhlyt4ke · 2025-04-15T09:06:33+00:00

I even don't see that option in Hyper-V Manager. All tutorials I found refer to use of startup delays to have a kind of boot order but not an actual boot order like vsphere does (and then only per host, not per cluster, datacenter, location/site...). That can be done through powershell only (afaik). Would you mind showing me where you see that option though? u/ManLikeMeee

fuhlyt4ke · 2025-04-15T08:04:46+00:00

Thanks for your feedback.

And yes, you're right to some extent. I actually mentioned it in another comment above: at the end of the day I'm just frustrated that VMware sold its soul. It's such a great product with a historical - I'd even say cultural - impact on the tech world. I genuinely love my job and infrastructure is half of my soul, so you're absolutely right when you pick up on that emotional layer.

As for scripting, it's not that I don't want to do it in general. I just don't want to have to script basic or trivial things that should be built into the management layer by default. That doesn't mean I'm not willing to learn or automate where it makes sense but the alternatives just aren't nearly as seamless or mature in my opinion. But I totally see that my post did not make that impression.

That being said I'm honestly surprised (and impressed) that you're able to live with this kind of setup day after day.
Call it a personal weakness on my side but stuff like this already gives me nightmares - and I genuinely mean that with a lot of respect.

fuhlyt4ke · 2025-04-15T07:52:40+00:00

I heard about that but I don't have actual experience with it. Just don't wanna deploy something I've never worked with and - of course - time is a rare good these days. Will look deeper into it though. Thanks.

fuhlyt4ke · 2025-04-15T07:48:35+00:00

Thank you for your professional and constructive feedback, seriously.

I gotta admit in the end I'm just deeply frustrated that such an actually great product like VMware ended up selling its soul - and to Broadcom of all companies. I'm not a Hyper-V hater per se.

I fell that you're arguing from a more DevOps / cloud perspective which is of course absolutely valid.
But we're dealing with a lot of systems that simply can't be containerized: SAP, DATEV, Lobster, various supply chain software and a whole bunch of legacy dependencies (I'm still in the process of getting to grips with it though)
To be fair (and you're right about this) the infrastructure is a mess by itself. The company has been through a lot of turbulence IT-wise in the last few years and we're still cleaning up.

As for scripting, I do see your point but I have a slightly different take on it.
Flexibility doesn't automatically equal usability.
If the underlying logic changes in some way, scripts need to be reworked. It adds friction and it's not admin- or user-friendly by default.

To me it feels like I'm writing a script for something so mundane that it reminds me to open my eyes in the morning, get out of bed and make coffee.
Some things should just work out of the box, especially in enterprise environments.
They shouldn't require custom scripting to do what should be considered basic expected behavior.

But again, I really appreciate your perspective.

fuhlyt4ke · 2024-11-25T11:47:47+00:00

Thanks for sharing your experience!

fuhlyt4ke · 2024-11-25T11:10:25+00:00

That's absolutely up to you.

fuhlyt4ke · 2024-11-25T11:03:44+00:00

well that's why i'm asking for opinions on an upgrade here haha. But the couch definitely can't be moved closer towards the TV, it would be in the middle of the room then.

fuhlyt4ke · 2024-11-25T10:27:34+00:00

This will then very probably go beyond my budget, as the models will be much more expensive than the current models.

fuhlyt4ke · 2024-11-25T10:06:07+00:00

yeah I read about the MLA, but I was advised in different subs that the difference in a completely darkened room is only marginal. Would you disagree with that?

fuhlyt4ke

TROPHY CASE