OpnSense (on Proxmox) with ZenArmor > no more traffic to Wiregaurd client

I'm running a Proxmox server (9.2.2) with 4 VLAN's bridged into a separate "ethernet VirtIO interface and hosting an OpnSense 26.1.10 and the Wireguard VPN service. All was working fine, until I've installed Zenarmor!

As soon as I enable the packet filtering the Wireguard client does not revice any packets anymore, and the peer status is red.

I've tried all the tricks I was able to find (there are a lot..)
- changed the Deployment mode, to all L3 options
- enabled Promiscuous mode (first only on the WG interface, and then on all...!)
- tried to find logs, but nothing showed up being blocked

As soon as I stop the packet filtering service, all works fine again.

I guess this combo should actually work, as there are is many documentation around, but either I miss something fundamental, or there is again some bug...

Any ideas are welcome, as with this limitation, I can not use Zenarmor, which would be a shame...
roman

Official comment

SVN Support Team

June 27, 2026 04:18

Hi Roman,

Thank you for reaching out and bringing this to our attention.

We need to investigate the logs and configuration. Could you share the logs and configuration via “Have Feedback” option in the bottom left corner of UI by selecting all checkboxes?

OpnSense (on Proxmox) with ZenArmor > no more traffic to Wiregaurd client

Comments

Didn't find what you were looking for?