Supported target
Gator targets OPNsense. pfSense can connect and test, but the full management surface — VPN workflows, routing, tunnels, Tailscale, migration, backups — is OPNsense only for now.
What ships
- Multi-instance firewall setup and switching
- Local auth with session-based access after bootstrap
- WireGuard VPN create, import, deploy, activate, deactivate, and re-adopt flows
- Selective routing with built-in and custom app profiles
- Site-to-site tunnel automation with SSH-assisted deployment and verification
- Tailscale plugin setup and subnet advertisement management
- Migration tooling for legacy firewall rules
- Backup create, list, download, and delete workflows
What Gator stores locally
- SQLite application state for instances, VPNs, tunnels, app profiles, cache, and sessions
- Downloaded OPNsense config backups
- Uploaded IP range files used by URL-table based routing flows
Heads up
Remote tunnel automation requires Linux hosts reachable over SSH running
systemd and wg-quick.