DashboardSign in

DynDNS on OPNsense: step-by-step setup

OPNsense handles Dynamic DNS through the os-ddclient plugin, which supports any custom DynDNS2 provider. With DNS Beacon your firewall stays reachable under a permanent hostname even when your WAN IP changes. Here's the setup.

Step by step

  1. Open the admin interface of your OPNsense and go to Services → Dynamic DNS → Settings.
  2. Enter the values below. Your username is your account email, your password is an API key from the dashboard.
  3. Save the settings. Your hostname now updates automatically whenever your IP changes — usually within a minute.

Settings to enter

Services → Dynamic DNS → Settings

Service type:
Custom
Server:
api.dnsbeacon.com
Username:
your email address
Password:
your API key
Hostname:
myhouse.dnsfollowme.uk
IPv6:
Add a second account for IPv6 only: set "Check ip method" to an IPv6 service and enable "Allow IPv6" under General Settings.

Install the os-ddclient plugin first (System → Firmware → Plugins) and pick the Custom service — it sends standard DynDNS2 updates to /nic/update.

IPv4 or IPv6?

The values above update the IPv4 address (A record) — the normal case on connections with their own public IPv4. For IPv6 (AAAA record) the device sends the parameter &myipv6=<IPv6> in addition or instead. How to do that on this device is in the "IPv6" row of the table.

DS-Lite or CGNAT (many cable and fibre connections): the router then has no public IPv4, and the service rejects a private WAN address with "abuse". In that case send only myipv6 — or use the DNS Beacon client directly on the target device, which detects both address families itself.

Need a free hostname first?

Create a free DNS Beacon account, add a hostname and generate an API key — then come back and finish the setup above.

Create free account

← Back to all setup guides