OPNsense Firewall Redesign, Cleanup & Optimization

We need an experienced OPNsense administrator to perform a complete review, cleanup, simplification, and optimization of our production OPNsense firewall (version ~26.1). The firewall currently has high rule count (~110+), legacy components, and complexity that we want to reduce significantly while maintaining strong security and adding better monitoring. Make any suggestions for Optimization or Performance or Security Enhancement. Current Environment Summary Hardware: Intel i5-6500T, multi-WAN (Shaw Static + Dynamic + Webserver), LAGG + VLAN segmentation. Key networks: Corporate, Webserver, CCTV, Service, FelixWelding, ACG. Security: CrowdSec (Free), GeoIP + ASN blocking, OpenVPN + WireGuard. Goals: - Remove bloat (Zenarmor, Tailscale, unused VLANs/aliases) - simplify VPN, strengthen inbound controls, improve monitoring. Scope of Work Required: Full review of current configuration Document current rules, NAT, interfaces, VPN, aliases, tunables. Cleanup & Removal Remove Zenarmor completely (including all remnants). Remove Tailscale. Delete unused VLANs (Management, Creekside, ACGMigration) and related DHCP/NAT/rules. Delete obsolete aliases (EXC01, KEMP, PBX, PMG, Ayush, India, Remote Workers, etc.). Remove redundant inter-VLAN block rules and outdated NAT reflection rules. Simplification & Optimization Consolidate and reorganize firewall rules (floating & interface specific) Implement clean default-deny posture with proper GeoIP + ASN + CrowdSec blocking. Optimize OpenVPN Add WireGuard Remote workers Group A → Webserver Remote workers Group B → Corporate Optimize NAT (especially hairpin/reflection). Tune sysctls, monitoring (Device Monitor, Telegraf, alerts), logging, and performance for the hardware. Testing & Handover Full testing of all networks, VPN access, published services, inter-VLAN access. Provide final clean config export + documentation. Knowledge transfer / recommendations for ongoing maintenance.