diff --git a/dns/ddclient/src/opnsense/mvc/app/models/OPNsense/DynDNS/DynDNS.xml b/dns/ddclient/src/opnsense/mvc/app/models/OPNsense/DynDNS/DynDNS.xml
index 756d13c0d..a0b7fb887 100644
--- a/dns/ddclient/src/opnsense/mvc/app/models/OPNsense/DynDNS/DynDNS.xml
+++ b/dns/ddclient/src/opnsense/mvc/app/models/OPNsense/DynDNS/DynDNS.xml
@@ -61,6 +61,8 @@
                         <duckdns>DuckDNS</duckdns>
                         <easydns>EasyDNS</easydns>
                         <googledomains>Google</googledomains>
+                        <he-net>HE.net</he-net>
+                        <he-net-tunnel>HE.net TunnelBroker</he-net-tunnel>
                         <namecheap>NameCheap</namecheap>
                         <noip>Noip</noip>
                         <nsupdatev4>nsupdate.info (IPv4)</nsupdatev4>
diff --git a/dns/ddclient/src/opnsense/service/templates/OPNsense/ddclient/ddclient.conf b/dns/ddclient/src/opnsense/service/templates/OPNsense/ddclient/ddclient.conf
index a506db3ec..b676d9e30 100644
--- a/dns/ddclient/src/opnsense/service/templates/OPNsense/ddclient/ddclient.conf
+++ b/dns/ddclient/src/opnsense/service/templates/OPNsense/ddclient/ddclient.conf
@@ -49,6 +49,14 @@ use=web, web=http://dynamic.zoneedit.com/checkip.html
 {%            if account.service == 'cloudflare' %}
 protocol=cloudflare
 zone={{account.zone}}
+{%            elif account.service == 'he-net' %}
+protocol=dyndns2
+ssl=yes
+server=dyn.dns.he.net
+{%            elif account.service == 'he-net-tunnel' %}
+protocol=dyndns2
+ssl=yes
+server=ipv4.tunnelbroker.net
 {%            elif account.service == 'nsupdatev4' %}
 protocol=dyndns2
 ssl=yes