ferm vs TNSR
ferm
github.comTNSR
netgate.comSide by side
| Figure | ferm | TNSR |
|---|---|---|
| Price from | Free | $83.25/mo |
| Free plan | Yes | Yes |
| Free trial | — | Yes |
| Open source | — | — |
| Linux | Yes | Yes |
| API | — | Yes |
| Self-hosted | — | Yes |
| Plans published | 1 | 3 |
| Spec score · Firewall Software | 7.9 (#43) | 8.7 (#11) |
| Installation | The README says the package does not need compilation and can be installed with make install. | TNSR 26.02 installs from a hybrid ISO written to USB/DVD or supplied to a virtual-machine hypervisor. |
| Intended users | The README describes ferm as a tool for firewall administrators who want to write and read firewall rules more easily. | Netgate identifies businesses, ISPs, internet telephone providers, hosting providers, managed service providers, and SaaS providers as potential users. |
| Outbound control | advanced | advanced |
| Supported platforms | linux | linux |
| Rule direction | both | both |
| Support | The documentation directs bug reports to the project's GitHub issues page. | Netgate says TNSR subscriptions include 24x7 TAC support, and its overview describes access to support veterans, professional services, and training. |
Plans
TNSR
- TNSR AWS/Azure proof of conceptFree
- TNSR Software Subscription - Renewal$999 a year
- TNSR softwarePrice not published
In their own words
TNSR
TNSR is a software router and VPN concentrator for high-speed routing and VPN workloads. Netgate says its Vector Packet Processing can scale from 1 to 1000 Gbps and beyond on commercial off-the-shelf hardware. Routing options include BGP, OSPF, static and dynamic routing, policy-based routing, carrier-grade NAT, and equal-cost multipath. For VPNs, it supports routed site-to-site IPsec and WireGuard, with IKEv1 and IKEv2. Administrators can manage TNSR through a CLI, RESTCONF API, or NETCONF. Monitoring options include SNMP and a Prometheus exporter for dataplane statistics. Security features listed include access control lists, packet filtering, password or key authentication, RADIUS, and role-based access control. Netgate offers cloud deployments through AWS and Azure marketplaces, as well as its 6100, 8200, and 8300 appliance systems. Subscriptions include 24x7 TAC support. TNSR has firewall capabilities, but Netgate does not position it as a firewall and warns it may lack features customers expect from pfSense Plus.