Google Cloud NGFW vs TNSR
Google Cloud NGFW
cloud.google.comTNSR
netgate.comSide by side
| Figure | Google Cloud NGFW | TNSR |
|---|---|---|
| Price from | $0.02/mo | $83.25/mo |
| Free plan | Yes | Yes |
| Free trial | Yes | Yes |
| Open source | — | — |
| Web | Yes | — |
| Linux | — | Yes |
| API | Yes | Yes |
| Self-hosted | — | Yes |
| Plans published | 12 | 3 |
| Spec score · Firewall Software | 8.8 (#9) | 8.7 (#11) |
| Free plan | Yes | No |
| Outbound control | advanced | advanced |
| Supported platforms | web,api | linux |
| Rule direction | both | both |
Plans
Google Cloud NGFW
- Free usage tierFree
- Cloud NGFW Standard$0.02 a month
- Active secret versions$0.06 a month
- Cloud NGFW Enterprise$0.02 a month
- Access operations$0.03 a month
- Rotation notifications$0.05 a month
- Cloud NGFW EssentialsFree
- Cloud NGFW Standard$0.02 a month
- Firewall Insights overgranting analysis$0.20 a month
- Firewall Insights configuration analysis$1 a month
TNSR
- TNSR AWS/Azure proof of conceptFree
- TNSR Software Subscription - Renewal$999 a year
- TNSR softwarePrice not published
In their own words
Google Cloud NGFW
Google Cloud NGFW has no write-up on Specifiction yet; its figures are above.
TNSR
TNSR is a software router and VPN concentrator for high-speed routing and VPN workloads. Netgate says its Vector Packet Processing can scale from 1 to 1000 Gbps and beyond on commercial off-the-shelf hardware. Routing options include BGP, OSPF, static and dynamic routing, policy-based routing, carrier-grade NAT, and equal-cost multipath. For VPNs, it supports routed site-to-site IPsec and WireGuard, with IKEv1 and IKEv2. Administrators can manage TNSR through a CLI, RESTCONF API, or NETCONF. Monitoring options include SNMP and a Prometheus exporter for dataplane statistics. Security features listed include access control lists, packet filtering, password or key authentication, RADIUS, and role-based access control. Netgate offers cloud deployments through AWS and Azure marketplaces, as well as its 6100, 8200, and 8300 appliance systems. Subscriptions include 24x7 TAC support. TNSR has firewall capabilities, but Netgate does not position it as a firewall and warns it may lack features customers expect from pfSense Plus.