OpenBSD PF vs TNSR
OpenBSD PF
openbsd.orgTNSR
netgate.comSide by side
| Figure | OpenBSD PF | TNSR |
|---|---|---|
| Price from | Free | $83.25/mo |
| Free plan | Yes | Yes |
| Free trial | — | Yes |
| Open source | — | — |
| Linux | — | Yes |
| API | — | Yes |
| Self-hosted | Yes | Yes |
| Plans published | 1 | 3 |
| Spec score · Firewall Software | 7.5 (#62) | 8.7 (#11) |
| Free plan | Yes | No |
| Intended users | The PF documentation is focused on users of the most current OpenBSD release. | Netgate identifies businesses, ISPs, internet telephone providers, hosting providers, managed service providers, and SaaS providers as potential users. |
| Outbound control | advanced | advanced |
| Supported platforms | OpenBSD | linux |
| Rule direction | both | both |
| Security | PF provides an antispoof keyword for protection against address spoofing. | TNSR feature listings include access control lists, packet filtering, user authentication by password or key, RADIUS authentication, and role-based access control. |
Plans
TNSR
- TNSR AWS/Azure proof of conceptFree
- TNSR Software Subscription - Renewal$999 a year
- TNSR softwarePrice not published
In their own words
TNSR
TNSR is a software router and VPN concentrator for high-speed routing and VPN workloads. Netgate says its Vector Packet Processing can scale from 1 to 1000 Gbps and beyond on commercial off-the-shelf hardware. Routing options include BGP, OSPF, static and dynamic routing, policy-based routing, carrier-grade NAT, and equal-cost multipath. For VPNs, it supports routed site-to-site IPsec and WireGuard, with IKEv1 and IKEv2. Administrators can manage TNSR through a CLI, RESTCONF API, or NETCONF. Monitoring options include SNMP and a Prometheus exporter for dataplane statistics. Security features listed include access control lists, packet filtering, password or key authentication, RADIUS, and role-based access control. Netgate offers cloud deployments through AWS and Azure marketplaces, as well as its 6100, 8200, and 8300 appliance systems. Subscriptions include 24x7 TAC support. TNSR has firewall capabilities, but Netgate does not position it as a firewall and warns it may lack features customers expect from pfSense Plus.