OPNsense vs pfSense
OPNsense
opnsense.org
pfSense
pfsense.comSide by side
| Figure | OPNsense | pfSense |
|---|---|---|
| Price from | Free | — |
| Free plan | Yes | — |
| Free trial | — | — |
| Open source | Yes | — |
| Web | Yes | Yes |
| Linux | — | Yes |
| iOS | Yes | — |
| Android | Yes | — |
| API | Yes | — |
| Self-hosted | Yes | Yes |
| Plans published | 6 | 4 |
| Spec score · Firewall Software | 9.5 (#1) | 7.5 (#62) |
| Extensibility | Its Model View Controller architecture automatically gives API capabilities to components using the full architecture, and plugins extend the base system. | A package system lets users add functionality to the base distribution. |
| Founded | 2014 | 2004 |
| Free plan | Yes | Yes |
| Headquarters | Middelharnis, the Netherlands | Austin, Texas |
| Support | Commercial support offers network-design advice, issue solving, and custom development for an annual fee. | Netgate offers purchasable global support for self-installed software and virtual pfSense deployments. |
| VPN | Built-in VPN support covers IPsec, OpenVPN, and pluggable Tinc and WireGuard implementations. | pfSense supports VPN options including IPsec, OpenVPN, and WireGuard. |
Plans
OPNsense
- Business EditionPrice not published
- Business Edition 3YrPrice not published
- Community EditionFree
- OPNsense Business Edition 1yr subscription€149 a year
- OPNsense Business Edition (3Yr)€399, paid once
- OPNsense Business Edition 3Yr€399 a year
pfSense
- pfSense CEPrice not published
- pfSense Plus with TAC LitePrice not published
- pfSense Plus with TAC ProPrice not published
- pfSense Plus with TAC EnterprisePrice not published
In their own words
OPNsense
OPNsense is an open-source firewall and routing platform based on FreeBSD, available for self-hosted, web, and API use. Its stateful firewall supports IPv4 and IPv6 and provides live views of passed and blocked traffic. VPN integrations include IPsec, OpenVPN, Tinc, and WireGuard. CARP supports automatic hardware failover with state synchronization, and inline intrusion prevention uses Suricata with Proofpoint Emerging Threats Open rules. The modular Model View Controller framework supports extensions and API functionality. Authentication options include LDAP, Active Directory, RADIUS, captive portal authentication, and 802.1X through a plugin. Community Edition is free at free under the 2-clause BSD license, and installation is limited to x86-64 architecture. Official setup guides cover AWS images, OVA images, and an Azure Virtual Appliance. Business subscriptions add commercial features and support; listed prices are €149 a year or €399 a year for three years. The project began in 2014 as a fork of pfSense and m0n0wall, with its first official release in January 2015.
pfSense
pfSense is a free, open-source FreeBSD distribution for firewall and router functions, managed through a web interface. Its source code is distributed under the Apache 2.0 license, and a package system lets users add functionality. Documented network features include firewalling, routing, VLANs, multiple WAN connections, high availability, traffic shaping, and captive portal. VPN options include IPsec, OpenVPN, and WireGuard; OpenVPN documentation lists authentication through local users, LDAP, or RADIUS servers. Deployment options include hardware, virtual machines, and public cloud. The software is available in the AWS and Azure marketplaces, including their US GovCloud regions. Netgate publishes security advisories, accepts vulnerability reports through its Security Team, and sells global support for self-installed software and virtual deployments. The Community Edition is a free download; listed Plus support plans offer either a limited number of tickets or unlimited tickets. One installation constraint: the USB memstick installer overwrites the entire hard drive and does not support dual booting with another OS.