OPNsense vs TNSR
OPNsense
opnsense.orgTNSR
netgate.comSide by side
| Figure | OPNsense | TNSR |
|---|---|---|
| Price from | Free | $83.25/mo |
| Free plan | Yes | Yes |
| Free trial | — | Yes |
| Open source | Yes | — |
| Web | Yes | — |
| Linux | — | Yes |
| iOS | Yes | — |
| Android | Yes | — |
| API | Yes | Yes |
| Self-hosted | Yes | Yes |
| Plans published | 6 | 3 |
| Spec score · Firewall Software | 9.5 (#1) | 8.7 (#11) |
| Spec score · Network Firewall Software | 9.0 (#2) | 8.5 (#7) |
| Spec score · Virtual Routers Software | 8.8 (#3) | 8.5 (#5) |
| Cloud platforms | Official setup guides cover AWS images, OVA images and an Azure Virtual Appliance. | Netgate offers TNSR through AWS and Azure marketplaces, including Intel and ARM64 cloud deployments. |
| Company facts | Deciso's LinkedIn page lists headquarters in Middelharnis, 11–50 employees, and a 2000 founding year. | LinkedIn lists Netgate as a privately held computer-networking company founded in 2002, headquartered in Austin, Texas, with 51–200 employees. |
| Documentation depth | Official documentation covers feature guides, API reference, architecture, security, releases, hardware, installation, virtualization, and troubleshooting. | Netgate publishes installation, platform, command, API, recipe, troubleshooting, security and release documentation for TNSR. |
| Founded | 2014 | 2004 |
| Free plan | Yes | No |
| Headquarters | Middelharnis, the Netherlands | Austin, Texas, United States |
| High availability | CARP-based hardware failover synchronizes state between appliances for high availability. | VRRP provides redundant default-gateway operation, and VPF can synchronize connection state between clustered routers. |
| Support | Commercial support offers network-design advice, issue solving, and custom development for an annual fee. | Netgate says TNSR subscriptions include 24x7 TAC support, and its overview describes access to support veterans, professional services, and training. |
| VPN | Built-in VPN support covers IPsec, OpenVPN, and pluggable Tinc and WireGuard implementations. | TNSR provides site-to-site IPsec and high-speed VPN capabilities, with WireGuard support documented for remote access. |
| What it does | OPNsense is a FreeBSD-based open-source firewall and routing platform administered through a web interface. | TNSR is a high-performance software router and VPN concentrator for enterprise, service-provider and government networks. |
Plans
OPNsense
- Business EditionPrice not published
- Business Edition 3YrPrice not published
- Community EditionFree
- OPNsense Business Edition 1yr subscription€149 a year
- OPNsense Business Edition (3Yr)€399, paid once
- OPNsense Business Edition 3Yr€399 a year
TNSR
- TNSR AWS/Azure proof of conceptFree
- TNSR Software Subscription - Renewal$999 a year
- TNSR softwarePrice not published
In their own words
OPNsense
OPNsense is an open-source firewall and routing platform based on FreeBSD, available for self-hosted, web, and API use. Its stateful firewall supports IPv4 and IPv6 and provides live views of passed and blocked traffic. VPN integrations include IPsec, OpenVPN, Tinc, and WireGuard. CARP supports automatic hardware failover with state synchronization, and inline intrusion prevention uses Suricata with Proofpoint Emerging Threats Open rules. The modular Model View Controller framework supports extensions and API functionality. Authentication options include LDAP, Active Directory, RADIUS, captive portal authentication, and 802.1X through a plugin. Community Edition is free at free under the 2-clause BSD license, and installation is limited to x86-64 architecture. Official setup guides cover AWS images, OVA images, and an Azure Virtual Appliance. Business subscriptions add commercial features and support; listed prices are €149 a year or €399 a year for three years. The project began in 2014 as a fork of pfSense and m0n0wall, with its first official release in January 2015.
TNSR
TNSR is a software router and VPN concentrator for high-speed routing and VPN workloads. Netgate says its Vector Packet Processing can scale from 1 to 1000 Gbps and beyond on commercial off-the-shelf hardware. Routing options include BGP, OSPF, static and dynamic routing, policy-based routing, carrier-grade NAT, and equal-cost multipath. For VPNs, it supports routed site-to-site IPsec and WireGuard, with IKEv1 and IKEv2. Administrators can manage TNSR through a CLI, RESTCONF API, or NETCONF. Monitoring options include SNMP and a Prometheus exporter for dataplane statistics. Security features listed include access control lists, packet filtering, password or key authentication, RADIUS, and role-based access control. Netgate offers cloud deployments through AWS and Azure marketplaces, as well as its 6100, 8200, and 8300 appliance systems. Subscriptions include 24x7 TAC support. TNSR has firewall capabilities, but Netgate does not position it as a firewall and warns it may lack features customers expect from pfSense Plus.