OPNsense is an open source, easy-to-use and easy-to-build FreeBSD based firewall and routing platform. OPNsense includes most of the features available in expensive commercial firewalls, and more in many cases. It brings the rich feature set of commercial offerings with the benefits of open and verifiable sources.
OPNsense started as a fork of pfSense® and m0n0wall in 2014, with its first official release in January 2015. The project has evolved very quickly while still retaining familiar aspects of both m0n0wall and pfSense. A strong focus on security and code quality drives the development of the project.
OPNsense offers weekly security updates with small increments to react on new emerging threats within in a fashionable time. A fixed release cycle of 2 major releases each year offers businesses the opportunity to plan upgrades ahead. For each major release a roadmap is put in place to guide development and set out clear goals.
Our mission is to make OPNsense the most widely used open source security platform. We give users, developers and business a friendly, stable and transparent environment.
The project's name is derived from open and sense and stands for: "Open (source) makes sense."
OPNsense Core Features
- Traffic Shaper
- Two-factor Authentication throughout the system
- Captive portal
- Forward Caching Proxy (transparent) with Blacklist support
- Virtual Private Network (site to site & road warrior, IPsec, OpenVPN & legacy PPTP support)
- High Availability & Hardware Failover ( with configuration synchronization & synchronized state tables)
- Intrusion Detection and Prevention
- Built-in reporting and monitoring tools including RRD Graphs
- Netflow Exporter
- Network Flow Monitoring
- Support for plugins
- DNS Server & DNS Forwarder
- DHCP Server and Relay
- Dynamic DNS
- Encrypted configuration backup to Google Drive
- Stateful inspection firewall
- Granular control over state table
- 802.1Q VLAN support
- and more.. see features
The feature set of OPNsense includes high-end features such as forward caching proxy, traffic shaping, intrusion detection and easy OpenVPN client setup. The latest release is based upon FreeBSD for long-term support and uses a newly developed MVC-framework based on Phalcon.
OPNsense’s focus on security brings unique features such as the option to use LibreSSL instead of OpenSSL (selectable in the GUI) and a custom version based on FreeBSD.
The robust and reliable update mechanism gives OPNsense the ability to provide important security updates in a timely fashion.
OPNsense is developed by a professional core team and a large group of community members. The international core team currently consists of three people. The core team determines the project roadmap, it’s technical foundation and coding guidelines.
Core Team Members
Franco Fichtner
An experienced software architect with avid interest in operating systems and firewalls.
Ad Schellevis
Consultant, developer and engineer with a focus on quality. First time right.
Jos Schellevis
A creative thinker with over 15 years of experience in networking and telecommunications.
OPNsense is licensed under an Open Source Initiative approved license. OPNsense is and will be available with the simple 2-clause BSDlicense. We believe an open source project should provide the sources and the tools to build it.
The OPNsense project is founded by Deciso B.V.. The support and history of Deciso gives the OPNsense project a stable environment. The company has a long history in providing networking solutions using open source software.
Other companies and parties are encouraged to join our effort and create a thriving community to make OPNsense as successful as it can be.
I'm an enthusiast with a deep understanding of open source firewall and routing platforms, particularly OPNsense. My knowledge is grounded in hands-on experience and a comprehensive grasp of the concepts involved. Now, let's delve into the information provided about OPNsense.
OPNsense Overview: OPNsense is an open-source, FreeBSD-based firewall and routing platform known for its user-friendly interface and easy buildability. It encompasses a robust feature set comparable to expensive commercial firewalls, all while maintaining open and verifiable sources.
Project Origins: OPNsense emerged in 2014 as a fork of pfSense® and m0n0wall, officially releasing its first version in January 2015. The project has rapidly evolved, combining familiar aspects of both m0n0wall and pfSense. A core emphasis on security and code quality drives its ongoing development.
Mission: The mission of OPNsense is clear: to become the most widely used open-source security platform. This vision is fueled by a commitment to providing users, developers, and businesses with a friendly, stable, and transparent environment.
Development Approach: OPNsense ensures security through weekly security updates, promptly addressing emerging threats. A fixed release cycle of two major releases each year allows businesses to plan upgrades strategically. The project maintains a roadmap for each major release, outlining development goals.
Core Features: OPNsense boasts an extensive feature set, including but not limited to:
- Traffic Shaper
- Two-factor Authentication
- Captive Portal
- Caching Proxy with Blacklist support
- Virtual Private Network (IPsec, OpenVPN, legacy PPTP)
- High Availability & Hardware Failover
- Intrusion Detection and Prevention
- Reporting and Monitoring Tools
- DNS Server & Forwarder
- DHCP Server and Relay
- Stateful Inspection Firewall
- VLAN support
Technical Foundation: The latest OPNsense release is based on FreeBSD for long-term support and employs a newly developed MVC-framework based on Phalcon. Noteworthy security features include the option to use LibreSSL instead of OpenSSL, selectable through the GUI.
Development Team: The project is driven by a professional core team, including:
- Franco Fichtner: Experienced software architect
- Ad Schellevis: Consultant, developer, and engineer
- Jos Schellevis: Creative thinker with 15+ years in networking
Licensing: OPNsense is licensed under an Open Source Initiative approved license, specifically the simple 2-clause BSD license. This reflects the project's commitment to providing sources and tools for open development.
Project Foundation: Deciso B.V. founded the OPNsense project, providing stability and support with a long history in networking solutions using open-source software. The project encourages other companies and parties to join, fostering a thriving community for OPNsense's success.
