So I’ve been using OPNsense for a few years. I have an extensive config inclduing vlans, plugins, policies, suricata, VPN, routes, gateways, HAProxy, etc.

Over the past few months, I’ve noticed certain bugs, weirdness, and slowness within OPNsense. I recently watched Tom Lawrence’s video on the licensing changes and he touched on the openssl vulnerability that OPNsense has yet to remediate.

The Plus license cost (per year) which entitles you to some limited support options is also appealing. Every time I get stuck figuring out something complex in OPNsense, I have to hope someone else has tried to do the same thing and posted about it so I can troubleshoot.

I also don’t like having to constantly update. A more “stable”/enterprise focused cycle like pfSense has seems like my pace. It broke on me last year with one of the upgrades and I had to clean install.

Don’t get me wrong, I love the UI (mostly), plugins, etc. in OPNsense, but these past few months have got me thinking.

I’ve also heard that people don’t like Netgate as a company, so that could definitely factor into not switching.

What are everyone’s thoughts?

  • ajpri@alien.topBEnglish
    1·
    10 months ago

    Ive been using pfSense CE for 4 years now. I’ve thought about it a couple times, but I have a few reasons I’m staying on pfSense:

    1. No config migration tool. Yea, I could spend an afternoon redoing my config. But it’s not really worth it imo.
    2. It’s been rock solid for the last few years.
    3. BSD has finally been updated! Allowing drivers and whatnot.
    4. I believe Netgate to be a good contributor for BSD. They’ve added many drivers. Such as the i225/226. Yea, it takes awhile.
    5. The changes are aggravating, but I’m still running CE. The only feature I feel I’m missing is the boot environments support.
    • 6nairod@alien.topBEnglish
      1·
      10 months ago

      For the first point, I believe that not long ago I’ve seen here that someone made a website where you upload your config file (or something like that) and it generates a config file for opnsense. I don’t have the link to that post, but I guess you could manage to find it