{"id":485,"date":"2021-05-14T03:45:33","date_gmt":"2021-05-14T03:45:33","guid":{"rendered":"https:\/\/7dc.org\/?p=485"},"modified":"2021-05-18T06:04:24","modified_gmt":"2021-05-18T06:04:24","slug":"opnsense-vs-pfsense-round-7-versatility-and-plugins","status":"publish","type":"post","link":"https:\/\/7dc.org\/index.php\/2021\/05\/14\/opnsense-vs-pfsense-round-7-versatility-and-plugins\/","title":{"rendered":"OPNsense vs. pfSense Round 7: Versatility and plugins"},"content":{"rendered":"

pfSense:<\/strong> <\/p>\n

Curate their plugin repository very conservatively. The ethos is very much that\u00a0 “A Firewall should be a firewall and not moonlight as a Unifi controller or Plex Media Server”.<\/p>\n

 <\/p>\n

OPNsense:<\/strong> <\/p>\n

Has many cool things in the official repo. Tayga, ZeroTier, Shadowsocks. TOR. Sensei. Prometheus and Munin exporters.\u00a0 And for the adventurous there is a community repo now with Caddy, Traeffik, AdGuard Home, Elasticsearch, Grafana, Speedtest, Unifi controller plugins etc.<\/p>\n

 <\/p>\n

It’s a tie because: At work I am a dinosaur and I think this sort of edge device should not be a swiss army knife of homelab goodness. The less attack vectors the better. At home on the other hand, the homelabber<\/a> \/ self-hoster<\/a> enthusiam is deeply embedded into my DNA. ZeroTier, Shadowsocks. TOR and a Unifi ccontroller on a Protectli FW6D running OPNsense? Sure, why not \ud83d\ude42<\/p>\n

pfSense would benefit from Tayga and I think it may be in the pipeline<\/a>. Other than that I do value their convervatism. Let the router be a router and off-load the anxilliary stuff to another device behind that router.<\/p>\n

Verdict: <\/strong><\/p>\n

SOHO and Home <\/strong>use: Point goes to OPNsense. <\/strong>Even with a bunch of plugins installed it’s likely going to be more secure than some Huawei or Zyxel consumer crap that your ISP gave you with hardcoded backdoor credentials and firmware from 2016.<\/p>\n

Enterprise \/ ISP<\/strong> use: Point goes to pfSense<\/strong><\/p>\n

 <\/p>\n","protected":false},"excerpt":{"rendered":"

pfSense: Curate their plugin repository very conservatively. The ethos is very much that\u00a0 “A Firewall should be a firewall and not moonlight as a Unifi controller or Plex Media Server”.   OPNsense: Has many cool things in the official repo. Tayga, ZeroTier, Shadowsocks. TOR. Sensei. Prometheus and Munin exporters.\u00a0 And for the adventurous there is … Read More<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[37,29],"tags":[],"class_list":["post-485","post","type-post","status-publish","format-standard","hentry","category-opnsense","category-pfsense"],"_links":{"self":[{"href":"https:\/\/7dc.org\/index.php\/wp-json\/wp\/v2\/posts\/485","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/7dc.org\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/7dc.org\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/7dc.org\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/7dc.org\/index.php\/wp-json\/wp\/v2\/comments?post=485"}],"version-history":[{"count":4,"href":"https:\/\/7dc.org\/index.php\/wp-json\/wp\/v2\/posts\/485\/revisions"}],"predecessor-version":[{"id":516,"href":"https:\/\/7dc.org\/index.php\/wp-json\/wp\/v2\/posts\/485\/revisions\/516"}],"wp:attachment":[{"href":"https:\/\/7dc.org\/index.php\/wp-json\/wp\/v2\/media?parent=485"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/7dc.org\/index.php\/wp-json\/wp\/v2\/categories?post=485"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/7dc.org\/index.php\/wp-json\/wp\/v2\/tags?post=485"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}