- Home
- Firewall Software
- OPNsense
OPNsense
OPNsense · Middelharnis, the Netherlands · founded 2014
What it is
OPNsense is an open-source firewall and routing platform based on FreeBSD, available for self-hosted use with web and API access. Its stateful firewall supports IPv4 and IPv6 and provides live views of traffic that passes or is blocked. VPN integrations include IPsec, OpenVPN, Tinc, and WireGuard. CARP supports automatic hardware failover with synchronized state, while inline intrusion prevention uses Suricata and Proofpoint Emerging Threats Open rules. The modular Model View Controller framework supports extensions and API functionality. Authentication options include LDAP, Active Directory, RADIUS, captive portal authentication, and 802.1X through a plugin. OPNsense provides weekly security updates and follows a schedule of two major releases each year. Community Edition is free under an OSI-approved 2-clause BSD license, but installation is limited to x86-64 architecture. Official setup guides cover AWS images, OVA images, and an Azure Virtual Appliance. The Business Edition one-year subscription costs €149 a year; the three-year plan costs €399 a year. OPNsense began as a fork of pfSense and m0n0wall in 2014, with its first official release in January 2015.
For and against
For
- Stateful firewall supports IPv4 and IPv6.
- Integrates four VPN technologies, including WireGuard.
- CARP provides failover with state synchronization.
- Community Edition is free under a 2-clause BSD license.
- Weekly security updates and two major releases annually.
Against
- Installation is limited to x86-64 architecture.
- Business Edition subscriptions have listed annual or multiyear terms.
- No free trial is listed.
The verdict
OPNsense combines firewalling, routing, VPN integrations, failover, and extensibility in a self-hosted platform. Community Edition is free, while Business subscriptions add commercial features and support.
Who it suits
OPNsense suits administrators seeking a self-hosted firewall and routing platform with VPN, failover, and intrusion-prevention capabilities. Business subscriptions target companies, enterprises, and professionals seeking additional commercial features and support.
Plans and prices
Business Edition
1 installation
Read 21 Sep 2026 · shop.opnsense.com
Business Edition 3Yr
1 installation
Read 21 Sep 2026 · shop.opnsense.com
Community Edition
Open-source community firewall · self-hosted x86-64 installation
Read 15 Oct 2026 · opnsense.org
OPNsense Business Edition 1yr subscription
One installation · commercial firmware repository · GeoIP database · OVA image
Read 15 Oct 2026 · shop.opnsense.com
OPNsense Business Edition (3Yr)
One installation · commercial firmware repository · GeoIP database · OVA image
Read 15 Oct 2026 · shop.opnsense.com
OPNsense Business Edition 3Yr
One installation · commercial firmware repository · official OVA image · OPNcentral
Read 1 Oct 2026 · shop.opnsense.com
On the record
- API
- OPNsense exposes HTTP GET and POST API endpoints using module/controller/command paths and JSON payloads.docs.opnsense.org · read 15 Oct 2026
- API and extensibility
- Its modular Model View Controller framework makes the product extensible and provides API functionality.opnsense.org · read 1 Oct 2026
- API credentials
- API access uses per-user key and secret pairs; secrets are downloadable once and must be regenerated if lost.docs.opnsense.org · read 15 Oct 2026
- Architecture limit
- Official installation documentation supports x86-64 processors only.docs.opnsense.org · read 15 Oct 2026
- Authentication
- The product documents one-time-password authentication and supports LDAP, Active Directory, RADIUS, captive portal authentication, and 802.1X through plugins.opnsense.org · read 15 Oct 2026
- Authentication integrations
- The platform supports LDAP and Active Directory, RADIUS, captive portal authentication and 802.1X through a plugin.opnsense.org · read 1 Oct 2026
- Business support
- The Business Support Subscription includes remote email and phone support, implementation help, migration assistance, troubleshooting and hot fixes, with two hours included.shop.opnsense.com · read 1 Oct 2026
- Changelog
- Core and plugin changelogs are exposed through System > Firmware and are also published on the forum, GitHub, and project blog.docs.opnsense.org · read 15 Oct 2026
- Cloud deployment
- AWS Marketplace provides an official EC2 image sold by Deciso Sales B.V.; OVA images are commercial rather than free community downloads.docs.opnsense.org · read 15 Oct 2026
- Cloud platforms
- Official setup guides cover AWS images, OVA images and an Azure Virtual Appliance.docs.opnsense.org · read 1 Oct 2026
- Company facts
- Deciso's LinkedIn page lists headquarters in Middelharnis, 11–50 employees, and a 2000 founding year.nl.linkedin.com · read 15 Oct 2026
- Documentation depth
- Official documentation covers feature guides, API reference, architecture, security, releases, hardware, installation, virtualization, and troubleshooting.docs.opnsense.org · read 15 Oct 2026
- Extensibility
- Its Model View Controller architecture automatically gives API capabilities to components using the full architecture, and plugins extend the base system.docs.opnsense.org · read 15 Oct 2026
- Firewall capabilities
- The platform includes a stateful firewall with IPv4 and IPv6 support and live views of blocked or passed traffic.opnsense.org · read 1 Oct 2026
- High availability
- CARP-based hardware failover synchronizes state between appliances for high availability.opnsense.org · read 15 Oct 2026
- Installation architecture
- The software setup and installation is available for the x86-64 microprocessor architecture only.docs.opnsense.org · read 1 Oct 2026
- Install media
- Installers are offered as DVD, VGA USB, serial USB, and nano images, with embedded and full image modes.docs.opnsense.org · read 15 Oct 2026
- Intrusion prevention
- Inline intrusion prevention uses Suricata and Proofpoint Emerging Threats rules, with optional ET PRO subscriptions.opnsense.org · read 15 Oct 2026
