GetWiki

{{Short description|Firewall distribution}}__NOTOC__

factoids

| influenced by = M0n0wall. pfSense| preceded by = | language = | language count = | language footnote = | supported platforms = x86-64| kernel type = Monolithic kernelBSD licenses#2-clause_license_.28.22Simplified_BSD_License.22_or_.22FreeBSD_License.22.29>Simplified BSD / FreeBSD Licenseweblink}}| support status = Community & Commercial}}OPNsense is an open source, FreeBSD-based firewall and routing software developed by Deciso, a company in the Netherlands that makes hardware and sells support packages for OPNsense. It is a fork of pfSense, which in turn was forked from m0n0wall built on FreeBSD.WEB, Serdar Yegulalp, Review: 6 slick open source routers,weblink cio.com, 20 December 2017,weblink 20 December 2017, It was launched in January 2015.WEB, Press release: Deciso Launches OPNsense, a New Open Source Firewall Initiative,weblink Deciso via PRNewsWire, en, January 2, 2015, When m0n0wall closed down in February 2015 its creator, Manuel Kasper, referred its developer community to OPNsense.WEB, Richard Chirgwin, MOnOwall comes tumbling down,weblink The Register, 12 May 2019,weblink 12 May 2019, Wayback Machine, 16 Feb 2015, OPNsense has a web-based interface and can be used on the x86-64 platform.WEB,weblink DistroWatch.com: OPNsense, DistroWatch, February 12, 2021, Along with acting as a firewall, it has traffic shaping, load balancing, and virtual private network capabilities, and others can be added via plugins.NEWS, Sharma, Mayank, Drake, Nate, What's the best Linux firewall distro?,weblink Linux Format via TechRadar, September 26, 2017, en, OPNsense offers next-generation firewall capabilities utilizing Zenarmor, a NGFW plugin developed by OPNsense partnerWEB, Partners,weblink Sunny Valley Networks, 29 December 2022, en, Sunny Valley Networks.WEB, Zenarmor (Sensei): Overview — OPNsense documentation,weblink OPNsense Documentation, 29 December 2022,

Domain dispute

In November 2017, a World Intellectual Property Organization panel found that Netgate, the copyright holder of pfSense, used the domain opnsense.com in bad faith to discredit OPNsense, and obligated Netgate to transfer domain ownership to Deciso.WEB, WIPO Domain Name Decision: D2017-1828,weblink WIPO, November 12, 2017,

Releases

The OPNsense version naming system consists of year.month, since the first release took place in January 2015, it was named release 15.1. OPNsense typically uses a 6 month major release cycle with new releases in January and July of each year.WEB, OPNsense Roadmap - Planned enhancements and innovations,weblink 2024-01-17, opnsense.org, {| class="wikitable"|+! colspan="6" |OPNsense Release History!Version!Code name!General availability!Latest minor version!Latest release date!Major changesACCESS-DATE=2024-01-17, opnsense.org, |Ascending Albatross|2015-01-05|15.1.12|2015-06-17|

• Initial release

ACCESS-DATE=2024-01-17, opnsense.org, |Brave Badger|2015-07-02ACCESS-DATE=2024-01-17, opnsense.org, |2016-01-18|

• Base proxy and IDS support
• pfSense config importer
• FreeBSD 10.1

ACCESS-DATE=2024-01-17, opnsense.org, |Crafty Coyote|2016-01-28ACCESS-DATE=2024-01-17, opnsense.org, |2016-06-30|

• Firmware mirror location and crypto selection
• IPS
• FreeBSD 10.2

ACCESS-DATE=2024-01-17, opnsense.org, |Dancing Dolphin|2016-07-28ACCESS-DATE=2024-01-17, opnsense.org, |2017-01-25|

• RFC 4638 support (MTU > 1492 in PPPoE)
• HTTPS proxy support
• Active Queue Management (AQM): Controlled delay (CoDel) and FlowQueue-CoDel
• Two factor authentication using RFC 6238
• HardenedBSD's ASLR implementation
• UEFI/GPT boot
• FreeBSD 10.3

ACCESS-DATE=2024-01-17, opnsense.org, |Eclectic Eagle|2017-01-31|17.1.11|2017-07-25|

• PHP 7.0
• Lets Encrypt plugin
• Pluggable firewall rules
• Load Balancer, UPnP, SNMP, IGMP, WOL as plugins
• FreeBSD 11

ACCESS-DATE=2024-01-17, opnsense.org, |Free Fox|2017-07-31ACCESS-DATE=2024-01-17, opnsense.org, |2018-01-18|

• HardenedBSD SafeStack for base applications and selected ports
• HardenedBSD procfs hardening
• Interface code speedup

ACCESS-DATE=2024-01-17, opnsense.org, |Groovy Gecko|2018-01-29ACCESS-DATE=2024-01-17, opnsense.org, |2018-07-24|

• Debug kernel support
• PHP 7.1
• pluggable NAT rules
• FreeBSD 11.1

ACCESS-DATE=2024-01-17, opnsense.org, |Happy Hippo|2018-07-31ACCESS-DATE=2024-01-17, opnsense.org, |2019-01-07|

• Meltdown and Spectre V2 mitigations
• Intel NIC driver updates
• IDS/IPS application detection rules
• FreeBSD 11.2

ACCESS-DATE=2024-01-17, opnsense.org, |Inspiring Iguana|2019-01-31ACCESS-DATE=2024-01-17, opnsense.org, |2019-07-03|

• Firewall NAT rule logging support
• WPAD / PAC and parent proxy support in the web proxy
• 2FA via LDAP-TOTP combination
• Dnsmasq DNSSEC support
• HardenedBSD 11.2

ACCESS-DATE=2024-01-17, opnsense.org, |Jazzy Jaguar|2019-07-17ACCESS-DATE=2024-01-17, opnsense.org, |2020-01-09|

• PHP 7.2
• LibreSSL 2.9
• WireGuard plugin
• Firewall rule statistics

ACCESS-DATE=2024-01-17, opnsense.org, |Keen Kingfisher|2020-01-30ACCESS-DATE=2024-01-17, forum.opnsense.org, |2020-07-23|

• Google backup API 2.4.0
• LibreSSL 3.0
• Support elliptic curve TLS certificate creation
• VXLAN support
• Support for additional loopback interfaces

ACCESS-DATE=2024-01-17, opnsense.org, |Legendary Lion|2020-07-30ACCESS-DATE=2024-01-17, forum.opnsense.org, |2021-01-19|

• Basic firewall API support (via additional plugin)
• Suricata 5
• Unbound + DHCPDv4: Properly support expired leases
• PHP expand code styling to PSR-12
• HardenedBSD 12.1

ACCESS-DATE=2024-01-17, opnsense.org, |Marvelous Meerkat|2021-01-28ACCESS-DATE=2024-01-17, opnsense.org, |2021-07-27|

• Fix stability and reliability issues with regard to vmx(4), vtnet(4), ixl(4), ix(4) and em(4) ethernet drivers
• LibreSSL 3.2
• New and improved live traffic report
• IDPS: New policy definition using metadata tags (e.g. drop all critical events aimed at the perimeter)

ACCESS-DATE=2024-01-17, opnsense.org, |Noble Nightingale|2021-07-28ACCESS-DATE=2024-01-17, opnsense.org, |2022-01-27|

• Migrate bsdinstaller to bsdinstall
• AXGBE 10 Gbps network card driver inclusion
• PHP 7.4
• NTPD client mode
• Firmware Update Revamp
• Firewall states diagnostic API/GUI

ACCESS-DATE=2024-01-17, opnsense.org, |Observant Owl|2022-01-27ACCESS-DATE=2024-01-17, opnsense.org, |2022-07-07|

• Authentication / LDAP automatic user creation on login
• Improve alias hostname resolve performance
• Improved firewall statistics
• Support overload table on max new connections
• FreeBSD 13

ACCESS-DATE=2024-01-17, opnsense.org, |Powerful Panther|2022-07-28ACCESS-DATE=2024-01-17, opnsense.org, |2023-01-18|

• Intel QuickAssist (QAT) support
• Add stacked VLAN support (IEEE 802.1ad / QinQ)
• Advanced DDoS protection using syncookies
• PHP 8.0
• FreeBSD 13.1

ACCESS-DATE=2024-01-17, opnsense.org, |Quintessential Quail|2023-01-13ACCESS-DATE=2024-01-17, forum.opnsense.org, |2023-06-28|

• Firewall alias BGP ASN type support
• DNS insights dashboard
• PHP 8.1
• WireGuard kernel module
• LibreSSL discontinued

ACCESS-DATE=2024-01-17, opnsense.org, |Restless Roadrunner|2023-07-31ACCESS-DATE=2024-01-17, forum.opnsense.org, |2024-01-16|

• Support for Importing Encrypted Configuration Files During OPNsense Installation
• RADIUS Authentication - Add MSCHAPv2 support
• Intrusion Detection: Suricata Netmap API version 14 enabled
• PHP 8.2
• FreeBSD 13.2

24.1OPNSENSE 24.1 RELEASED >URL=HTTPS://FORUM.OPNSENSE.ORG/INDEX.PHP?TOPIC=38427.0 WEBSITE=FORUM.OPNSENSE.ORG, |Savvy Shark|2024-01-30ACCESS-DATE=2024-04-20, forum.opnsense.org, |2024-04-18|

• Suricata 7
• OpenSSL 3 ports migration
• NPTv6 migrate to MVC
• VXLAN: add support for non standard port numbers
• os-firewall plugin inclusion to ease API usage
• Improve WireGuard kernel plugin and implement it in core
• Add Kea DHCP server option as an alternative to ISC DHCP which will eventually be deprecated

Legend: {{legend2No longer supported versions#a0e75aborder=1px solid #AAAAAA}}

See also

• Comparison of firewalls
• List of router and firewall distributions

References

{{reflist|30em}}

Further reading

• NEWS, Upadhyay, Rajneesh, How To Install OPNsense Firewall,weblink Unixmen, September 30, 2015,
• Jack Wallen (18 April, 2019) "How to install the OPNsense Firewall/Router distribution". TechRepublic.
• BOOK, Stubbig, Markus, 2023, Practical OPNsense, Books on Demand, 978-3-75780-536-4,

External links

• {{official websiteweblink}}

{{FreeBSD}}{{Routing software}}{{Firewall software}}