Nope. I'll stick with OPNsense which is open source.
this post was submitted on 30 Mar 2025
-32 points (18.0% liked)
Selfhosted
45411 readers
498 users here now
A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.
Rules:
-
Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.
-
No spam posting.
-
Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.
-
Don't duplicate the full text of your blog or github here. Just post the link for folks to click.
-
Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).
-
No trolling.
Resources:
- selfh.st Newsletter and index of selfhosted software and apps
- awesome-selfhosted software
- awesome-sysadmin resources
- Self-Hosted Podcast from Jupiter Broadcasting
Any issues on the community? Report it using the report flag.
Questions? DM the mods!
founded 2 years ago
MODERATORS
I like OPN also. I've always appreciated the stability of the BSDs.
My only personal complaint with OPN/PF was the TLS inspection.
I've read about adding the modules to *Sense, but I haven't figured out the configuration pieces.
It just works with Sophos UTM and XG firewall, and the configuration was super easy.
You always use what you like though.
What do you use TLS inspection for?
Thank you for letting me know what software not to use; good bot
They place arbitrary limits on home users as well, which is a secondary reason to not use it compared to open source offerings. For instance:
- you are limited to 1Gbps line speed
- you are limited to one week of analytics, with no export option, so you can't even ship them elsewhere
- there are also resource limits that prevent ram and CPU utilization
This is true, the 6 GB RAM limit and four cores.
I run a pretty enterprise home lab, and I haven't ever seen the devices hit the resource limit.
I have around 3k IPS rules and TLS inspection for most categories of sites except the normal stuff like streaming, banking, etc that you'd not want or need to inspect.
For anyone it might help, I use these as inline proxies rather than as the gateway at the moment. So they have more than just internet traffic going through them, they also have segments of my LANs getting evaluated. Performance has been great so far.