OPNsense

Last updated
OPNsense
Opnsense-logo.svg
ScreenShot OPNSense.png
Developer Deciso B.V.
OS family FreeBSD (13.2-RELEASE)
Working stateCurrent
Source model Open source
Initial release5 January 2015;9 years ago (2015-01-05)
Latest release 24.1.5_3 ("Savvy Shark") / April 5, 2024;6 days ago (2024-04-05) [1]
Repository
Platforms x86-64
Kernel type Monolithic kernel
Influenced by M0n0wall. pfSense
License Simplified BSD / FreeBSD License [2]
Official website opnsense.org
Support status
Community & Commercial

OPNsense is an open source, FreeBSD-based firewall and routing software developed by Deciso, a company in the Netherlands that makes hardware and sells support packages for OPNsense. It is a fork of pfSense, which in turn was forked from m0n0wall built on FreeBSD. [3] It was launched in January 2015. [2] When m0n0wall closed down in February 2015 its creator, Manuel Kasper, referred its developer community to OPNsense. [4]

Contents

OPNsense has a web-based interface and can be used on the x86-64 platform. [5] Along with acting as a firewall, it has traffic shaping, load balancing, and virtual private network capabilities, and others can be added via plugins. [6] OPNsense offers next-generation firewall capabilities utilizing Zenarmor, a NGFW plugin developed by OPNsense partner [7] Sunny Valley Networks. [8]

Domain dispute

In November 2017, a World Intellectual Property Organization panel found that Netgate, the copyright holder of pfSense, used the domain opnsense.com in bad faith to discredit OPNsense, and obligated Netgate to transfer domain ownership to Deciso. [9]

Releases

The OPNsense version naming system consists of year.month, since the first release took place in January 2015, it was named release 15.1. OPNsense typically uses a 6 month major release cycle with new releases in January and July of each year. [10]

OPNsense Release History
VersionCode nameGeneral availabilityLatest minor versionLatest release dateMajor changes
15.1 [11] Ascending Albatross2015-01-0515.1.122015-06-17
  • Initial release
15.7 [12] Brave Badger2015-07-0215.7.25 [13] 2016-01-18
  • Base proxy and IDS support
  • pfSense config importer
  • FreeBSD 10.1
16.1 [14] Crafty Coyote2016-01-2816.1.18 [15] 2016-06-30
  • Firmware mirror location and crypto selection
  • IPS
  • FreeBSD 10.2
16.7 [16] Dancing Dolphin2016-07-2816.7.14 [17] 2017-01-25
  • RFC 4638 support (MTU > 1492 in PPPoE)
  • HTTPS proxy support
  • Active Queue Management (AQM): Controlled delay (CoDel) and FlowQueue-CoDel
  • Two factor authentication using RFC 6238
  • HardenedBSD's ASLR implementation
  • UEFI/GPT boot
  • FreeBSD 10.3
17.1 [18] Eclectic Eagle2017-01-3117.1.112017-07-25
  • PHP 7.0
  • Lets Encrypt plugin
  • Pluggable firewall rules
  • Load Balancer, UPnP, SNMP, IGMP, WOL as plugins
  • FreeBSD 11
17.7 [19] Free Fox2017-07-3117.7.12 [20] 2018-01-18
  • HardenedBSD SafeStack for base applications and selected ports
  • HardenedBSD procfs hardening
  • Interface code speedup
18.1 [21] Groovy Gecko2018-01-2918.1.13 [22] 2018-07-24
  • Debug kernel support
  • PHP 7.1
  • pluggable NAT rules
  • FreeBSD 11.1
18.7 [23] Happy Hippo2018-07-3118.7.10 [24] 2019-01-07
  • Meltdown and Spectre V2 mitigations
  • Intel NIC driver updates
  • IDS/IPS application detection rules
  • FreeBSD 11.2
19.1 [25] Inspiring Iguana2019-01-3119.1.10 [26] 2019-07-03
  • Firewall NAT rule logging support
  • WPAD / PAC and parent proxy support in the web proxy
  • 2FA via LDAP-TOTP combination
  • Dnsmasq DNSSEC support
  • HardenedBSD 11.2
19.7 [27] Jazzy Jaguar2019-07-1719.7.10 [28] 2020-01-09
  • PHP 7.2
  • LibreSSL 2.9
  • WireGuard plugin
  • Firewall rule statistics
20.1 [29] Keen Kingfisher2020-01-3020.1.9 [30] 2020-07-23
  • Google backup API 2.4.0
  • LibreSSL 3.0
  • Support elliptic curve TLS certificate creation
  • VXLAN support
  • Support for additional loopback interfaces
20.7 [31] Legendary Lion2020-07-3020.7.8 [32] 2021-01-19
  • Basic firewall API support (via additional plugin)
  • Suricata 5
  • Unbound + DHCPDv4: Properly support expired leases
  • PHP expand code styling to PSR-12
  • HardenedBSD 12.1
21.1 [33] Marvelous Meerkat2021-01-2821.1.9 [34] 2021-07-27
  • Fix stability and reliability issues with regard to vmx(4), vtnet(4), ixl(4), ix(4) and em(4) ethernet drivers
  • LibreSSL 3.2
  • New and improved live traffic report
  • IDPS: New policy definition using metadata tags (e.g. drop all critical events aimed at the perimeter)
21.7 [35] Noble Nightingale2021-07-2821.7.8 [36] 2022-01-27
  • Migrate bsdinstaller to bsdinstall
  • AXGBE 10Gbps network card driver inclusion
  • PHP 7.4
  • NTPD client mode
  • Firmware Update Revamp
  • Firewall states diagnostic API/GUI
22.1 [37] Observant Owl2022-01-2722.1.10 [38] 2022-07-07
  • Authentication / LDAP automatic user creation on login
  • Improve alias hostname resolve performance
  • Improved firewall statistics
  • Support overload table on max new connections
  • FreeBSD 13
22.7 [39] Powerful Panther2022-07-2822.7.11 [40] 2023-01-18
  • Intel QuickAssist (QAT) support
  • Add stacked VLAN support (IEEE 802.1ad / QinQ)
  • Advanced DDoS protection using syncookies
  • PHP 8.0
  • FreeBSD 13.1
23.1 [41] Quintessential Quail2023-01-1323.1.11 [42] 2023-06-28
  • Firewall alias BGP ASN type support
  • DNS insights dashboard
  • PHP 8.1
  • WireGuard kernel module
  • LibreSSL discontinued
23.7 [43] Restless Roadrunner2023-07-3123.7.12 [44] 2024-01-16
  • Support for Importing Encrypted Configuration Files During OPNsense Installation
  • RADIUS Authentication - Add MSCHAPv2 support
  • Intrusion Detection: Suricata Netmap API version 14 enabled
  • PHP 8.2
  • FreeBSD 13.2
24.1 [45] Savvy Shark2024-01-3024.1.5_3 [46] 2024-04-05
  • Suricata 7
  • OpenSSL 3 ports migration
  • NPTv6 migrate to MVC
  • VXLAN: add support for non standard port numbers
  • os-firewall plugin inclusion to ease API usage
  • Improve WireGuard kernel plugin and implement it in core
  • Add Kea DHCP server option as an alternative to ISC DHCP which will eventually be deprecated
Legend:   No longer supported versions  Latest supported release

See also

Related Research Articles

A network operating system (NOS) is a specialized operating system for a network device such as a router, switch or firewall.

m0n0wall was an embedded firewall distribution of FreeBSD, one of the BSD operating system descendants. It provides a small image which can be put on Compact Flash cards as well as on CD-ROMs and hard disks. It runs on a number of embedded platforms and generic PCs. The PC version can be run with just a Live CD and a floppy disk to store configuration data, or on a single Compact Flash card. This eliminates the need for a hard drive, which reduces noise and heat levels and decreases the risk of system failure through elimination of moving parts found in older hard drives.

<span class="mw-page-title-main">Asterisk (PBX)</span> PBX software

Asterisk is a software implementation of a private branch exchange (PBX). In conjunction with suitable telephony hardware interfaces and network applications, Asterisk is used to establish and control telephone calls between telecommunication endpoints such as customary telephone sets, destinations on the public switched telephone network (PSTN) and devices or services on voice over Internet Protocol (VoIP) networks. Its name comes from the asterisk (*) symbol for a signal used in dual-tone multi-frequency (DTMF) dialing.

<span class="mw-page-title-main">TrueOS</span> Unix-like, desktop-oriented operating system

TrueOS is a discontinued Unix-like, server-oriented operating system built upon the most recent releases of FreeBSD-CURRENT.

ipfirewall Firewall software

ipfirewall or ipfw is a FreeBSD IP, stateful firewall, packet filter and traffic accounting facility. Its ruleset logic is similar to many other packet filters except IPFilter. ipfw is authored and maintained by FreeBSD volunteer staff members. Its syntax enables use of sophisticated filtering capabilities and thus enables users to satisfy advanced requirements. It can either be used as a loadable kernel module or incorporated into the kernel; use as a loadable kernel module where possible is highly recommended. ipfw was the built-in firewall of Mac OS X until Mac OS X 10.7 Lion in 2011 when it was replaced with the OpenBSD project's PF. Like FreeBSD, ipfw is open source. It is used in many FreeBSD-based firewall products, including m0n0wall and FreeNAS. A port of an early version of ipfw was used since Linux 1.1 as the first implementation of firewall available for Linux, until it was replaced by ipchains. A modern port of ipfw and the dummynet traffic shaper is available for Linux and Microsoft Windows. wipfw is a Windows port of an old (2001) version of ipfw.

pfSense Firewall/Router software distribution

pfSense is a firewall/router computer software distribution based on FreeBSD. The open source pfSense Community Edition (CE) and pfSense Plus is installed on a physical computer or a virtual machine to make a dedicated firewall/router for a network. It can be configured and upgraded through a web-based interface, and requires no knowledge of the underlying FreeBSD system to manage.

There are a number of Unix-like operating systems based on or descended from the Berkeley Software Distribution (BSD) series of Unix variant options. The three most notable descendants in current use are FreeBSD, OpenBSD, and NetBSD, which are all derived from 386BSD and 4.4BSD-Lite, by various routes. Both NetBSD and FreeBSD started life in 1993, initially derived from 386BSD, but in 1994 migrated to a 4.4BSD-Lite code base. OpenBSD was forked from NetBSD in 1995. Other notable derivatives include DragonFly BSD, which was forked from FreeBSD 4.8.

<span class="mw-page-title-main">FreeBSD</span> Free and open-source Unix-like operating system

FreeBSD is a free and open-source Unix-like operating system descended from the Berkeley Software Distribution (BSD). The first version of FreeBSD was released in 1993 developed from 386BSD and the current version runs on x86, ARM, PowerPC and RISC-V processors. The project is supported and promoted by the FreeBSD Foundation.

Tinc is an open-source, self-routing, mesh networking protocol and software implementation used for compressed and encrypted virtual private networks. It was started in 1998 by Guus Sliepen, Ivo Timmermans, and Wessel Dankers, and released as a GPL-licensed project.

<span class="mw-page-title-main">OpenBSD</span> Operating system

OpenBSD is a security-focused, free and open-source, Unix-like operating system based on the Berkeley Software Distribution (BSD). Theo de Raadt created OpenBSD in 1995 by forking NetBSD 1.0. The OpenBSD project emphasizes portability, standardization, correctness, proactive security, and integrated cryptography.

<span class="mw-page-title-main">CrunchBang Linux</span> Debian based Linux distribution

CrunchBang Linux was a Linux distribution derived from Debian by Philip Newborough.

<span class="mw-page-title-main">ClearOS</span> Linux distribution

ClearOS is a Linux distribution by ClearFoundation, with network gateway, file, print, mail, and messaging services.

<span class="mw-page-title-main">GhostBSD</span> Unix-like operating system

GhostBSD is a Unix-like operating system based on FreeBSD, with MATE as its default desktop environment and an Xfce-desktop community based edition. It aims to be easy to install, ready-to-use and easy to use. The project goal is to combine security, privacy, stability, usability, openness, freedom and to be free of charge.

<span class="mw-page-title-main">OpenMediaVault</span> NAS operating system

OpenMediaVault (OMV) is a free Linux distribution designed for network-attached storage (NAS). The project's lead developer is Volker Theile, who instituted it in 2009. OMV is based on the Debian operating system, and is licensed through the GNU General Public License v3.

<span class="mw-page-title-main">SolydXK</span> Linux distribution

SolydXK is a Dutch Linux distribution based on Debian. It aims to be simple to use, providing an environment that is stable, secure, and ideal for small businesses, non-profit organizations and home users.

<span class="mw-page-title-main">Void Linux</span> Independent distribution developed entirely by volunteers

Void Linux is an independent Linux distribution that uses the X Binary Package System (XBPS) package manager, which was designed and implemented from scratch, and the runit init system. Excluding binary kernel blobs, a base install is composed entirely of free software.

Router software requires updating to stay secure, this comparison provides an overview of third party options.

References

  1. "OPNsense Forums". OPNsense.
  2. 1 2 "Press release: Deciso Launches OPNsense, a New Open Source Firewall Initiative". Deciso via PRNewsWire. January 2, 2015.
  3. Serdar Yegulalp. "Review: 6 slick open source routers". cio.com. Archived from the original on 20 December 2017. Retrieved 20 December 2017.
  4. Richard Chirgwin (16 Feb 2015). "MOnOwall comes tumbling down". The Register. Wayback Machine. Archived from the original on 12 May 2019. Retrieved 12 May 2019.
  5. "DistroWatch.com: OPNsense". DistroWatch. February 12, 2021.
  6. Sharma, Mayank; Drake, Nate (September 26, 2017). "What's the best Linux firewall distro?". Linux Format via TechRadar.
  7. "Partners". Sunny Valley Networks. Retrieved 29 December 2022.
  8. "Zenarmor (Sensei): Overview — OPNsense documentation". OPNsense Documentation. Retrieved 29 December 2022.
  9. "WIPO Domain Name Decision: D2017-1828". WIPO. November 12, 2017.
  10. "OPNsense Roadmap - Planned enhancements and innovations". opnsense.org. Retrieved 2024-01-17.
  11. "OPNsense version 15.1.1 Released - OPNsense® is a true open source firewall and more". opnsense.org. Retrieved 2024-01-17.
  12. "OPNsense version 15.7 Released - OPNsense® is a true open source firewall and more". opnsense.org. Retrieved 2024-01-17.
  13. "OPNsense 15.7.25 Released - OPNsense® is a true open source firewall and more". opnsense.org. Retrieved 2024-01-17.
  14. "OPNsense 16.1 Released - OPNsense® is a true open source firewall and more". opnsense.org. Retrieved 2024-01-17.
  15. "OPNsense 16.1.18 released - OPNsense® is a true open source firewall and more". opnsense.org. Retrieved 2024-01-17.
  16. "OPNsense 16.7 released - OPNsense® is a true open source firewall and more". opnsense.org. Retrieved 2024-01-17.
  17. "OPNsense 16.7.14 released - OPNsense® is a true open source firewall and more". opnsense.org. Retrieved 2024-01-17.
  18. "OPNsense 17.1 Released - OPNsense® is a true open source firewall and more". opnsense.org. Retrieved 2024-01-17.
  19. "OPNsense 17.7 released - OPNsense® is a true open source firewall and more". opnsense.org. Retrieved 2024-01-17.
  20. "OPNsense 17.7.12 released - OPNsense® is a true open source firewall and more". opnsense.org. Retrieved 2024-01-17.
  21. "OPNsense 18.1 released - OPNsense® is a true open source firewall and more". opnsense.org. Retrieved 2024-01-17.
  22. "OPNsense 18.1.13 released - OPNsense® is a true open source firewall and more". opnsense.org. Retrieved 2024-01-17.
  23. "OPNsense 18.7 released - OPNsense® is a true open source firewall and more". opnsense.org. Retrieved 2024-01-17.
  24. "OPNsense 18.7.10 released - OPNsense® is a true open source firewall and more". opnsense.org. Retrieved 2024-01-17.
  25. "OPNsense 19.1 released - OPNsense® is a true open source firewall and more". opnsense.org. Retrieved 2024-01-17.
  26. "OPNsense 19.1.10 released - OPNsense® is a true open source firewall and more". opnsense.org. Retrieved 2024-01-17.
  27. "OPNsense 19.7 "Jazzy Jaguar" released - OPNsense® is a true open source firewall and more". opnsense.org. Retrieved 2024-01-17.
  28. "OPNsense 19.7.10 released - OPNsense® is a true open source firewall and more". opnsense.org. Retrieved 2024-01-17.
  29. "OPNsense 20.1 "Keen Kingfisher" released - OPNsense® is a true open source firewall and more". opnsense.org. Retrieved 2024-01-17.
  30. "OPNsense 20.1.9 released". forum.opnsense.org. Retrieved 2024-01-17.
  31. "OPNsense 20.7 - OPNsense® is a true open source firewall and more". opnsense.org. Retrieved 2024-01-17.
  32. "OPNsense 20.7.8 released". forum.opnsense.org. Retrieved 2024-01-17.
  33. "OPNsense 21.1 Released - OPNsense® is a true open source firewall and more". opnsense.org. Retrieved 2024-01-17.
  34. "OPNsense 21.1.9 released - OPNsense® is a true open source firewall and more". opnsense.org. Retrieved 2024-01-17.
  35. "OPNsense 21.7 released - OPNsense® is a true open source firewall and more". opnsense.org. Retrieved 2024-01-17.
  36. "OPNsense 21.7.8 released - OPNsense® is a true open source firewall and more". opnsense.org. Retrieved 2024-01-17.
  37. "OPNsense 22.1 released - OPNsense® is a true open source firewall and more". opnsense.org. Retrieved 2024-01-17.
  38. "OPNsense 22.1.10 released - OPNsense® is a true open source firewall and more". opnsense.org. Retrieved 2024-01-17.
  39. "OPNsense 22.7 released - OPNsense® is a true open source firewall and more". opnsense.org. Retrieved 2024-01-17.
  40. "OPNsense 22.7.11 released - OPNsense® is a true open source firewall and more". opnsense.org. Retrieved 2024-01-17.
  41. "OPNsense 23.1 released - OPNsense® is a true open source firewall and more". opnsense.org. Retrieved 2024-01-17.
  42. "OPNsense 23.1.11 released". forum.opnsense.org. Retrieved 2024-01-17.
  43. "OPNsense 23.7 released - OPNsense® is a true open source firewall and more". opnsense.org. Retrieved 2024-01-17.
  44. "OPNsense 23.7.12 released". forum.opnsense.org. Retrieved 2024-01-17.
  45. "OPNsense 24.1 released". forum.opnsense.org. Retrieved 2024-01-30.
  46. "OPNsense 24.1.5 released". forum.opnsense.org. Retrieved 2024-04-07.

Further reading