Hacker News Reader

Comment by seized | Hacker News Reader

OpnSense has long been the better option. It forked from pfsense years ago and has been better for a long time. Netgate engaged in some shameful behavior after the fork, their mistreatment of Jason isn't their first instance.

View on HN

The only thing holding me back from opnsense is that there's no pfblockerng...

I'm an OpenWrt hawk, they have a plugin for DNS based blocking if you end up going that direction https://github.com/openwrt/packages/tree/master/net/adblock/...

AdGuard Home is in the OPNsense community repo and a very nice alternative: https://www.routerperformance.net/opnsense-repo/

I don't use opnsense but a quick google revealed the following, is this not functionally the same?

https://www.cjross.net/dns-security-and-adblock-with-opnsens...

Unbound has a block list feature and there are several other options. None are quite to the same level as far as I know, but the rest of OpnSense makes up for it.

I thought opnsense had various issues too? I can’t remember what, exactly, but perhaps it was around security or performance?

None that I have ever heard of. It uses HardenedBSD but they're dropping that soonish.

Maybe that’s what I’m thinking about. Seems early then to adopt?

Aside from community and WireGuard issues, any reason to abandon a working pfsense install?

I personally don't see the need, pfSense is rock-solid for my uses.

Reply on news.ycombinator.com