OPNsense
Open source firewall and routing platform for network security
OPNsense is an open source firewall and routing platform used to secure and manage networks. It combines a web-based management interface with a systems backend and API to configure firewalling, routing, and related network services.
Key Features
- Web-based GUI for firewall, routing, and system management
- Built-in API for automation and integrations
- VPN capabilities for secure remote access and site-to-site connectivity
- Captive portal support for guest and managed network access
- Traffic shaping and policy-based controls for bandwidth management
- Extensible platform with additional services typically used at the network edge
Use Cases
- Perimeter firewall and router for a home lab or small business network
- VPN gateway for remote workers or inter-site connectivity
- Guest Wi-Fi access control using a captive portal
Limitations and Considerations
- Some advanced features and tooling are reserved for the Business Edition
OPNsense is well-suited for users who want a modern, verifiable, and configurable firewall/router stack with a strong web UI and automation-friendly API. It can serve as a central edge device for both homelab and professional network deployments.
Categories:
Tags:
Tech Stack:
JavaScript
SCSS
Python
PHPSimilar Services
Pi-hole
Network-wide DNS sinkhole for ad and tracker blocking
Pi-hole is a network-wide DNS sinkhole that blocks ads and trackers for all devices on your network, with a web dashboard, query logs, and optional DHCP server.
Headscale
Self-hosted control server for Tailscale-based WireGuard networks
Headscale is an open source, self-hosted implementation of the Tailscale control server for managing a private tailnet, nodes, keys, IPs, and routes.
AdGuard Home
Network-wide DNS server that blocks ads, trackers, phishing and malware
Open-source DNS-based ad & tracker blocking server for networks. Offers per-device rules, parental controls, encrypted upstream DNS (DoH/DoT/DNSCrypt), web UI and API.
Web-Check
All-in-one OSINT tool for analyzing any website.
Comprehensive on-demand OSINT to analyze a website's security, architecture, and tech stack.
wg-easy
WireGuard VPN server with a web-based admin interface
Run a WireGuard VPN server with an easy web admin UI to manage clients, generate configs and QR codes, and monitor connections and traffic.
NetBird
WireGuard-based overlay network with SSO/MFA and granular access controls.
Open-source zero-trust networking platform delivering a WireGuard-based private network with centralized access control, SSO/MFA, and cross-platform clients.