pfSense is the world’s most trusted open-source firewall and router platform, based on FreeBSD and developed by Netgate as the foundation of its security appliance and cloud offerings. It transforms any standard x86 computer into a full-featured enterprise firewall, delivering comprehensive routing, VPN, traffic shaping, and unified threat management capabilities through an easy-to-use web interface.

First released in 2004 as a fork of m0n0wall, pfSense has grown into the most widely deployed open-source firewall in the world, powering millions of networks across homes, small businesses, educational institutions, and government agencies. It offers a wide range of features including stateful packet filtering, VLAN support, multi-WAN load balancing, OpenVPN and IPsec VPN, captive portal, DNS forwarding, DHCP server, and extensive reporting. The platform is free under the Apache 2.0 licence, with optional commercial support and hardware appliances available from Netgate.

Key Features

• Stateful firewall — Packet filtering with state tracking, NAT, port forwarding, and outbound NAT rules
• VPN server and client — OpenVPN, IPsec, WireGuard, L2TP, and PPTP with easy certificate management and wizard-based setup
• Multi-WAN with failover — Load balancing and automatic failover across multiple internet connections with gateway groups
• Traffic shaping — Limit and prioritise bandwidth per-rule, per-queue, or per-user using ALTQ and dummynet
• Captive portal — Guest network authentication with vouchers, pass-through MACs, and RADIUS / LDAP integration
• DNS resolver and forwarder — Unbound DNS resolver with DNSSEC validation, DNS forwarding, and DNS over TLS
• DHCP server and relay — Multi-subnet DHCP with static mappings, PXE boot support, and DHCP relay
• Dynamic DNS — Client for over 25 DDNS providers with automatic updates on IP changes
• Intrusion Detection / Prevention — Snort and Suricata packages for network traffic analysis and threat blocking
• Network monitoring and reporting — RRD graphs, real-time traffic visualisation, logs, and status monitoring at a glance
• Package system — Over 100 community packages extending functionality including ntopng, Squid, HAProxy, and pfBlockerNG

Why Use It

pfSense sets the standard by which other open-source firewalls are measured. Its maturity means you’ll find extensive documentation, community forum answers, corporate training courses, and certified professionals — making deployment and troubleshooting accessible at any skill level. Netgate provides official hardware appliances with pre-installed pfSense for production environments requiring vendor support. The software edition is fully functional with no feature restrictions or trial periods.

Use Cases

• Home and SOHO firewall — Upgrade from consumer router to enterprise-class network security
• Small and medium business gateway — Combined firewall, VPN, and WAN load balancer for branch offices
• Edge network security — Perimeter firewall with Snort/Suricata IDS/IPS at network boundaries
• Multi-site VPN hub — Central VPN concentrator connecting branch offices with encrypted tunnels
• Managed security service (MSSP) — Multi-WAN, captive portal, and VLAN segmentation for customer networks
• Educational lab environment — Feature-rich platform for teaching networking and security concepts

Platform

x86_64 (Intel 64 / AMD64) · FreeBSD-based · Installable ISO, USB memstick, serial console, and virtual machine images (VMware, Hyper-V, VirtualBox, Xen)

Licence

Apache 2.0 — fully open source with optional commercial support subscriptions and hardware appliances from Netgate

Website

http://www.pfsense.org