PfSense Is Closed Source

Re:PfSense Is Closed Source by notaplumber on Monday January 25, 2021 @09:08PM (#25911603)

If you want a great firewall, try OpenBSD. That's where pf(4) came from, and is actually maintained. Not even FreeBSD has an up-to-date version. Also despite being the basis for the success of their product, and in their product name, pfsense/Netgate and its CEO "gonzo" have been actively hostile towards to the OpenBSD project and developers for many years.

https://www.openbsd.org/faq/pf/

[ Parent | on HN ]

Re:PfSense Is Closed Source by davemtl on Monday January 25, 2021 @10:22PM (#25912085)

The FreeBSD implementation of pf is derived from OpenBSD 4.5. It was modified to be capable of running in multi-threaded kernel. The implication of it not being maintained isn't quite right.

pf in FreeBSD is still maintained, but it's not the pf from OpenBSD that everyone knows and loves.

https://svnweb.freebsd.org/base/releng/12.2/sys/netpfil/pf/p...

[ Parent | on HN ]

Re:PfSense Is Closed Source by ksec on Tuesday January 26, 2021 @12:55AM (#25913019)

> hostile towards to the OpenBSD project and developers for many years.

What happened and Why ?

[ Parent | on HN ]

Re:PfSense Is Closed Source by 67868018 on Tuesday January 26, 2021 @08:02AM (#25915316)

OpenBSD kept making snide remarks at FreeBSD for not keeping the pf codebase in sync. FreeBSD also didn't import the newest version the last time they synced because a slightly older version was faster.

Then FreeBSD hard forked pf and made it multithreaded.

Now FreeBSD's pf is the fastest implementation of pf but is missing the latest features/syntax and may have some bugs that were already fixed.

Meanwhile IPFW is still faster than pf anyway, so I don't know why people even care.

[ Parent | on HN ]