OPNsense VS WireGuard

OPNsense Reviews

WireGuard Reviews

OPNsense mentions (94)

• How to bypass public IP and NAT

  Firmware's like Asuswrt-Merlin or OpenWRT can support dynamic-dns, or you can do like I do and run something like OPNsense in an x86 VM with a NIC passed through, or buy an inexpensive firewall appliance (up to 500mbps/1gbps/10gbps). Source: 5 months ago

• Stop ISP from getting into my Router

  The easiest solution is to buy your own router, set it up, disable the router functionality on the Fritzbox 7590 and plug your router into it. It'll be cheaper and easier than a Cisco Firewall, but if you want to go the dedicated firewall route then I would recommenced OPNsense. Source: 5 months ago

• OpenBSD Innovations

  BSDs may not have a significant presence on desktops, but they're well known in the networking world for their reliability. They also were the foundation used to build OSes for specific applications. OpnSense and XigmaNAS, for example, are two excellent FreeBSD based applications aimed at firewalling/security and NAS/services. https://opnsense.org/ https://xigmanas.com/xnaswp/. - Source: Hacker News / 10 months ago

• Switches That You Actually Own

  For switches? OpenWrt supports a few models toward the lower end, and SONiC support a bunch at the higher-end datacenter ToR market, but none of these options are SME production-ready like Linux servers or OPNsense firewalls. Source: 11 months ago

• Having to pay postage to ship back a DoA product sucks from a customer perspective

  That’s a stupid policy, and it looks like one of my UDMs is defective. I’m an idiot for not just buying good quality open boxes and putting https://opnsense.org/ on them. 🤦🏻‍♂️. Source: 11 months ago

WireGuard mentions (9)

• Remote access from work/corporate network

  Wireguard. Wireguard uses UDP only and runs TCP sockets over UDP. Source: about 1 year ago

• Central reverse-proxy ssh access?

  Look at Wireguard. I know you don't want Yet Another VPN running alongside your IPSec, but it's less VPN and more encrypted point-to-point UDP. You can set it up on any port you wish, including common ports that might be open on an outbound smart firewall not doing deep packet inspection. That way, it can stay out of the way of your existing IPSec deployment. Source: about 1 year ago

• Official /r/rust "Who's Hiring" thread for job-seekers and job-offerers [Rust 1.69]

  We use Elixir/Erlang for our control plane, and Rust for our data plane, built on the excellent WireGuard® tunneling protocol. Source: about 1 year ago

• Globally distributed Elixir over Tailscale

  Both products are based off Wireguard which is available for all new linux distributions. https://wireguard.com . I'm not saying OP's solution is wrong, just curious what the advantages are. Other than potentially simpler client setup, what are the advantages of paying for tailscale. With the opensource tailscale, I'm not sure if you get access to an api you can use to look up the hosts. Source: about 1 year ago

• Whisper: wraps any Go io.ReadWriter in a secure tunnel using Ed25519/X25519

  Noise Protocol Framework (used by Wireguard). Source: about 1 year ago