The top open-source alternatives to Palo Alto Next-Generation Firewall
are ModSecurity.
One of the criteria for ordering this list is the number of mentions that products have on reliable external sources.
You can suggest additional sources through the form here.