OPNsense

OPNsense at a glance

OPNsense is an open-source, FreeBSD-based firewall/router platform (from the Deciso ecosystem), popular in homelabs and SMBs. OPNsense ships regular releases plus plugins and security fixes; as a perimeter device, timely patching matters.

For admins updating is convenient through the firmware UI, but take a config backup first (OPNsense exports the configuration) and mind the order on HA pairs. Never expose the web management or VPN portal to the WAN unprotected. Plugins are tied to the core version and are the usual upgrade stumbling block — keep core and plugins in step. After updating, verify VPN tunnels and firewall rules. Track the version and its support status; subscribe to OPNsense advisories so security-relevant updates aren't missed.