OPNsense Forum

English Forums => General Discussion => Topic started by: yeraycito on August 07, 2026, 05:11:44 PM

Title: nfSensei ( fork pfsense )
Post by: yeraycito on August 07, 2026, 05:11:44 PM
https://www.redeszone.net/noticias/redes/sucesor-pfsense-probamos-nfsensei-beta/


https://nfsensei.org/
Title: Re: nfSensei ( fork pfsense )
Post by: Nullman on August 07, 2026, 09:04:30 PM
I think this is completely new project from the scratch. Its not a fork of anything. I think they forked pf from OpenBSD to Linux. Yes this is Linux based firewall. Not to be confused with nfSense.
Title: Re: nfSensei ( fork pfsense )
Post by: Lucid1010 on August 08, 2026, 12:19:57 AM
where is code?
Title: Re: nfSensei ( fork pfsense )
Post by: Stormscape on August 08, 2026, 09:40:09 AM
The obviously AI generated logo I admit doesn't inspire much confidence in the project.
Title: Re: nfSensei ( fork pfsense )
Post by: Nullman on August 08, 2026, 09:54:01 AM
Quote from: Stormscape on August 08, 2026, 09:40:09 AMThe obviously AI generated logo I admit doesn't inspire much confidence in the project.
Im dont want to defend use of AI, but you do realize this guy is not some random dude that just decided to vibe code his own firewall. This is the co-creator of pfsense.
Title: Re: nfSensei ( fork pfsense )
Post by: nero355 on August 08, 2026, 01:45:09 PM
Quote from: Nullman on August 08, 2026, 09:54:01 AMyou do realize this guy is not some random dude that just decided to vibe code his own firewall.

This is the co-creator of pfsense.
I am guessing this part of the text says that indeed :
QuoteUno de los creadores (Scott Ullrich) del pfSense original, está desarrollando un nuevo proyecto llamado nfSensei, un nuevo sistema operativo orientado a firewall y router de código abierto.
:)

I guess it could become interesting for the folks out there that need Linux PPPoE processing power for their DIY Router in the future.
Title: Re: nfSensei ( fork pfsense )
Post by: Nullman on August 08, 2026, 02:13:03 PM
It will support VPP, and thats something that BSDs dont have.
Title: Re: nfSensei ( fork pfsense )
Post by: nero355 on August 08, 2026, 02:21:28 PM
Quote from: Nullman on August 08, 2026, 02:13:03 PMIt will support VPP, and thats something that BSDs dont have.
https://s3-docs.fd.io/vpp/26.10/

That sounds interesting!

/Needs more reading :)
Title: Re: nfSensei ( fork pfsense )
Post by: Melroy vd Berg on August 08, 2026, 02:35:48 PM
Quote from: Stormscape on August 08, 2026, 09:40:09 AMThe obviously AI generated logo I admit doesn't inspire much confidence in the project.

The logo? No the WHOLE site is AI generated if you can't tell.
Title: Re: nfSensei ( fork pfsense )
Post by: pfry on August 08, 2026, 03:06:56 PM
Quote from: Nullman on August 08, 2026, 02:13:03 PMIt will support VPP, and thats something that BSDs dont have.

It's not exactly turnkey, but it can be compiled with both netmap and DPDK (https://ipng.ch/s/articles/2024/02/10/vpp-on-freebsd-part-1/). VPP seems to be in a perpetual alpha/beta state.
Title: Re: nfSensei ( fork pfsense )
Post by: nero355 on August 08, 2026, 05:35:00 PM
Quote from: Melroy vd Berg on August 08, 2026, 02:35:48 PM
Quote from: Stormscape on August 08, 2026, 09:40:09 AMThe obviously AI generated logo I admit doesn't inspire much confidence in the project.
The logo? No the WHOLE site is AI generated if you can't tell.
The weblog that's part of the website also mentions :
QuoteAI-native with on-device intelligence (Clyde)
But I have no idea what that's suppose to mean ?!

Hope it's optional because someone might like the software but does not want any "AI" crap on their network...
Title: Re: nfSensei ( fork pfsense )
Post by: RES217AIII on August 08, 2026, 10:25:57 PM
Quote from: Nullman on August 08, 2026, 02:13:03 PMIt will support VPP, and thats something that BSDs dont have.

At what network size and data throughput does this become relevant?
Title: Re: nfSensei ( fork pfsense )
Post by: patient0 on August 09, 2026, 07:37:13 AM
Quote from: RES217AIII on August 08, 2026, 10:25:57 PMAt what network size and data throughput does this become relevant?
VPP is a very fast and efficient packet processor and would allow to reach 10Gbit throughput on small, fanless devices.
E.g. the DEC740 can't do 10Gbit with OPNsense (it does 5-6 Gbit) and if the NICs were supported (which they are not) I could saturate my line.

Having said that: VPP seems best suited for routing, since it only supports ACLs (but they seem to be able to do firewall-ish rules).

Two articles about VPP on FreeBSD from Pim van Pelt (who used to run the SIxXS tunnel service with Jeroen Massar) for the interested:

https://ipng.ch/s/articles/2024/02/10/vpp-on-freebsd-part-1/
https://ipng.ch/s/articles/2024/02/10/vpp-on-freebsd-part-2/

He does work and develop for/with VPP (on Debian) and has got a lot of interesting articles about it, in a routing context.
Title: Re: nfSensei ( fork pfsense )
Post by: marvelolivia on August 10, 2026, 01:48:31 PM
The VPP support definitely sounds interesting, especially for a Linux-based firewall. I'm curious to see how this project develops. Has the source code/repository been made public yet?
Title: Re: nfSensei ( fork pfsense )
Post by: Nullman on August 10, 2026, 02:18:59 PM
Quote from: marvelolivia on August 10, 2026, 01:48:31 PMThe VPP support definitely sounds interesting, especially for a Linux-based firewall. I'm curious to see how this project develops.
VyOS has VPP support.
Quote from: marvelolivia on August 10, 2026, 01:48:31 PMHas the source code/repository been made public yet?
Not yet.
Title: Re: nfSensei ( fork pfsense )
Post by: muchacha_grande on August 10, 2026, 05:58:51 PM
We all know how much time it takes for a project like this to get mature... if it started recently and suddenly it has all the features, I would say that it is likely completely AI coded.
Having said that, I also think that AI in good and responsible hands is "the tool" for coding but it will take time for this FW to reach a mature state as OPNSense has reached already.
Title: Re: nfSensei ( fork pfsense )
Post by: Netlearn on August 30, 2026, 08:30:18 PM
Quote from: muchacha_grande on August 10, 2026, 05:58:51 PMWe all know how much time it takes for a project like this to get mature... if it started recently and suddenly it has all the features, I would say that it is likely completely AI coded.

Can't say how mature the project is at this moment, because there is no any official release I can find, so I suppose the dev considers it's not enough to publish it.

But anyway, it's being developed since 2004.
Title: Re: nfSensei ( fork pfsense )
Post by: sopex on August 31, 2026, 11:31:39 AM
Quote from: Netlearn on August 30, 2026, 08:30:18 PMBut anyway, it's being developed since 2004.

Hahaha, no it isn't... If he actually started on January, I would be surprised.

The only reason we know of the project is that Ullrich is one of the pfsense cofounders. Other than that, this is a very unserious situation in my humble opinion.
Title: Re: nfSensei ( fork pfsense )
Post by: Netlearn on August 31, 2026, 01:31:53 PM
Here: About (https://blog.nfsensei.org/about.html)

He describes his curriculum and states "2024 - Present" > "nfSensei - Starting from zero"

I don't know when he really began with the development. There is almost no info about the whole project.
Title: Re: nfSensei ( fork pfsense )
Post by: Greg_E on August 31, 2026, 08:13:24 PM
It is interesting, especially VPP support. Routing across local LANs at 10g with less overhead would be nice, something I may start doing in my lab just to see what the results might be. My current lab OPN device has a quad port x710 card installed, so I could get 3 LAN all going at 10g if I wanted to test it, WAN is still very limited.
Title: Re: nfSensei ( fork pfsense )
Post by: Bob.Dig on August 31, 2026, 08:21:46 PM
Quote from: Netlearn on August 31, 2026, 01:31:53 PMHere
Here what, you were wrong, about twenty years.
Title: Re: nfSensei ( fork pfsense )
Post by: pfry on August 31, 2026, 10:04:52 PM
Quote from: Greg_E on August 31, 2026, 08:13:24 PMIt is interesting, especially VPP support. Routing across local LANs at 10g with less overhead would be nice, something I may start doing in my lab just to see what the results might be. My current lab OPN device has a quad port x710 card installed, so I could get 3 LAN all going at 10g if I wanted to test it, WAN is still very limited.

I know this doesn't apply to you, but for others who want to try DPDK-based software like VPP or DANOS: you definitely need recent firmware for Intel cards, as DPDK uses (at least by default) every hardware bell and whistle (https://doc.dpdk.org/guides/nics/overview.html) offered by the driver. I don't know about Aquantia/Marvell devices; I haven't used Mellanox/nVidia or newer Broadcom devices; Chelsio includes firmware in their (gigantic) driver.

DANOS requires much less investment to set up (or did, at least - VPP may have improved since I used it), but is dead like rock. (I don't even know whether Ciena still maintains Vyatta, as they closed off the docs.) VyOS may be an convenient option (for testing VPP), but I haven't looked at it recently either.
Title: Re: nfSensei ( fork pfsense )
Post by: Netlearn on August 31, 2026, 11:37:22 PM
Quote from: Bob.Dig on August 31, 2026, 08:21:46 PM
Quote from: Netlearn on August 31, 2026, 01:31:53 PMHere
Here what, you were wrong, about twenty years.

Yup! I made a typo in the first date. I meant 2024.

The line was "Here: About", being "About" the link to his curriculum description. Maybe easy to overlook. Apologies.
Title: Re: nfSensei ( fork pfsense )
Post by: sopex on September 01, 2026, 12:02:02 AM
If he actually ships anything I will be more than surprised.

1) His LinkedIn very clearly states that nfSensei started when he left his last job on December of 2025, which is more believable than 2024 since the domain was registered late January 2026.

2) The guy has spent the last 15 years as a generic IT guy in marketing organizations. To the best of my knowledge without any coding projects on the side.

3) The AI coded site has the most nonsensical AI generated content I have read in years.

4) How can one have an open source project without sharing the source in any way? Especially in the beginning, feedback is very important.
Title: Re: nfSensei ( fork pfsense )
Post by: muchacha_grande on September 01, 2026, 12:15:43 AM
Quote from: sopex on September 01, 2026, 12:02:02 AM2) The guy has spent the last 15 years as a generic IT guy in marketing organizations.

This is the key: "Marketing"