Lawrence Systems!

[opnsenseuser]

https://www.youtube.com/watch?v=oqxCEuj7wcw

[franco]

Haven't seen the video yet, but I felt inspired by Tom's previous pleas to open source that I contributed something to OpenVPN that nobody else did yet. ;)

https://github.com/OpenVPN/openvpn/commit/82036c17c


Cheers,
Franco

[Seimus]

Haven't seen the video yet, but I felt inspired by Tom's previous pleas to open source that I contributed something to OpenVPN that nobody else did yet. ;)

https://github.com/OpenVPN/openvpn/commit/82036c17c


Cheers,
Franco

Damm, and I hoped it would inspire you to create a full implementation of CAKE for BSD.

Still nice tho :)

Regards,
S.

[meyergru]

I was clearly disappointed by his video. It was clearly tendentious and in many aspects, gave wrong impressions. I wanted to comment on it, but my corrections were deleted on the spot.

[franco]

Ok I made it through that with a couple of cringes. Most of the data points appear to be cherry-picked. Technical issues are misrepresented or even misleading, but that's not new. pfSense CE and pfSense+ are slushed together to create the best reasoning possible.

Most paid-only features in pfSense+ are going to be free in OPNsense 24.7. I think this is where the real problem is and why we see aggressive marketing to make everyone aware of it. ;)


Cheers,
Franco

[Seimus]

Had the same feeling, the video composition is cherry-picked if is intentional or unintentional who knows, human mind is a mystery. However he is right on one main point, you can use what ever you want like and what suits you.

But the video is as expected (as I mentioned last time) when there is a discussion on this topic.

Most paid-only features in pfSense+ are going to be free in OPNsense 24.7. I think this is where the real problem is and why we see aggressive marketing to make everyone aware of it. ;)

Thats cool.

Regards,
S.

[opnsenseuser]

Explained

https://youtu.be/eMK6obEdfxQ?si=HmkVeyGmA3JNz9ex

[franco]

Why do we need multiple video links of the same thing? Maybe I'm missing something.


Cheers,
Franco

[opnsenseuser]

As I understand the video, it's about a further explanation of his previous video. He says that in this video too. that's why I posted it.

[franco]

Both videos are so similar in makeup that you can't really tell without starting to listen. And when you listen he starts with a straw man argument. Interesting.

Is this what it is now? Weekly 10 minute blabbering about how OPNsense is bad? Maybe I should get my notebook. ;)


Cheers,
Franco

[opnsenseuser]

you are right. sorry, my fault! Apparently I was wrong.

[spetrillo]

I was surprised to see Tom put that video together. He has provided good info in the past. I know he is a big pfSense guy but that is still ok.

I like OPNsense for alot of other reasons and not about to go back. I am deploying OPNsense community into many of my clients, to replace aging Cisco firewall hardware that would need replacement and then cost upgrades to get the feature set OPNsense provides.

[Amodin]

That guy is so blatant in his preferred software, I stopped listening to him a long while ago.  He is nothing more than a front runner mouthman for pfSense and any 'sponsor' he has that gives him money or product, IMO.  Which, by the way, even if they were the last firewall appliance on earth, I still wouldn't use them.

The way they do their community is just absolute trash, and the whole thing with the pf/OPN battle just made them completely hated and made themselves look bad in the process.

[opnfwb]

I find the list in the video odd and frankly, half hearted at best. It seems selected to bias a result rather than an open ended look at what each solution offers.

Once OPNsense updates to 14.x most of the stuff in his video will be moot anyway and that's just a few weeks away. Meanwhile Tom is failing to mention that OPNsense went to FreeBSD 13.x YEARS ago while pfSense was stuck on 12.x. Where were all the videos then when it was pfSense being the laggard and OPNsense using the modern base?

Also there's no mention of the features that pfSense just flat out can't do. pfSense has a long standing bug (~10 years old) that won't allow DHCP leases to register their DNS records without completely restarting Unbound and flushing all of the DNS cache. OPNsense has had this resolved for a long time now. pfSense just keeps perpetually kicking it down the road. https://redmine.pfsense.org/issues/5413

OPNsense Unbound reporting is freaking awesome! I use it constantly and its a great troubleshooting tool, plus another nice way to see what clients on the network are trying to resolve in realtime. Its quickly turned in to one of those nice to haves that I can't live without. I can't find this function built in to any other open source firewall solution out there.

OPNsense also had local Insight (netflow) reporting for years. Having this data stored and graphed locally on the firewall itself without having to setup a separate netflow receiver and graphing server is super handy to have. I'm not aware of any other firewall solution that does this out of the box with minimal setup, basically check a few boxes and you've got netflow graphing.

Stuff like this is why OPNsense is such an obvious choice for most folks. The nicer community and lack of internet shenanigans is just a bonus as far as I'm concerned.

[Greg_E]

In Tom's defense, he has a lot of good information on good products. I've learned a lot from him and he's exceptionally transparent about any types of sponsorship for a video, in general he does not do sponsored videos but does sometimes accept free/loaner hardware (and states it clearly right at the beginning, not the end of the video like most other creators). I still do respect his opinion on a lot of things.

I disagree with his position on OPNsense, and I'm free to do so. I understand his points, but I've also seen some of the other things that go the other way. I've also read the past when the fork was created, and this bothers me to the core. I see some trends from the past repeated in the current day. Bothered me to the point that instead of buying PF, I bought OPN and I can share that invoice if absolute proof is needed. 3 years was a bargain and I should be able to find that money every three years to keep going.

The Zenarmor money is going to be a little harder to just pull out of surplus, but I'm working it to see what happens. Zenarmor has a big discount for educational users, so that's a big cut to help me get there. (yes, I know, people hate Zenarmor for their own reasons, it fills a function for me so I like it)