nfSensei ( fork pfsense )

[yeraycito]

https://www.redeszone.net/noticias/redes/sucesor-pfsense-probamos-nfsensei-beta/


https://nfsensei.org/

[Nullman]

I think this is completely new project from the scratch. Its not a fork of anything. I think they forked pf from OpenBSD to Linux. Yes this is Linux based firewall. Not to be confused with nfSense.

[Lucid1010]

where is code?

[Stormscape]

The obviously AI generated logo I admit doesn't inspire much confidence in the project.

[Nullman]

The obviously AI generated logo I admit doesn't inspire much confidence in the project.

Im dont want to defend use of AI, but you do realize this guy is not some random dude that just decided to vibe code his own firewall. This is the co-creator of pfsense.

[nero355]

you do realize this guy is not some random dude that just decided to vibe code his own firewall.

This is the co-creator of pfsense.

I am guessing this part of the text says that indeed :

Uno de los creadores (Scott Ullrich) del pfSense original, está desarrollando un nuevo proyecto llamado nfSensei, un nuevo sistema operativo orientado a firewall y router de código abierto.

:)

I guess it could become interesting for the folks out there that need Linux PPPoE processing power for their DIY Router in the future.

[Nullman]

It will support VPP, and thats something that BSDs dont have.

[nero355]

It will support VPP, and thats something that BSDs dont have.

https://s3-docs.fd.io/vpp/26.10/

That sounds interesting!

/Needs more reading :)

[Melroy vd Berg]

The obviously AI generated logo I admit doesn't inspire much confidence in the project.

The logo? No the WHOLE site is AI generated if you can't tell.

[pfry]

It will support VPP, and thats something that BSDs dont have.

It's not exactly turnkey, but it can be compiled with both netmap and DPDK. VPP seems to be in a perpetual alpha/beta state.

[nero355]

The obviously AI generated logo I admit doesn't inspire much confidence in the project.

The logo? No the WHOLE site is AI generated if you can't tell.

The weblog that's part of the website also mentions :

AI-native with on-device intelligence (Clyde)

But I have no idea what that's suppose to mean ?!

Hope it's optional because someone might like the software but does not want any "AI" crap on their network...

[RES217AIII]

It will support VPP, and thats something that BSDs dont have.

At what network size and data throughput does this become relevant?

[patient0]

At what network size and data throughput does this become relevant?

VPP is a very fast and efficient packet processor and would allow to reach 10Gbit throughput on small, fanless devices.
E.g. the DEC740 can't do 10Gbit with OPNsense (it does 5-6 Gbit) and if the NICs were supported (which they are not) I could saturate my line.

Having said that: VPP seems best suited for routing, since it only supports ACLs (but they seem to be able to do firewall-ish rules).

Two articles about VPP on FreeBSD from Pim van Pelt (who used to run the SIxXS tunnel service with Jeroen Massar) for the interested:

https://ipng.ch/s/articles/2024/02/10/vpp-on-freebsd-part-1/
https://ipng.ch/s/articles/2024/02/10/vpp-on-freebsd-part-2/

He does work and develop for/with VPP (on Debian) and has got a lot of interesting articles about it, in a routing context.