It only needs to be long enough for a cover-your-arse process

Thanks and nothing is rock solid, always be aware.

As Tom said, nothing is rock solid. I only recently started using pfSense. I migrated from FreshTomato on an R7000 mostly because I was tired of have to manually apply all my settings after every upgrade. I got a Protectli system to run pfSense on as I wanted more power. With the recent update, I did not upgrade as soon as it was available. There are several things that Netgate could have done better, but the one I hit was a non-event to recover from. The other item related to IPv6 has a fairly easy workaround. The one item I thought would be problematic for me was fixed with a package update. Once that fix was in place, I upgraded my system. This was fairly easy and has been as good as before, and the IPv6 support has been more stable than it was before the upgrade. That item with the workaround is known and should be fixed soon. (I haven't read the patch notes on 2.5.1 to see if it is in there.) I looked at OPNsense, but I had difficulty finding the specific information I needed. At this point, I intend to stay on pfSense until they no longer meet my needs. OpenVPN will work for me quite nicely, so Wireguard as a additional option is not critical.

Love those cheap little buggers - enough to quickly run a setup with WG, OSPF, etc.

@@salat The ER-X is an excellent little box for $50. It is essentially VyOS, but with actual affordable hardware support.

As I said in the video, they are using the user space implementation written in Go

The release schedule for FreeBSD indicates 10-12 months is likely. But I have no inside information. Just glanced at release dates and extrapolated.

@@blackrockcity I’ve looked at the release cycle since too. Seems they have a new release every 9-11 months doesn’t it. I’m guessing Netgate will be eager to get it into pfSense after this whole saga so hopefully it won’t be more than 18 months. In the mean time I’m very tempted to stay on 2.5.0, I know I shouldn’t but WireGuard has been a game changer for me. It was what I expected and more in terms of performance.

He's a trusted source at ;east in part because he doesn't do the paid videos. I've stopped watching other YT channels when they are clearly spouting a line.

Yes because it's Linux based the work was mostly done by others, they just had do some UI work.

I don't have a compelling reason to use a fork of pfsense and learn a different interface.

@@LAWRENCESYSTEMS Oh it has a different interface? I didn't think of that. I just started reading about it here: teklager.se/en/pfsense-vs-opnsense/ It's strange that the reviewer found that the OPNSense web interface still runs as root, given that the project cited pfSense's interface running on root as one of the reasons for forking. I don't like that both of them are running complex PHP applications to implement their interfaces, which probably means a full, live PHP interpreter. It's just a website, a relatively simple website with basic interactivity, check boxes, fields, etc. It should be static HTML, CSS, and JavaScript, tightly optimized. The writing of config changes to pfSense proper can be done by the JS, or the web server itself. There's no need for a huge PHP stack just for writing config. I wish someone would come out with a massively smaller version of FreeBSD or OpenBSD, a lot like Alpine Linux. It would be great for embedded applications like the *Sense firewalls. My Alpine installs are less than 100 MB, less than ⅒ the size of a full Linux distro. I don't understand how they do it, but if Linux can be shrunk that much, a BSD should have similar potential. OPNSense is using HardenedBSD, but I think it's no smaller than FreeBSD. Anyway, you're finding lots of reasons to not try anything new. The trivial emailed key friction with Sophos was enough to make you not try it, and the prospect of having to learn an interface that is likely extremely similar to one you already know is the reason to reject OPNSense? That's surprising - I thought you would be super curious about these solutions. Nothing lasts forever, not even pfSense, so I don't get the resistance to learning. For a deeper, oblique example, the whole concept of a "root" "user" is ridiculous, as is the whole Unix user model, so the issue with the interface running as root would be moot with a better OS. We're starting to see people rethink this junky OS paradigm and start from a clean sheet: seL4 looks good, and Google's Fuchsia OS is not any kind of Linux or Unix, and is purely capabilities-based. We're a ways out from firewall appliances implemented on these next-gen platforms, though seL4 could be adapted right now. I wonder if anyone has tried it.

Is it beginner friendly?

@@dayhalk Probably not, as it's command line based

​@@dayhalk VyOS CLI is a lot more like being in a Juniper SRX or something like that - a bit different than Cisco CLI. I think they modeled VyOS after JUNOS. Once most people get familiar with the JUNOS/VyOS CLI, then love it.

Actually, the inventor of wireguard thought the Netgate implementation was badly flawed. He rushed to make his own FreeBSD implementation but it didn’t get the rubber stamp to be included into FreeBSD 13.0. So now the world has to wait almost a year for FreeBSD 13.1 for a wireguard kernel implementation in FreeBSD. Now Netgate is faced with the issue of either repairing their software (which would be great!) or holding off and using the official implementation next year. Hopefully Netgate chooses to fix their wireguard. Jason, the inventor was able to whip out a new implementation in two weeks, Netgate should redouble their efforts to do it in a reasonable period (past performance aside).

pfSense stated they are Not requiring AES-NI , they said in the past they would but changed that position ....any sytem that does upgrades will go through trials and testing ...wiregaurd can still be used outside of the pfSense system , given time they will get it worked out , until then just use it outside of pfSense , OPNSense is really antiquated and slow , just use what you like

@@danzare5638 lol... Where are you getting this trash bias info bro??????

@@TheJkilla11 and you think your bias is not trash lol , check the records if you want to use vpn OPN Vpn is sooooo slow

You are mistaken, I love both lawrence-technology-services.creator-spring.com/listing/get-cat-6?product=46

@@LAWRENCESYSTEMS well played sir 😆

I really don't care to participate in the drama, just want to keep the knowledge flowing to keep people informed. :)