3 ms·

Are there any open-source, "next-generation" firewalls, running on OpenBSD? SD-WAN, DLP, Application-aware filtering, etc

FuriouslyAdrift 5y ago
I don't know of any big ones that are still going. OPNSense runs on HardenedBSD (a FreeBSD fork) and is excellent. FreeBSD and/or NetBSD is/was used by Juniper, Sandvine, Dell (Force10). I think the main blocker for OpenBSD in the commercial market is the inability to load binary blob drivers without maintaining a custom kernel.
- LargoLasskhyfv 5y ago
  Next release of OPNSense will be rebased on 'stock' FreeBSD. The current release is the last to be based on HardenedBSD. This is known since April https://forum.opnsense.org/index.php?topic=22761.0 https://forum.opnsense.org/index.php?topic=22761.0 and confirmed there https://forum.opnsense.org/index.php?topic=24112.0 https://forum.opnsense.org/index.php?topic=24112.0
1MachineElf 5y ago
This is an interesting question. One would think, since OpenBSD is BSD licensed, it would be more likely to have vendorized forks available on the marketplace. Companies being obliged to share their code is allegedly a disadvantage of GPL-licenced Linux. But with OpenBSD, there are no prominent commercial forks. The one "active" OpenBSD fork today is HyperbolaBSD, and it hasn't made a single release yet after 2 years. Previous attempts at OpenBSD forks have failed (Bitrig, ÆrieBSD). Somehow, OpenBSD appears to be less fork-able than other BSDs. Why does the OpenBSD project subvert our expectations of a BSD-licenced OS? I'm asking as someone who had a positive experience setting up an OpenBSD router and VPN, but not much beyond that.
- LargoLasskhyfv 5y ago
  Maybe because the founder and team is known for zero tolerance toward BS, gives a shit about percieved 'needs' of shitty 'bizniz', and drama.
- nopcode 5y ago
  What is a "vendorized fork" ? There are companies that build commercial (virtual) firewall appliances based on OpenBSD. But they do not publish an open source, BSD-licensed, operating system.
  - hackbinary 5y ago
    FreeBSD underpins a fair number of commercial producers. Junos from Juniper perhaps being the most famous. https://en.m.wikipedia.org/wiki/List_of_products_based_on_FreeBSD https://en.m.wikipedia.org/wiki/List_of_products_based_on_Fr...

FuriouslyAdrift 5y ago

I don't know of any big ones that are still going. OPNSense runs on HardenedBSD (a FreeBSD fork) and is excellent. FreeBSD and/or NetBSD is/was used by Juniper, Sandvine, Dell (Force10). I think the main blocker for OpenBSD in the commercial market is the inability to load binary blob drivers without maintaining a custom kernel.

LargoLasskhyfv 5y ago
Next release of OPNSense will be rebased on 'stock' FreeBSD. The current release is the last to be based on HardenedBSD. This is known since April https://forum.opnsense.org/index.php?topic=22761.0 https://forum.opnsense.org/index.php?topic=22761.0 and confirmed there https://forum.opnsense.org/index.php?topic=24112.0 https://forum.opnsense.org/index.php?topic=24112.0

1MachineElf 5y ago

This is an interesting question. One would think, since OpenBSD is BSD licensed, it would be more likely to have vendorized forks available on the marketplace. Companies being obliged to share their code is allegedly a disadvantage of GPL-licenced Linux. But with OpenBSD, there are no prominent commercial forks. The one "active" OpenBSD fork today is HyperbolaBSD, and it hasn't made a single release yet after 2 years. Previous attempts at OpenBSD forks have failed (Bitrig, ÆrieBSD). Somehow, OpenBSD appears to be less fork-able than other BSDs. Why does the OpenBSD project subvert our expectations of a BSD-licenced OS? I'm asking as someone who had a positive experience setting up an OpenBSD router and VPN, but not much beyond that.

LargoLasskhyfv 5y ago
Maybe because the founder and team is known for zero tolerance toward BS, gives a shit about percieved 'needs' of shitty 'bizniz', and drama.
nopcode 5y ago
What is a "vendorized fork" ? There are companies that build commercial (virtual) firewall appliances based on OpenBSD. But they do not publish an open source, BSD-licensed, operating system.
- hackbinary 5y ago
  FreeBSD underpins a fair number of commercial producers. Junos from Juniper perhaps being the most famous. https://en.m.wikipedia.org/wiki/List_of_products_based_on_FreeBSD https://en.m.wikipedia.org/wiki/List_of_products_based_on_Fr...