pfSense and OPNsense

pfSense and OPNsense are both FreeBSD-based, open-source router and firewall platforms — considerably more capable than a typical consumer router, and built around a secure-by-design philosophy rather than security being an afterthought bolted on later.

We’re experienced configuring both, and we understand what that secure-by-design approach actually means in practice — default-deny firewall rules, properly segmented VLANs to keep guest, IoT and trusted devices apart, VPN configuration, and logging that’s actually useful when something needs investigating rather than noise nobody reads.

This is the kind of setup that matters most for a small business network or a homelab that’s outgrown an all-in-one router, but still wants something maintainable rather than a wall of settings nobody understands. See network and Wi-Fi setup for the wider picture, including how this pairs with Ubiquiti gear for the Wi-Fi and switching side of the same network.