Overview
OPNsense is the fastest growing open-source security platform with an Open Source Initiative (OSI) approved 2-clause or simplified BSD license. Its feature set is extensive and ranges from router/firewall to inline intrusion detection and prevention.
It is the only open-source product that comes with the highly valued Proofpoint® ET Pro ruleset at no cost in the form of the ET Pro Telemetry edition.
The project is defined by its innovation through modularisation and hardening, simple and reliable firmware upgrades, multi-language support, hardened security, fast adoption of upstream software updates as well as a large and friendly community.
Optionally instances can be upgraded with the Business Edition using a separate licence available from shop.opnsense.com, volume options are also available.
Highlights
- Fully featured stateful Inspection Firewall with advanced routing features, including various dynamic protocols such as OSPF and BGP (pluggable)
- Various proven VPN technologies, such as OpenVP, IPsec and Wireguard which helps to secure your cloud infrastructure
- Inline Intrusion Detection and Prevention including high quality rulesets from Proofpoint (ET Open, ET Pro [Telemetry], depending on license)
Details
Typical total price
$0.22/hour
Pricing
Free trial
Instance type | Product cost/hour | EC2 cost/hour | Total/hour |
|---|---|---|---|
t2.nano | $0.001 | $0.006 | $0.007 |
t2.micro AWS Free Tier | $0.04 | $0.012 | $0.052 |
t2.small | $0.04 | $0.023 | $0.063 |
t2.medium | $0.04 | $0.046 | $0.086 |
t2.large | $0.04 | $0.093 | $0.133 |
t2.xlarge | $0.12 | $0.186 | $0.306 |
t2.2xlarge | $0.16 | $0.371 | $0.531 |
t3.nano | $0.001 | $0.005 | $0.006 |
t3.micro AWS Free Tier | $0.04 | $0.01 | $0.05 |
t3.small | $0.04 | $0.021 | $0.061 |
Additional AWS infrastructure costs
Type | Cost |
|---|---|
EBS General Purpose SSD (gp2) volumes | $0.10/per GB/month of provisioned storage |
Vendor refund policy
Hourly users can stop using the service at any time without additional costs, cancellation within 48 hours warrants a full refund
Legal
Vendor terms and conditions
Content disclaimer
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Additional details
Usage instructions
After deployment, ssh and https are enabled by default. To access the instance using https use a recent webbrowser.
The default username for your instance is : ec2-user (both ssh and https)
We advise to setup an initial password in the "User data" which can be found in the "Advanced Details" of Step 3 during installation, make sure to select "as text" for the input method. The format for this data is as follows: password=mypasssword
When omitting a password, one will be automatically generated, which will be visible in the "System Log" (Get System Log option of the instance). Please note that EC2 images often need some time to flush the content of the system log, when presented empty, wait for a minute and try again. A random root password will also be generated and visible from the same log.
SSH access uses the key provided during installation, the ec2-user should be used as username (e.g. ssh -i my_delivered_ssh_aws_key ec2-user@my-host-at-ec2).
Resources
Vendor resources
Support
Vendor support
Commercial support at hourly rates
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
Customer reviews
It's opnsense. Works well, if you read the docs.
If you've used opnsense on hardware, which you probably have if you're reading this - you know what to expect. It's a good product and super useful. What I will say is that between the confusion that can be AWS networking and the fact that the initial root password is shown once, it can be challenging. However, the documentation for this AMI is extremely good, and once set up, works exactly like you would expect it to. I would highly recommend it.
no support for nitro systems -> no serial console
instance not reachable after update -> no support for nitro systems (not possible to pick such an instance) -> no serial console -> not working for me.
Full featured open source firewall
OPNsense has a ton of features. Everything I need.
For security reasons there is no default password. This is nice from security point of view but can be confusing for new users. Therefore check documentation https://docs.opnsense.org/manual/how-tos/installaws.html#step-11-initial-root-password and have a look at console output after first boot.
Not able to Upgrade from 21.7.8
Hi
When I am trying to upgrade the opnsense from 21.7.8 to a newer version it is showing the following error. This is happening for the past few months
GOT REQUEST TO CHECK FOR UPDATES
Currently running OPNsense 21.7.8 (amd64/OpenSSL) at Sat Nov 19 13:44:46 IST 2022
Fetching changelog information, please wait... fetch: https://pkg.opnsense.org/FreeBSD:13:amd64/21.7/sets/changelog.txz.sig : Not Found
Updating OPNsense repository catalogue...
pkg: https://pkg.opnsense.org/FreeBSD:13:amd64/21.7/latest/meta.txz : Not Found
repository OPNsense has no meta file, using default settings
pkg: https://pkg.opnsense.org/FreeBSD:13:amd64/21.7/latest/packagesite.txz : Not Found
Unable to update repository OPNsense
Error updating repositories!
pkg: Repository OPNsense cannot be opened. 'pkg update' required
Checking integrity... done (0 conflicting)
Your packages are up to date.
DONE
Good
The deployment is easy and hassle free because it come configured out of the box, just need to setup a proper AWS infrastructure for it to funtion. Overall, it works fine for me.