Routing without limits
Multi-WAN, policy routing, VLANs, VXLAN, traffic shaping, CARP high availability and the pf packet filter on a modern FreeBSD network stack.
Product · FreeSense
One system. Your entire edge.
From a quiet home lab to a multi-gigabit branch, FreeSense puts routing, security, VPN and observability in one coherent interface, on a FreeBSD base pinned to exact revisions.
New in FreeSense 1.1
A big step forward.
FreeSense 1.1 replaces 1.0 as the supported Stable line. Upgrade from the console or the WebUI; moving from 1.0 to 1.1 is one-way.
Automation
REST API
Drive the firewall from scripts and tools, with per-user privileges and a built-in API Explorer.
PackagesCustom repositories
Add your own package repositories. FreeSense keeps them below the official ones and away from system upgrades.
PackagesRebuilt Package Manager
Filters, a source column, and a review step before anything is installed or removed.
WebUIFaster to find, faster to use
Grouped top menus, Ctrl+K menu search, and rebuilt pages across the interface and packages.
NetworkingVXLAN interfaces
Stretch layer 2 across routed networks with native VXLAN, alongside VLANs, bridges and tunnels.
BackupsEncrypted remote backups
Send encrypted configuration backups to S3-compatible storage, WebDAV or SFTP.
PackagesThreat Shield & DNS Protection
A package that filters DNS for your network with AdGuard Home. It takes over the DNS blocking that pfBlockerNG did.
SecuritySecurity fixes
Fixes for the upstream security advisories SA-26_05 to SA-26_21, plus code-scanning hardening across the WebUI.
The platform
Everything at the edge, in one place.
See the threat. Stop it at the edge.
Suricata 8 IDS/IPS, CrowdSec threat intelligence, Threat Shield DNS protection and ACME certificates, all in the WebUI.
Every kind of VPN
WireGuard, OpenVPN, IPsec, Tailscale and ZeroTier: traditional standards and modern mesh on the same interfaces, rules and routing.
Upgrade boldly. Roll back calmly.
ZFS boot environments snapshot the whole OS before an upgrade. Pick a known-good one from the WebUI or the boot menu.
Read more →A curated package catalog
Capabilities, support status and resource impact are shown before you install, with native WebUI integration.
Read more →Yours. Not ours.
Apache-2.0, every line. No accounts or activation, no telemetry or phone-home, and signed updates.
Official cloud images
Boot the firewall. Skip the installer.
Preinstalled UFS and ZFS disks for Proxmox, OpenStack, QEMU/KVM and bhyve, with BIOS and UEFI boot and metadata-driven first boot.
- QCOW2 and raw GPT disk formats.
- NoCloud, ConfigDrive, and OpenStack metadata.
- QEMU guest agent included.
Where FreeSense runs
- amd64 hardware and VMs: installer ISO, UEFI and BIOS. Supported.
- Cloud disks: UFS (recommended) or ZFS, QCOW2 or raw.
- ARM64 UEFI: generic installer. Experimental.
- Raspberry Pi 4B and Pi 5 D0: appliance images on the Development line only.
Built in public
Read every line. Rebuild every image.
Source, ports, packages and the build pipeline itself are public on GitHub under Apache-2.0.