Overview
OPNsense is the fastest growing open-source security platform with an Open Source Initiative (OSI) approved 2-clause or simplified BSD license. Its feature set is extensive and ranges from router/firewall to inline intrusion detection and prevention.
It is the only open-source product that comes with the highly valued Proofpoint® ET Pro ruleset at no cost in the form of the ET Pro Telemetry edition.
The project is defined by its innovation through modularisation and hardening, simple and reliable firmware upgrades, multi-language support, hardened security, fast adoption of upstream software updates as well as a large and friendly community.
Optionally instances can be upgraded with the Business Edition using a separate licence available from shop.opnsense.com, volume options are also available.
Highlights
- Fully featured stateful Inspection Firewall with advanced routing features, including various dynamic protocols such as OSPF and BGP (pluggable)
- Various proven VPN technologies, such as OpenVP, IPsec and Wireguard which helps to secure your cloud infrastructure
- Inline Intrusion Detection and Prevention including high quality rulesets from Proofpoint (ET Open, ET Pro [Telemetry], depending on license)
Details
Typical total price
$0.22/hour
Pricing
Free trial
Instance type | Product cost/hour | EC2 cost/hour | Total/hour |
|---|---|---|---|
t2.nano | $0.001 | $0.006 | $0.007 |
t2.micro AWS Free Tier | $0.04 | $0.012 | $0.052 |
t2.small | $0.04 | $0.023 | $0.063 |
t2.medium | $0.04 | $0.046 | $0.086 |
t2.large | $0.04 | $0.093 | $0.133 |
t2.xlarge | $0.12 | $0.186 | $0.306 |
t2.2xlarge | $0.16 | $0.371 | $0.531 |
t3.nano | $0.001 | $0.005 | $0.006 |
t3.micro AWS Free Tier | $0.04 | $0.01 | $0.05 |
t3.small | $0.04 | $0.021 | $0.061 |
Additional AWS infrastructure costs
Type | Cost |
|---|---|
EBS General Purpose SSD (gp2) volumes | $0.10/per GB/month of provisioned storage |
Vendor refund policy
Hourly users can stop using the service at any time without additional costs, cancellation within 48 hours warrants a full refund
Legal
Vendor terms and conditions
Content disclaimer
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Additional details
Usage instructions
After deployment, ssh and https are enabled by default. To access the instance using https use a recent webbrowser.
The default username for your instance is : ec2-user (both ssh and https)
We advise to setup an initial password in the "User data" which can be found in the "Advanced Details" of Step 3 during installation, make sure to select "as text" for the input method. The format for this data is as follows: password=mypasssword
When omitting a password, one will be automatically generated, which will be visible in the "System Log" (Get System Log option of the instance). Please note that EC2 images often need some time to flush the content of the system log, when presented empty, wait for a minute and try again. A random root password will also be generated and visible from the same log.
SSH access uses the key provided during installation, the ec2-user should be used as username (e.g. ssh -i my_delivered_ssh_aws_key ec2-user@my-host-at-ec2).
Resources
Vendor resources
Support
Vendor support
Commercial support at hourly rates
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
Customer reviews
Secure our network
G2 review
Amazing software with loaded features
Ease of use
Easy to implement
Easy to intefrate with other systems.
It's opnsense. Works well, if you read the docs.
If you've used opnsense on hardware, which you probably have if you're reading this - you know what to expect. It's a good product and super useful. What I will say is that between the confusion that can be AWS networking and the fact that the initial root password is shown once, it can be challenging. However, the documentation for this AMI is extremely good, and once set up, works exactly like you would expect it to. I would highly recommend it.
no support for nitro systems -> no serial console
instance not reachable after update -> no support for nitro systems (not possible to pick such an instance) -> no serial console -> not working for me.