Top all-time · #1327
netgate.com
Company blog · netgate.com/blog · on HN as gonzosystemssecurity
netgate.com is the company blog at netgate.com, writing about systems and security. Since 2009, 53 different Hacker News readers have linked it 83 times, most often “Netgate's Take on the WireGuard Debacle”. It is still writing: the last post was on 2026-10-29, and you can follow it by feed.
Netgate is an open-source driven secure networking company that provides appliance and software-based firewall, VPN and routing solutions including pfSense
Most-linked posts?
- Netgate's Take on the WireGuard Debacle5 people · 6 mentions · first linked 2021-03-16
- Announcing PfSense Plus3 people · 4 mentions · first linked 2021-01-21
- WireGuard for PfSense Software3 people · 3 mentions · first linked 2021-01-19
- The Netgate-PfSense Engineering Blog3 people · 3 mentions · first linked 2021-01-27
- WireGuard Removed from PfSense CE and PfSense Plus Software3 people · 3 mentions · first linked 2021-03-18
- PfSense 2.5 and AES-NI2 people · 3 mentions · first linked 2017-05-01
- /solutions/pfsense/sg-1000.html2 people · 2 mentions · first linked 2018-06-13
- Updates to the pf packet filter in FreeBSD and pfSense software2 people · 2 mentions · first linked 2025-09-18
- PfSense 2.4.02 people · 2 mentions · first linked 2017-10-12
- PFsense at 20. Plus and CE unified. Offline upgrades free.2 people · 2 mentions · first linked 2026-10-29
What Hacker News says?
Pfsense has problems when running in kvm. https://www.netgate.com/docs/pfsense/virtualization/virtio-d... and https://www.reddit.com/r/homelab/comments/7tsppj/pfsense_per...
Comment linking /docs/pfsense/virtualization/virtio-driver-support.html
on “My home lab setup for highly-available Internet”Submitted The pfSense Book as a story · 121 points
HN discussionYou should look into pfsense running as a vm on multiple hosts. You can sync the configs with CARP. It's pretty solid, we use this setup in a couple of data centers, few years with no downtime, and has failed over several times. https://www.netgate.com/docs/pfsense/highavailability/config...
Comment linking /docs/pfsense/highavailability/configuring-high-availability.html
on “My home lab setup for highly-available Internet”Submitted PfSense – WireGuard Returns as Experimental Package as a story · 55 points
HN discussionIt is a complex subject. pfSense is Open Source and IMNSHO the best Swiss Army knife of routers/firewalls. Download this: https://www.pfsense.org/download/ Have a read of this: https://www.netgate.com/docs/pfsense/ Hang out here: https://forum.netgate.com/ The VM is a router. Provided you ensure that traffic has to go through the VM and that the VM is able to route etc then it is a router 8) OP is using Linux wherea…
Comment linking /docs/pfsense/
on “My home lab setup for highly-available Internet”Submitted PfSense 2.5 and AES-NI as a story · 45 points
HN discussionTakes a bit of searching to find the hardware section (it's under products->appliances) https://www.netgate.com/products/appliances/
Comment linking /products/appliances/
on “Ubiquiti Networks Breach”Submitted PfSense Software Embraces Change: A Strategic Migration to the Linux Kernel as a story · 35 points
HN discussionThere's also Netgate hardware, which has the added benefit of supporting development of pfSense. I have the SG-3100 and have been very happy with it. https://www.netgate.com/
Comment linking /
on “Ubiquiti Networks Breach”Submitted Announcing PfSense Plus as a story · 18 points
HN discussionThe main leap for whitebox is AES-NI for SSL/TLS offload. Nobody is really using DPDK/NETMAP in OSS products from what I can tell. Netgate is doing TNSR, but its not open source: https://www.netgate.com/tnsr-applications/edge-routing
Comment linking /tnsr-applications/edge-routing
on “Juniper breach mystery starts to clear with new details on hackers and U.S. role”Submitted Addressing Changes to PfSense Plus Home+Lab as a story · 6 points
HN discussionIt’s a fairly recent turn of events. First it was difficult to compile on 2.4 because three left out closed source dependencies that their build scripts relied on. With 2.6 they are basically diverging entirely. Albeit they are still trying to argue they are foss. The issue I have is if I’m going with an edge security appliance that has code that can’t be easily audited by security pros better than me, I’ll go with…
Comment linking /blog/painful-lessons-learned-in-security-and-community.html
on “In-kernel WireGuard is on its way to FreeBSD and the pfSense router”Submitted PFsense at 20. Plus and CE unified. Offline upgrades free. as a story · 5 points
HN discussionSo there are a few things worth noting. Like you, i have used pfSense since the 1.2.3 days...which is about 2008-2009 or so. I even bought the book to support the devs at the time (which to my knowledge have left for greener pastures). In some sites I even replaced failing hardware with a legit appliance. And even with COVID, pfsenese allowed me to quickly spin up OpenVPN appliances as standalone boxes (something i…
Comment linking /blog/announcing-pfsense-plus.html
on “In-kernel WireGuard is on its way to FreeBSD and the pfSense router”Submitted The Netgate-PfSense Engineering Blog as a story · 5 points
HN discussionScott Long from Netgate's response: https://www.netgate.com/blog/painful-lessons-learned-in-secu... "Unfortunately, the public discussion has also veered into vague claims and slanderous attacks. This is where the lack of transparency, the lack of respect, and the inflation of ego is damaging and unproductive. We had hoped for a better collaboration than this, and it makes me doubt the motives of the attackers. And…
Comment linking /blog/painful-lessons-learned-in-security-and-community.html
on “In-kernel WireGuard is on its way to FreeBSD and the pfSense router”Submitted PfSense 2.4.0 as a story · 5 points
HN discussionDamage control: https://www.netgate.com/blog/painful-lessons-learned-in-secu...
Comment linking /blog/painful-lessons-learned-in-security-and-community.html
on “In-kernel WireGuard is on its way to FreeBSD and the pfSense router”Submitted Netgate's Take on the WireGuard Debacle as a story · 4 points
HN discussion> I'd love to see OpenWRT take a (deserved) bite out of the "SMB firewall vendors" like Netgate I'll just leave this here: https://www.netgate.com/blog/pfsense-software-embraces-chang... OPNsense are unlikely to be able to make this transition, as they can't even reliably work on the FreeBSD kernel.
Comment linking /blog/pfsense-software-embraces-change-a-strategic-migration-to-the-linux-kernel
on “OpenWrt: A Linux OS targeting embedded devices”Submitted PfSense Plus and PfSense CE: Dev Insights and Direction as a story · 4 points
HN discussionThis is a real shame. Netgate recently "sponsored" adding Wireguard to FreeBSD, presumably so that it could be used in pfSense. https://www.netgate.com/blog/wireguard-for-pfsense-software....
Comment linking /blog/wireguard-for-pfsense-software.html
on “PfSense Is Closed Source”Submitted PfSense Plus announced, diverging further from pfSense open source edition as a story · 4 points
HN discussionA a larger backer and contributor to freeBSD pushed wireguard kernel mode support out in one of their production releases and then slowly walked it back. Whether freeBSD likes it or not, this sort of thing reflects poorly on freeBSD as a whole when a large donor/backer and contributor that advertises freeBSD then releases something that is a pile of half baked shit. https://www.netgate.com/blog/wireguard-removed-fro…
Comment linking /blog/wireguard-removed-from-pfsense-ce-and-pfsense-plus-software
on “WireGuard in FreeBSD”Submitted Updates to the pf packet filter in FreeBSD and pfSense software as a story · 3 points
HN discussionHow hard is it to get devices included into OpenWRT's Table of Hardware, or official releases? I have an End-Of-Life'd SG-1000 from PFsense developer NetGate https://www.netgate.com/solutions/pfsense/sg-1000.html The thing no longer gets updates as of October 2019 and was never particularly well supported, but feels like an absolutely perfect OpenWRT target I've poked at it on and off with regard to getting Linux ru…
Comment linking /solutions/pfsense/sg-1000.html
on “OpenWrt 19.07”Submitted WireGuard Removed from PfSense CE and PfSense Plus Software as a story · 3 points
HN discussionNetgate makes some very nice appliances. For example: https://www.netgate.com/solutions/pfsense/sg-1100.html
Comment linking /solutions/pfsense/sg-1100.html
on “Openwrt 18.06.2 released”Submitted WireGuard Removed from PfSense CE and PfSense Plus Software as a story · 3 points
HN discussion
