Topics
Browse everything pfSenseLab publishes by category and tag: every topic covered here, with the most recent guides listed under each one.
Tags
- #pfsense 23
- #buying-guide 4
- #hardware 4
- #networking 4
- #vpn 4
- #firewall 3
- #firewall-rules 3
- #homelab 3
- #netgate 3
- #openvpn 3
- #pfblockerng 3
- #protectli 3
- #remote-access 3
- #security 3
- #appliance 2
- #failover 2
- #firewall-hardware 2
- #mini-pc 2
- #nic 2
- #pfsense-plus 2
- #snort 2
- #tutorial 2
- #wireguard 2
- #ad-blocking 1
- #beginner 1
- #carp 1
- #comparison 1
- #dco 1
- #dns 1
- #freebsd 1
- #gateway-groups 1
- #geoip 1
- #ha 1
- #high-availability 1
- #i226-v 1
- #ids 1
- #ids-ips 1
- #installation 1
- #intel-n100 1
- #intrusion-detection 1
- #iot 1
- #ip-reputation 1
- #ips 1
- #licensing 1
- #load-balancing 1
- #maxmind 1
- #migration 1
- #multi-wan 1
- #nat 1
- #network-segmentation 1
- #openappid 1
- #opnsense 1
- #pfsense-ce 1
- #pfsync 1
- #policy-routing 1
- #port-forwarding 1
- #proxmox 1
- #ram 1
- #requirements 1
- #road-warrior 1
- #routing 1
- #setup 1
- #site-to-site 1
- #sizing 1
- #storage 1
- #suricata 1
- #threat-intel 1
- #troubleshooting 1
- #virtualization 1
- #vlan 1
- #xmlrpc 1
Categories
hardware 6 posts
- Best pfSense Hardware: Netgate 4200, Protectli or N100?The Netgate 4200 is the best pfSense hardware for most networks; free CE users should buy an Intel i226-V N100 or Protectli box. Specs and prices.
- pfSense Ready Hardware: What It Means and What to CheckpfSense ready hardware is a seller's label, not a Netgate certification. Check the CPU, NIC driver, ports, storage and install path before trusting it.
- Intel N100 pfSense Firewall Build Review: Where It Tops OutAn Intel N100 box with four i226-V ports can route 2.5GbE on pfSense; inline IPS and WireGuard are the limits. Specs, power, BIOS fixes, verdict.
- pfSense Appliances: Netgate, Protectli, or DIY BuildWhat a pfSense appliance actually buys you, how Netgate, third-party boxes, and DIY builds differ, and the five checks to run before ordering any of them.
- pfSense Requirements: Minimum & Recommended HardwareNetgate's minimum is a 64-bit CPU, 1 GB RAM and 8 GB disk. Learn when you need 4, 8 or 16 GB RAM, which NICs to pick, and what Suricata or a VM adds.
- Best pfSense Hardware to Buy in 2026 by Use CaseA spec-based comparison of pfSense appliances, mini PCs, and used systems by WAN speed, IDS/IPS load, NICs, support, power use, and budget.
networking 4 posts
- What Is pfSense? Firewall, Router and Homelab UsespfSense is FreeBSD-based firewall and router software. Learn its homelab roles, CE and Plus editions, network services, limits, and where to start.
- pfSense VLAN Setup for Homelab: Design, Rules, and TestspfSense VLAN setup for homelab: trunk layout, a four-VLAN plan, firewall rules in apply order, mDNS reflection, DNS pinning, and the tests that prove it.
- How to Set Up an OpenVPN Server on pfSenseRun the pfSense OpenVPN wizard end to end: CA and server certificate, a tunnel network that will not collide, firewall rules, and client export.
- How to Set Up WireGuard VPN on pfSense: Step-by-Step GuideSet up WireGuard VPN on pfSense step by step: install the package, create the tunnel, add peers, assign the interface, and write the firewall rules.
security 4 posts
- How to Install Snort on pfSense: Rules and Blocking ModesInstall Snort on pfSense, select rule feeds and an inspection interface, then compare alert-only operation, legacy blocking and inline IPS.
- pfSense Suricata vs Snort: Which IDS/IPS to ChooseSuricata suits most pfSense homelabs with multithreading, EVE JSON logs and Snort rules. Choose Snort for OpenAppID, then stage IDS before inline IPS.
- pfBlockerNG GeoIP: MaxMind Key, Country Rules and FeedsConfigure pfBlockerNG GeoIP with a MaxMind license key, country rules and IP feeds; check generated aliases, update failures and false positives.
- pfSense DNSBL with pfBlockerNG: Ad Blocking Setup and FixesSet up pfBlockerNG DNSBL feeds on pfSense, force clients through the resolver, find why ads still get through, and whitelist false positives.
advanced 2 posts
- pfSense Multi-WAN Setup: Failover vs Load BalancingUse separate gateway tiers for dual-WAN failover or the same tier for per-flow load balancing. Configure policy routing, DNS and NAT for both links.
- pfSense CARP Setup: High Availability Failover with pfsyncSet up two pfSense nodes with CARP virtual IPs, pfsync state sync and XMLRPC config sync, plan the three LAN addresses needed, and test a real failover.
firewall 2 posts
- pfSense Plus vs CE Differences Explained: Which to RunpfSense CE is free and open source; Plus adds OpenVPN DCO, QAT offload, ZFS boot environments and faster releases. Costs, gaps and who needs Plus.
- pfSense vs OPNsense: Keep pfBlockerNG or Migrate?Compare pfSense vs OPNsense for an existing pfBlockerNG homelab: DNS and IP filtering, VPN dependencies, configuration migration and rollback.
vpn 2 posts
- pfSense OpenVPN Setup: Remote Access, Site-to-Site, ClientpfSense OpenVPN setup by mode: SSL/TLS + User Auth for remote access, peer-to-peer SSL/TLS for site-to-site, and assigned interfaces for VPN clients.
- OpenVPN DCO vs WireGuard on pfSense: Which VPN Fits?Compare OpenVPN DCO vs WireGuard on pfSense: Plus and CE support, UDP and cipher limits, client authentication, routing and workload trade-offs.