Deciso's OPNsense Tour


Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. It reduces bandwidth and improves response times by caching and reusing frequently-requested web pages. Squid has extensive access controls and makes a great server accelerator.


Multi Interface

Proxy can run at multiple interfaces.

Transparent Proxy

The proxy can be configured as transparent proxy.

FTP Proxy

Integrated FTP proxy that makes use of the defined Access Control Lists.


LDAP (incl. Microsoft Active Directory)
Radius [as of 16.1]
Local user manager
No authentication

Access Control

Fine grained access control, includes:
  MIME types
  Banned IP’s
  Browser/User Agents
  Support for blacklists


Traffic Management

The proxy can be combined with the traffic shaper and take full advantage of its shaping features.Additionally it includes its own options:

Maximum download size
Maximum upload size
Overall bandwidth throttling
Per host bandwidth throttling

User based Access Control

User based Access Control is scheduled for Q1-2016.


Screenshot OPNsense Caching Proxy

Your Next Firewall is Open Source !

OPNsense is an open source, easy-to-use and easy-to-build FreeBSD based firewall and routing platform.

OPNsense is licensed under an Open Source Initiative approved license. OPNsense is and will be available with the simple 2-clause BSD license.