Hacker News new | ask | show | jobs
by kjs3 1071 days ago
Agreed. Personally, what {pf,open}sense add aren't worth not just running pf/pfsync/carp on straight OpenBSD. Yes...no flashy GUI, but it's all well documented.
1 comments

Well, the thing is what I like what they have WebGUI, especially if I'm not the only one who would use it. But it's almost amusing on how they both overcomplicate the things, instead of (at least) giving me a checkmark to stop being 'user-friendly'.

The lack of necessities (eg pre-populated RFC1918 networks in the aliases, or extreamly common things, like AD ports list) or a 'session' view which defaults to seven states in OPNsense is just an icing on the top.

ADD: forgot, those stupid CSS animations in OPN. Not only they are stupid and slow, I'm almost never access the WebGUI directly, so I'm forced to watch every frame to be sent on the net.

It's like they are never ever dogfooding their own products, except their local, small labs.

ADD2: I hated ISA Server with a passion, for it being an overcomplicated mess. But 20 years later I would gave my month supply of pumpkin latte to just have an easy way to work with network groups and high level network abstractions.

Well, yeah...you made my point. I'll take a well documented, easy to work with and reason about, easy to debug, text configuration over a crappy GUI any day of the week.
You and me both, but we’re not the audience for pfSense.
incidentally why I like proxmox. it's the best of both worlds.