pfSense
6 guides · all topics
pfSense Hardware Guide: What to Actually Buy
The most important pfSense spec isn't the CPU, it's the NIC. Plus why vendor throughput numbers overstate by 4x and AES-NI won't help your WireGuard.
Tailscale vs. WireGuard on pfSense: Which Should You Run?
Tailscale is WireGuard with a control plane on top. On pfSense there's a catch: FreeBSD can't run kernel mode, and it changes how packets are routed.
VLAN Segmentation on pfSense: Guest & IoT Networks
Guest and IoT VLANs on pfSense, actually isolated — firewall rules, dual-stack IPv6, and why to stop using 192.168.1.1.
DNS over TLS on pfSense: Encrypt Unbound's Upstream Queries
Encrypt pfSense's DNS queries with DoT — setup, the DNSSEC tradeoff, and how to actually verify it's working, not just enabled.
Multi-Site VPN on pfSense: Connect Multiple Locations with WireGuard (No Vendor Fees)
A real multi-site WireGuard VPN on pfSense — hub-and-spoke, dual-stack, no NAT, and only the hub needs a static IP.
pfSense WireGuard IPv6 Setup: Full Tunnel and Split Tunnel Guide
A complete dual-stack WireGuard VPN on pfSense — IPv6 included, both tunnel modes covered, and the firewall rules most guides leave out.