I co-founded pfSense. For the last year I've been building its successor.
If you run pfSense today, you already know the reasons to look around: development you can't influence, a CE edition that feels like an afterthought, FreeBSD driver roulette on modern hardware, and a config workflow where one bad apply on a remote box means a drive.
nfSensei is my answer. Built from scratch in Rust, on Linux, and designed around the things pfSense users actually complain about.
Your config.xml imports. There's an importer that reads your pfSense config, shows you exactly what maps over and what needs attention, then applies it. You don't start from zero.
You can't brick it from the couch. Changes stage as a candidate, diff before apply, validate through the real engines before anything is written, and auto-roll-back if you don't confirm in time. If a config ever fails at boot, the box falls back to the last good one on its own.
The hardware works. Linux base means modern NICs and drivers just work — and the fast path compiles your rules to XDP at 40Gbps.
Automation is native, not scraped. Everything the UI does is a documented API call — about 1,140 of them, with a built-in explorer. Your Ansible finally gets a real interface.
The VPNs are current. WireGuard, IPsec, Tailscale, and self-hosted mesh — your own control plane, your keys — plus post-quantum key exchange where it counts.
The experimental stuff has its own wing. Thirty-plus Labs features behind toggles: WAN bonding that fuses multiple cheap uplinks through a $5 VPS into one resilient pipe, per-flow SLA telemetry with tamper-evident audit chains, GeoDNS that steers traffic by live RTT and load, application-aware QoS, config push to a whole fleet of remote nodes, and an AI assistant on the box that reads your actual interfaces and logs using local models. Toggles are per-browser and can't touch your running config — flip things on, break them, tell me about it. Oh, and there is much more to mention here!
Self-hosted, on your hardware, no cloud account, no subscription.
It's NOW IN ACTIVE BETA (previously alpha) with about 40 testers, and bug reports typically get fixed in days. I want more people who know what pfSense does well and can tell me exactly where nfSensei falls short.
If you are interested in testing please email me: [email protected]. Tell me about your pfSense setup and I'll get you access.
Note: Affiliates and employees of Netgate are not invited.
How Japanese have produced wood for 700 years, without cutting down trees.
Daisugi is an ancient Japanese forestry technique developed in the 14th century originally used by people living in the Kitayama region, because the territory was extremely poor in saplings.
They planted cedars pruned in a special way to produce shoots that eventually would become perfect, straight, knot-free lumbers.
The shoots are gently pruned by hand every two years leaving only the top boughs, allowing them to grow straight. Harvesting takes 20 years and old 'tree stock' can grow up to a hundred shoots at a time.
There was actually another reason why the technique was developed: fashion. In the 14th century, a linear, stylized form of architecture known as sukiya-zukuri (数寄屋造り) became popular, and every prominent samurai or nobleman wanted a house built in this way.
There were simply not enough raw materials available to keep up with demand, so daisugi was developed to produce more wood in a shorter time.
The wood produced with this technique has also impressive qualities: it's 140% more flexible than standard cedar and 200% denser and stronger. And, it's extremely durable.
Britain pays wind farms to turn off when it’s windy and overpays gas plants to switch on instead. It'll cost bill payers up to £8b/yr by 2030. Zonal energy pricing would slash this.
We’ve started tracking this (avoidable) waste live on our site: https://t.co/cSvypnOSQs
@OctopusEnergy can't get octopus mini to connect to smart meter (stuck at flashing blue light after multiple reset attempts) Support have sent me round in circles and don't actually read any info sent to them. Any advice on how to get this resolved?
Holy hannah! Disabling web search on the start menu makes it so much faster and effective. No lag at all anymore!
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Search
Make a new DWORD (32-bit) called: BingSearchEnabled
Ensure the value = 0
A Threat Actor referring to himself as Ignacio, also humorously calling himself "the McFlurry Bandit", compromised McDonalds git repo.
It contains a large quantity of source code.
🌞Here's a short story abt how I went to Morocco to see one of the world's biggest solar plants.
It didn't go quite as I expected
This is the Noor complex near Ouarzazate.
It's massive. Bigger than the capital of Morocco.
Europe (& UK) plan to import solar power from Morocco.
🧵
Just FYI to newer journalists: You can define “cyber attacks” in ways to arrive at basically any number you want. I promise you these statistics are wholly literally meaningless. Your home internet router discards zillions of junk probe packets a day, too.