pfSense / OPNsense Firewall
pfSense & OPNsense VPS - self-hosted firewall & VPN in France
Deploy a pfSense or OPNsense firewall on a KVM VPS in France. OpenVPN/WireGuard VPN, Suricata IDS/IPS, virtual router, VLANs. Data held in France, full root SSH access. From €6.99/month excl. VAT.
Pricing and specifications updated on 3 November 2026
KVM for pfSense
pfSense and OPNsense require full KVM virtualisation. Our KVM VPS are compatible, unlike OpenVZ VPS.
OpenVPN & WireGuard VPN
Build a site-to-site or client VPN with OpenVPN or WireGuard straight from the pfSense interface.
Suricata IDS/IPS
Intrusion detection and prevention with Suricata on pfSense. ET Open and Snort rule sets available.
Data held in France
A virtual router hosted at Telehouse Paris Magny (TH3). No network data passes through foreign servers.
pfSense on a VPS: what to know
pfSense and OPNsense are FreeBSD distributions built to run on physical appliances or KVM virtual machines. On an OmegaCloud VPS (KVM full virtualisation) you can install and configure them with their full feature set: stateful firewall, NAT, VPN, VLANs and IDS/IPS.
One important limitation: on a VPS you have no access to physical network hardware. pfSense only handles the KVM virtual network interfaces (vtnet). Routing between separate physical networks requires a dedicated server. For a homelab, a VPN or a self-hosted application firewall, a VPS fits perfectly.
See the plans from €6.99/month excl. VAT →pfSense VPS plans
KVM full virtualisation, SSD storage, Anti-DDoS 1 Tbit/s and 24/7 support are included in every plan.
Dedicated resources
- Full root SSH access
- Dedicated IPv4 + IPv6 address
- Anti-DDoS Netrix 1 Tbit/s inclus
- Snapshots included
- Emergency console included
- 24/7 expert support
- Deployment in under 60 seconds
Dedicated resources
- Full root SSH access
- Dedicated IPv4 + IPv6 address
- Anti-DDoS Netrix 1 Tbit/s inclus
- Snapshots included
- Emergency console included
- 24/7 expert support
- Deployment in under 60 seconds
Dedicated resources
- Full root SSH access
- Dedicated IPv4 + IPv6 address
- Anti-DDoS Netrix 1 Tbit/s inclus
- Snapshots included
- Emergency console included
- 24/7 expert support
- Deployment in under 60 seconds
Dedicated resources
- Full root SSH access
- Dedicated IPv4 + IPv6 address
- Anti-DDoS Netrix 1 Tbit/s inclus
- Snapshots included
- Emergency console included
- 24/7 expert support
- Deployment in under 60 seconds
Prices shown per month, discount applied over the whole period · excl. VAT
pfSense / OPNsense on a VPS: what it does
Firewall, VPN, IDS/IPS, VLANs - every pfSense feature available through the web interface, with no panel restrictions.
Full stateful firewall
Inbound and outbound filtering rules, NAT, port forwarding and traffic shaping from the pfSense or OPNsense web interface.
Site-to-site & client VPN
Multi-client OpenVPN with certificates, fast WireGuard and site-to-site IPSec. Guided setup through the pfSense wizard.
Suricata IDS/IPS
Intrusion detection and prevention with Suricata. Emerging Threats rules, IP blocklists, alerts and centralised logs.
VLANs & advanced routing
Network segmentation with VLANs, static and dynamic routing (OSPF, BGP through FRR) and a built-in DNS Resolver.
Everything included, no hidden extras
Every pfSense VPS plan includes all of these features from the first euro.
Anti-DDoS 1 Tbit/s
Your pfSense/OPNsense gateway keeps running under attack, thanks to 1 Tbit/s of Anti-DDoS network filtering placed upstream of the firewall.
SSD storage
SSD storage writes filtering logs and firewall rules quickly, with no latency when you go back through your network history.
Root SSH access
Root SSH to work directly on the system beneath your virtual firewall, with an emergency console if a misconfigured rule cuts off web access.
Snapshots and backups
Save the full state of your pfSense configuration before changing filtering rules or VPN tunnels, and restore it immediately in one click.
Dedicated IPv4 and IPv6
Fixed, dedicated IPv4 and IPv6 addresses - essential for a secure gateway serving as a stable VPN entry point that is not shared with other customers.
Real-time monitoring
Watch the traffic crossing your virtual router and the network load as it happens, with alerts when an interface shows an unusual spike.
Full REST API
Automate the deployment of your pfSense gateways over the REST API, to orchestrate network rules with Terraform or Ansible at scale.
24/7 expert support
A French team with network and VPN expertise answers 24/7 in under an hour when your filtering rules block you, with no chatbot.
Every way to use pfSense on a VPS
From a company VPN to a network honeypot, the OmegaCloud KVM VPS fits every pfSense and OPNsense scenario.
Self-hosted company VPN
Run an OpenVPN or WireGuard server for your remote colleagues, managing certificates and access from pfSense.
Secured homelab
Put a pfSense VPS at the entry point of your homelab: filter exposed ports, provide secure VPN access and log every connection.
Application perimeter firewall
Protect web applications behind pfSense: L7 rules, geographic blocklists, rate limiting and logs for your SOC.
Virtual DMZ
Build a virtual demilitarised zone with separate VLANs for public servers (web, mail) and your internal infrastructure.
Honeypot & network deception
Set up decoy ports with pfSense to spot intrusion attempts and collect IOCs on your own infrastructure.
Network training & certifications
A sandbox for practising Cisco-like configurations, CompTIA Security+ certification work or network security labs.
pfSense on a VPS vs a physical pfSense appliance
Compare the two options to pick the one that suits your infrastructure.
| Criterion | OmegaCloud VPS | Physical pfSense appliance |
|---|---|---|
| Upfront cost | From €6.99/month | €200-800 of hardware |
| Network card | Virtual (KVM vtnet) | Physical Intel/Realtek |
| Network throughput | 1 Gbit/s | Depends on the hardware |
| Snapshots | Yes (OmegaCloud panel) | No |
| Redundancy | Snapshot failover | Dedicated CARP hardware |
| Datacenter | Telehouse Paris Magny (TH3) | Your own infrastructure |
| Maintenance | No hardware to manage | Physical failures possible |
Frequently asked questions about pfSense VPS
What to know before you deploy pfSense or OPNsense on a VPS.
Yes, on a KVM VPS such as OmegaCloud. pfSense requires full KVM virtualisation - which our VPS use. OpenVZ and LXC VPS are not compatible. You install pfSense from an ISO through our recovery console.
Yes. OPNsense is a fork of pfSense with a more modern interface, more frequent updates and better native WireGuard support. Both run on a KVM VPS and share the same FreeBSD base.
Yes, and it is one of the most popular uses. pfSense includes OpenVPN (with a setup wizard), WireGuard (a native plugin on OPNsense, a package on pfSense) and IPSec. Your VPN clients connect to the dedicated IP of your VPS.
A basic pfSense install runs on 1 GB of RAM. With Suricata IDS/IPS enabled, count on 2-4 GB. Our Start plan (4 GB RAM) is comfortable for VPN and firewall use with Suricata. Choose the Medium plan (8 GB) if you run many rules or heavy traffic shaping.
No. On a VPS, pfSense only handles virtual network interfaces (one or two depending on the configuration). Routing between separate physical networks - between two datacenter VLANs, for example - requires a dedicated server with physical network cards.
Suricata is a package you can install free of charge from the pfSense package manager. The base rules (Emerging Threats Open) are free. Professional rule sets (ET Pro, Snort) require a separate subscription.
From your panel, mount the pfSense/OPNsense ISO as a virtual boot device through the KVM console, install it on the VPS disk, then configure the WAN interface with your dedicated OmegaCloud IP. Our support team helps with the first installation.
Yes, with HAProxy (a pfSense package) or through Nginx Proxy Manager as a package. That said, if your main need is an HTTPS reverse proxy, Nginx or Traefik on a standard Linux VPS is usually simpler and faster.
pfSense VPS guides
How to install, configure and secure pfSense or OPNsense on a Linux VPS. Our guides are published in French.
Compare with our other solutions
Explore our other specialised VPS
The same KVM SSD infrastructure hosted in Paris, tuned for each use case.
Deploy your pfSense firewall now
A KVM VPS live in 60 seconds. pfSense or OPNsense installable from your console, with VPN and firewall up in minutes.