Suggestions appear as you type. Use the up and down arrows to choose one and Enter to open it.

This page's audience our own tag's counts — open to see them
–Visits
–Page views
–Clicks to vendors
–Time on page
–Reading now
Clicks to vendors, by tool
  • –
Top countries
  • –
Devices
  • –

– · visits, page views and clicks counted by our own tag, which counts more than our checked analytics; every figure rounded down · how we count

TNSR review

#54 of 76 in Firewall Software

A Linux-focused router and firewall for complex routing, VPN, and network control.

3.8/10Editor score
TNSR3.8 Visit Netgate

Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026

TNSR is Netgate’s software router and VPN concentrator for businesses, service providers, governments, educational institutions, and managed service providers. It runs on Linux for x86 processors and is available on selected Netgate appliances and AWS and Azure cloud platforms. The product is aimed at teams that need routing, packet filtering, NAT, VPN connectivity, access control, and network diagnostics in a Linux-based environment rather than a general-purpose firewall interface.

Its strongest fit is for network teams managing demanding routing and connectivity requirements. TNSR supports static and dynamic routing, including BGP and OSPF, along with site-to-site IPsec VPN and WireGuard VPN. Filtering spans Layer 2, Layer 3, Layer 4, MACIP, and host access-control lists, while VPF provides packet filtering and NAT. For operational visibility and automation, it offers CLI-based configuration, monitoring, and diagnostics, plus RESTCONF API and NETCONF configuration management. SNMP, Prometheus, and IPFIX support extend monitoring and export options across network operations workflows.

High availability is another meaningful strength: VRRP and VPF state synchronization support resilient deployments. Pricing is an annual per-instance subscription, with purchasing directed through appliance or cloud options and a sales conversation. That model suits organizations planning a managed network deployment, but it is less suitable for buyers seeking a self-serve purchase or free plan. TNSR should be considered when Linux compatibility, advanced routing, VPN choices, APIs, and state synchronization matter most. Organizations prioritizing broader verified security capabilities, multi-platform operation, or transparent public pricing should evaluate alternatives instead.

TNSR pros and cons

  • Where it wins
    • Supports BGP, OSPF, IPsec, WireGuard, NAT, and layered ACLs
    • Provides RESTCONF, NETCONF, CLI, SNMP, Prometheus, and IPFIX support
    • Includes VRRP high availability and VPF state synchronization
  • Where it doesn't
    • Pricing requires a sales conversation and annual per-instance subscription
    • Runs on Linux for x86 processors rather than across multiple operating systems
    • Its verified security feature set is narrower than some alternatives

TNSR fact sheet, pricing and score →

Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.

Last updated · How we research and update