pfSense » pfSense Plus

VDOM seems like a marketing rebrand for a VRF on Fortinet. TNSR currently has this, but pfSense Plus does not.

Kris Phillips wrote in #note-1:

VDOM seems like a marketing rebrand for a VRF on Fortinet. TNSR currently has this, but pfSense Plus does not.

It is definietly more than a rebrand of VRF. VDOM essentially gives you different options for virtualizing your firewall, including a different web configuration for each virtual section. This is extremely useful for companies that rent out sections of their building to different smaller companies that each have their own networking requirments. You can have a root VDOM that shares internet access with all of the VDOMs under it, as well as setting some global network security rules that apply to all VDOMs. Then each company has their own VDOM where they can administer and alter its configuration to their business requirments. In my situation, we have my company, and a startup that we heavily invested in, under the same roof. Our policies and procedures do not change much so our networking does not change unless it is to improve performance, security, or reliability. The startup on the other hand needs to constantly change their environment around in order to test new products, diagnose issues, configure new lab enrionments for projects to mimic the production deployment, etc. With pfsense+ this means that we constantly have to alter the configuration of the whole firewall and it can open my company up to security concerns as well causing other issues that impact the network performance and even rarely bring it down. If the companies were under different VDOMs most of those issues would be mitigated, each company would have its separate firewall configuration, and there would be balance to the force.