802.1d bridge with Spanning Tree protocol to avoid loops even in the presence of redundant paths.Router with static and dynamic routes (RIPv2 with MD5 or plain text authentication and Split Horizon and Poisoned Reverse algorithms).LAN-to-LAN VPN with encapsulation of Ethernet datagrams in SSL/TLS tunnel with support for 802.1Q VLAN.Host-to-LAN VPN with L2TP/IPsec in which L2TP (Layer 2 Tunneling Protocol) authenticated with Kerberos v5.Wireless Access Point mode with Multiple SSID and VLAN support.HTTP Proxy server to block web pages containing virus.QoS (Quality of Service) management and traffic shaping.RADIUS server for providing secure authentication and automatic management of the encryption keys to WiFi networks.Load Balancing and Failover of multiple Internet connections.ZeroShell Web Interface | Net Balancer Section – Click to Enlarge The latter is the only supported Arm board with Gigabit Ethernet. If you want a firewall distributions with an easy-to-user web interface like pfSense, but that also works on cheaper Arm hardware, Linux based ZeroShell distribution could be worth a try, as beside working on Intel & AMD x86 platforms, the developers also provides images for Raspberry Pi 2 & 3 boards, and several Orange Pi boards, namely Orange Pi R1, Orange Pi Zero, Orange Pi PC, and Orange Pi Plus/Plus2. Several Arm SoCs & boards are now supported by FreeBSD, so in theory pfSense could be ported to those, but the page on FreeBSD does not seem to have been updated for a while. We’ve just seen pfSense is now available for Arm via firewall appliances such as Netgate SG-3100, but AFAIK there’s no pfSense community Arm firmware images yet.

Pfsense raspberry pi