- Home
- Firewall Software
- IPFire
IPFire
What it is
IPFire is an open-source firewall and security platform for networks ranging from home offices to global enterprises. Its Linux Netfilter-based firewall supports network zones, port forwarding, NAT, and stateful packet inspection. For remote access or site-to-site connections, it supports IPsec, WireGuard, and OpenVPN. A Suricata-powered intrusion prevention system detects and blocks malicious traffic in real time using updated rule sets. IPFire also includes a Squid web proxy, with optional URL filtering through URLFilter or SquidGuard. Red, Green, Blue, and Orange zones can serve roles such as trusted networks, DMZs, and Wi-Fi. The web interface monitors bandwidth, connections, and intrusion attempts; proxy authentication can use Microsoft Windows Active Directory, LDAP, or RADIUS. Download images are offered for x86_64 and aarch64 deployments on bare metal, virtual machines, embedded hardware, USB sticks, and SD cards. Cloud images are available for AWS, Exoscale, and other providers. The project provides frequent security updates, documentation, and community resources; professional support is available from Lightning Wire Labs.
For and against
For
- Supports IPsec, WireGuard, and OpenVPN.
- Intrusion prevention uses updated rule sets.
- Web interface monitors bandwidth and connections.
- Images cover multiple hardware and cloud deployments.
Against
- SSL inspection is not supported.
- Optional URL filtering requires URLFilter or SquidGuard.
- Professional support is offered by Lightning Wire Labs.
The verdict
IPFire combines firewall, VPN, proxy, intrusion-prevention, and monitoring tools in an open-source platform. Users should note that SSL inspection is not supported and URL filtering is optional.
Who it suits
IPFire is presented for individuals, businesses, and organizations managing networks from home offices to global enterprises. It may suit teams that need firewall controls, VPN options, intrusion prevention, and network monitoring.
Plans and prices
IPFire software
No feature tiers · No licence renewals
Read 15 Oct 2026 · ipfire.org
IPFire Nano Appliance
IPFire pre-installed
Read 15 Oct 2026 · store.lightningwirelabs.com
IPFire Mini Appliance (US)
8GB memory · 128GB SSD · Four 2.5GbE ports
Read 15 Oct 2026 · store.lightningwirelabs.com
IPFire Standard Support
5 included hours · €170 hourly rate · One-month notice
Read 15 Oct 2026 · store.lightningwirelabs.com
IPFire Enterprise Appliance (US)
16GB memory · 512GB NVMe · Dual 10GbE
Read 15 Oct 2026 · store.lightningwirelabs.com
IPFire
Free to download and run · no feature tiers · no licence renewals
Read 3 Oct 2026 · ipfire.org
On the record
- Add-ons
- A Pakfire add-on system extends the base firewall with additional network and monitoring services.ipfire.org · read 15 Oct 2026
- API documentation
- The DBL API publishes an OpenAPI 3.1 Swagger interface with domain, list, report and search endpoints.api.dbl.ipfire.org · read 15 Oct 2026
- Cloud
- The project says AMIs and cloud images are available for AWS, Exoscale, and more.ipfire.org · read 3 Oct 2026
- Company facts
- LinkedIn describes IPFire as a nonprofit computer and network-security organization headquartered in Datteln, Germany, founded in 2004, with a stated size of 51–200 employees.linkedin.com · read 15 Oct 2026
- Contributor licensing
- The contributor agreement assigns unlicensed code contributions a default MIT licence and unlicensed content a CC-BY-SA-based licence.ipfire.org · read 15 Oct 2026
- Deployment
- The current download page offers x86_64 and aarch64 ISO and flash images for bare metal, virtual machines, embedded hardware, USB sticks, and SD cards.ipfire.org · read 3 Oct 2026
- DNS security
- The DNS service supports DNSSEC validation, caching and encrypted DNS-over-TLS upstream connections.ipfire.org · read 15 Oct 2026
- Documentation
- Official documentation covers installation, WebGUI administration, firewalling, IPS, networking, VPNs, add-ons, hardware and development.ipfire.org · read 15 Oct 2026
- Firewall
- Its Linux Netfilter-based firewall supports network zones, port forwarding, NAT, and stateful packet inspection.ipfire.org · read 3 Oct 2026
- Firewall engine
- Its firewall groups networks, hosts and services into reusable rules and supports rate limiting and logging.ipfire.org · read 15 Oct 2026
- Installation media
- Downloads include bootable CD, USB, flash, Alix and Xen images.ipfire.org · read 15 Oct 2026
- Integrations
- SourceForge lists Cisco AnyConnect, AWS Marketplace, Amazon Web Services, Exoscale, Juniper Identity Management Service and OpenVPN as integrations.sourceforge.net · read 15 Oct 2026
- Intrusion prevention
- The built-in IPS performs deep packet inspection against signatures and suspicious-behaviour indicators.ipfire.org · read 15 Oct 2026
- Licence
- IPFire is free software distributed under GPLv3, while included components must use an approved open-source licence.ipfire.org · read 15 Oct 2026
- Limit: configuration complexity
- An AWS Marketplace reviewer says initial setup and configuration can be challenging, despite rating stability highly.aws.amazon.com · read 15 Oct 2026
- Limit: interface
- Reviewers on SourceForge and AWS Marketplace report that the WebGUI can feel impractical or could be substantially improved.sourceforge.net · read 15 Oct 2026
- Limit: learning curve
- A SourceForge reviewer says the unusual zone model creates a learning curve for new users.sourceforge.net · read 15 Oct 2026
- Limit: missing built-in help
- Network World found that the Web interface lacked built-in help, requiring users to rely on the online wiki.networkworld.com · read 15 Oct 2026
