Skip to content
SPECIFICTION
Get listed

IPFire

ipfire.org

From $91.58/mo Free plan Open source WebLinuxAPISelf-hosted
Visit ipfire.org
Spec score 9.3 #2 of 81 in Firewall Software

What it is

IPFire is a free, open-source firewall and security platform for networks from home offices to global enterprises. Its Linux Netfilter-based firewall supports network zones, port forwarding, NAT, and stateful packet inspection. VPN options include IPsec, WireGuard, and OpenVPN for site-to-site or remote access. A Suricata-powered intrusion prevention system detects and blocks malicious traffic using updated rule sets. IPFire includes a Squid web proxy with optional URL filtering through URLFilter or SquidGuard, and uses Red, Green, Blue, and Orange zones for roles such as trusted networks, DMZs, and Wi-Fi. Its web interface monitors bandwidth, connections, and intrusion attempts. Proxy authentication can use Microsoft Windows Active Directory, LDAP, or RADIUS. The download page offers x86_64 and aarch64 images for bare metal, virtual machines, embedded hardware, USB sticks, and SD cards; cloud images are available for AWS, Exoscale, and other providers. The project says it releases frequent security updates. Documentation, forums, mailing lists, and a bug tracker are available, and Lightning Wire Labs offers professional support.

Spec sheet

What it does
IPFire is a hardened Linux operating system functioning as a stateful firewall, VPN gateway, intrusion-prevention platform and extensible network appliance.Read 15 Oct 2026 · ipfire.org
Product
IPFire is an open-source firewall and security platform for networks ranging from home offices to global enterprises.Read 3 Oct 2026 · ipfire.org
Deployment
The current download page offers x86_64 and aarch64 ISO and flash images for bare metal, virtual machines, embedded hardware, USB sticks, and SD cards.Read 3 Oct 2026 · ipfire.org
Free plan
YesRead 21 Sep 2026 · ipfire.org
Integrations
SourceForge lists Cisco AnyConnect, AWS Marketplace, Amazon Web Services, Exoscale, Juniper Identity Management Service and OpenVPN as integrations.Read 15 Oct 2026 · sourceforge.net
Support
Lightning Wire Labs offers professional support, and the project points users to documentation, community forums, mailing lists, and a bug tracker.Read 3 Oct 2026 · ipfire.org
Add-ons
A Pakfire add-on system extends the base firewall with additional network and monitoring services.Read 15 Oct 2026 · ipfire.org
API documentation
The DBL API publishes an OpenAPI 3.1 Swagger interface with domain, list, report and search endpoints.Read 15 Oct 2026 · api.dbl.ipfire.org
Cloud
The project says AMIs and cloud images are available for AWS, Exoscale, and more.Read 3 Oct 2026 · ipfire.org
Company facts
LinkedIn describes IPFire as a nonprofit computer and network-security organization headquartered in Datteln, Germany, founded in 2004, with a stated size of 51–200 employees.Read 15 Oct 2026 · linkedin.com
Contributor licensing
The contributor agreement assigns unlicensed code contributions a default MIT licence and unlicensed content a CC-BY-SA-based licence.Read 15 Oct 2026 · ipfire.org
DNS security
The DNS service supports DNSSEC validation, caching and encrypted DNS-over-TLS upstream connections.Read 15 Oct 2026 · ipfire.org
Documentation
Official documentation covers installation, WebGUI administration, firewalling, IPS, networking, VPNs, add-ons, hardware and development.Read 15 Oct 2026 · ipfire.org
Firewall
Its Linux Netfilter-based firewall supports network zones, port forwarding, NAT, and stateful packet inspection.Read 3 Oct 2026 · ipfire.org
Firewall engine
Its firewall groups networks, hosts and services into reusable rules and supports rate limiting and logging.Read 15 Oct 2026 · ipfire.org
Installation media
Downloads include bootable CD, USB, flash, Alix and Xen images.Read 15 Oct 2026 · ipfire.org
Intrusion prevention
The built-in IPS performs deep packet inspection against signatures and suspicious-behaviour indicators.Read 15 Oct 2026 · ipfire.org
Licence
IPFire is free software distributed under GPLv3, while included components must use an approved open-source licence.Read 15 Oct 2026 · ipfire.org
Limit: configuration complexity
An AWS Marketplace reviewer says initial setup and configuration can be challenging, despite rating stability highly.Read 15 Oct 2026 · aws.amazon.com
Limit: interface
Reviewers on SourceForge and AWS Marketplace report that the WebGUI can feel impractical or could be substantially improved.Read 15 Oct 2026 · sourceforge.net
Limit: learning curve
A SourceForge reviewer says the unusual zone model creates a learning curve for new users.Read 15 Oct 2026 · sourceforge.net
Limit: missing built-in help
Network World found that the Web interface lacked built-in help, requiring users to rely on the online wiki.Read 15 Oct 2026 · networkworld.com
Limit: small community
TechRadar lists IPFire's relatively small community as a reason to avoid it.Read 15 Oct 2026 · techradar.com
Monitoring
Built-in tools monitor bandwidth, connections, and intrusion attempts through a web interface.Read 3 Oct 2026 · ipfire.org
Network segmentation
The design uses color-coded trust zones such as LAN, Internet, DMZ and guest segments to isolate traffic.Read 15 Oct 2026 · ipfire.org
Network zones
IPFire uses Red, Green, Blue, and Orange zones for roles such as trusted networks, DMZs, and Wi-Fi.Read 3 Oct 2026 · ipfire.org
Notable news
Core Update 203 replaced Unbound with Knot Resolver, added encrypted upstream forwarding and 6GHz Wi-Fi access-point support on July 20, 2026.Read 15 Oct 2026 · ipfire.org
Praise: cost
An AWS Marketplace reviewer reports that free licensing and deployment were affordable and straightforward compared with Cisco and Sophos.Read 15 Oct 2026 · aws.amazon.com
Praise: reliability
SourceForge reviewers describe IPFire as simple, fast, rock solid and reliable, with a helpful active community.Read 15 Oct 2026 · sourceforge.net
Praise: usability
TechRadar selected IPFire as its best overall free Linux firewall and highlighted simple setup, multiple deployment options and Pakfire package management.Read 15 Oct 2026 · techradar.com
Proxy and filtering
IPFire includes a Squid web proxy with optional URL filtering through URLFilter or SquidGuard.Read 3 Oct 2026 · ipfire.org
Public API
IPFire DBL exposes a REST API for domain lookup, list browsing, history, sources, search and report operations.Read 15 Oct 2026 · ipfire.org
Quality of service
Traffic shaping can reserve bandwidth for applications such as VoIP and throttle selected users.Read 15 Oct 2026 · ipfire.org
Rating on AWS Marketplace
4.2 out of 5 from 5 ratings.Read 15 Oct 2026 · aws.amazon.com
Rating on G2
5.0 out of 5 from 1 review.Read 15 Oct 2026 · g2.com
Rating on SourceForge
5.0 out of 5 from 2 reviews.Read 15 Oct 2026 · sourceforge.net
Resource limits
Using proxy, URL filtering, IPS and DNS Firewall together may need 5–6GB RAM, with 8GB recommended for all functions.Read 15 Oct 2026 · ipfire.org
Security updates
Core Update 204 was released on October 14, 2026 to update the operating system and fix a Knot Resolver migration regression.Read 15 Oct 2026 · ipfire.org
Supported architectures
Current hardware guidance lists x86_64 and ARM64, with 32-bit platforms discontinued.Read 15 Oct 2026 · ipfire.org
System requirements
The project recommends at least a 1GHz processor, 1GB RAM, 4GB storage and two network adapters.Read 15 Oct 2026 · ipfire.org
Virtualization guidance
The installation guide permits VirtualBox for testing but advises against virtual-machine deployment in production.Read 15 Oct 2026 · ipfire.org
VPN
IPFire supports IPsec, WireGuard, and OpenVPN for site-to-site or remote access VPNs.Read 3 Oct 2026 · ipfire.org
VPN protocols
IPFire supports IPsec, OpenVPN and WireGuard for site-to-site and remote-access tunnels.Read 15 Oct 2026 · ipfire.org
Web proxy
Its Squid-based proxy can cache content, apply URL category filters and cache operating-system updates.Read 15 Oct 2026 · ipfire.org
Who it serves
The project describes IPFire as suitable for individuals, businesses, and organizations from home offices to global enterprises.Read 3 Oct 2026 · ipfire.org

Plans and prices

IPFire Free Free to download and run · no feature tiers · no licence renewals Read 3 Oct 2026 · ipfire.org
IPFire software Free Free to download and run No feature tiers · No licence renewals Read 15 Oct 2026 · ipfire.org
IPFire Nano Appliance $749, paid once One-time hardware purchase IPFire pre-installed Read 15 Oct 2026 · store.lightningwirelabs.com
IPFire Mini Appliance (US) $979, paid once One-time hardware purchase 8GB memory · 128GB SSD · Four 2.5GbE ports Read 15 Oct 2026 · store.lightningwirelabs.com
IPFire Standard Support $1,099 a year Annual subscription 5 included hours · €170 hourly rate · One-month notice Read 15 Oct 2026 · store.lightningwirelabs.com
IPFire Enterprise Appliance (US) $4,299, paid once One-time hardware purchase 16GB memory · 512GB NVMe · Dual 10GbE Read 15 Oct 2026 · store.lightningwirelabs.com

Every IPFire plan and price →

Strong points and limits

Strong points

  • Firewall supports NAT, port forwarding, and stateful inspection.
  • Supports IPsec, WireGuard, and OpenVPN.
  • Suricata system blocks malicious traffic in real time.
  • Images cover x86_64 and aarch64 deployments.
  • Proxy authentication supports Active Directory, LDAP, and RADIUS.

Limits

  • SSL inspection is not supported.
  • No free trial is listed.
  • The plan has no listed price.

Who it suits

IPFire suits individuals, businesses, and organizations that need a self-hosted firewall for networks ranging from home offices to larger deployments. Its range of image types and VPN options supports varied deployment environments.

Verdict

IPFire specifies its network controls, VPN options, monitoring, and deployment formats, with no feature tiers or licence renewals listed. Readers needing SSL inspection should note that it is not supported.

Where Specifiction places it

Alternatives to IPFireAll alternatives →