Latest Release: IPFire 2.29 - Core Update 200 from March 2 Read More

IPFire_ More Than A Firewall

Your network. Your rules. No strings attached.

Core Capabilities

Security Built into Every Layer

From packet inspection to encrypted tunnels, IPFire delivers enterprise-grade protection through a management console that actually makes sense.

Security by Design

Network segmentation is the foundation of any resilient infrastructure. IPFire creates hardened DMZs, isolated guest networks, and clearly separated trust zones — limiting blast radius before an incident ever occurs.

Industry-Leading Firewall Engine

Our stateful packet inspection engine analyses every flow for emerging threats, performing deep packet inspection in real time. Complex rulesets that would take hours elsewhere take minutes in IPFire's intuitive interface.

Encrypted Connectivity, Everywhere

Seamlessly connect remote workers, global offices, and data-centre infrastructure over site-to-site VPNs and zero-trust tunnels. IPFire speaks every major protocol — WireGuard, OpenVPN, IPsec — out of the box.

Effortless Management

A clean web console puts every feature one click away. Real-time dashboards, detailed traffic graphs, and live threat feeds give you deep visibility without the complexity tax of legacy enterprise tools.

Drop-In Compatibility

Deployed in businesses and educational institutions of all sizes, IPFire integrates seamlessly alongside equipment from any vendor — making it an ideal upgrade path from commercial appliances or end-of-life solutions.

Free as in Freedom

IPFire is free software. Every change is community-reviewed and third-party audited. No surprise price increases. No features held hostage behind a paywall. Join thousands of contributors helping make it better every day.

Learn More About IPFire

Digital Sovereignty

Own Your Security Infrastructure

Too many organisations have drifted into security solutions they can't inspect, can't customize, and can't afford to leave. IPFire changes that — giving you full visibility, complete control, and the freedom to run your network exactly the way you want.

No Vendor Lock-In

Runs on commodity hardware, plays nicely with any existing equipment, and never holds your configuration hostage.

Open & Auditable

Every line of code is publicly visible, community-reviewed, and independently audited on a regular basis.

Predictable Costs

Free to download, free to run, free forever. No surprise price hikes, no feature tiers, no licence renewals.

Appliances and Support

Experience next-level security with our high-performance appliances, crafted to optimize IPFire's capabilities. Whether you're fortifying a business infrastructure or safeguarding your home network, we have the right appliance solution tailored for you.

We are your partners in ensuring continuous network security. Our support solutions keep your systems running smoothly, providing peace of mind in the ever-evolving landscape of security.

Go to Store

The IPFire Ecosystem

Powerful Software. Open to Everyone.

IPFire's reach extends beyond the firewall itself. These community-driven projects are freely available as standalone tools — and deeply integrated when you run IPFire.

Geolocation Database

IPFire Location

The accurate, cryptographically-signed IP geolocation database built for security applications. Unlike legacy GeoIP products, IPFire Location is free, open-source, and ships with ASN data, proxy flags, and anycast detection — giving your firewall rules the precision they need.

Used by Tor, F-Droid, and hundreds of other open-source projects. Built to replace proprietary databases with something the community actually controls.

Block threats by country or autonomous system
Cryptographically verified updates
Designed for nanosecond lookups

Explore IPFire Location →

Domain Blocklist

IPFire DBL

Domain-based threats don't stop at DNS. IPFire DBL (Domain Blocklist) is a community-powered, constantly updated blocklist that closes the gap between DNS filtering and deep packet inspection — blocking malicious, ad, and tracking domains across every protocol, not just port 53.

Combined with IPFire's Suricata-based IPS, DBL stops threats that DNS-only solutions miss entirely — including encrypted DNS bypass and direct-IP connections.

Community-driven curation
Works alongside Suricata IPS
Blocks threats that bypass DNS entirely

Explore IPFire DBL →