</h1>
<h4 class="subtitle is-4">
- Secure Your Network with IPFire – The Open-Source Firewall You Can Trust
+ Your network. Your rules. No strings attached.
</h4>
+
+ <div class="buttons">
+ <a class="button is-white" href="/downloads">
+ {{ _("Download Free") }}
+ </a>
+
+ <a class="button is-white is-outlined" href="#learn-more">
+ {{ _("Learn More") }}
+ </a>
+ </div>
</div>
</div>
</section>
- <section class="section">
+ <section class="section" id="learn-more">
<div class="container">
<div class="block">
- <p class="is-size-5">
- <strong>IPFire<span class="has-text-primary">_</span></strong>
- is the world's leading Open Source firewall distribution.
+ <p class="heading has-text-primary">
+ Core Capabilities
+ </p>
+
+ <h3 class="title is-3">
+ Security Built into Every Layer
+ </h3>
- Businesses across the world have chosen to put their trust
- in our versatile, feature-rich solution with its easy-to-use
- web management console. Why not join them today?
+ <p class="is-size-5">
+ From packet inspection to encrypted tunnels, IPFire delivers
+ enterprise-grade protection through a management console that
+ actually makes sense.
</p>
</div>
<div class="columns is-multiline py-5">
- <div class="column is-half">
- <div class="columns is-mobile is-vcentered">
- <div class="column is-narrow has-text-centered">
- <i class="fas fa-shield-halved fa-4x fa-fw"></i>
- </div>
+ <div class="column is-half is-one-third-widescreen p-5">
+ <h5 class="title is-5">
+ <span class="icon">
+ <i class="fas fa-shield-halved"></i>
+ </span>
- <div class="column">
- <p class="title is-5">Security by Design</p>
+ Security by Design
+ </h5>
- <p>
- Network segmentation is the key to a secure network.
- IPFire sets up a DMZ for your local infrastructure or a
- guest network for any visitors separating and protecting
- other parts of your network.
- </p>
- </div>
- </div>
+ <p>
+ Network segmentation is the foundation of any resilient infrastructure.
+ IPFire creates hardened DMZs, isolated guest networks, and clearly
+ separated trust zones — limiting blast radius before an incident
+ ever occurs.
+ </p>
</div>
- <div class="column is-half">
- <div class="columns is-mobile is-vcentered">
- <div class="column is-narrow has-text-centered">
- <i class="fas fa-rocket fa-4x fa-fw"></i>
- </div>
+ <div class="column is-half is-one-third-widescreen p-5">
+ <h5 class="title is-5">
+ <span class="icon">
+ <i class="fa-solid fa-fire"></i>
+ </span>
- <div class="column">
- <p class="title is-5">Industry-Leading Firewall Engine</p>
+ Industry-Leading Firewall Engine
+ </h5>
- <p>
- Our stateful packet inspection firewall engine analyses
- traffic for the latest threats and performs
- deep packet inspection in real time.
- Due to our smart user interface, creating even complex
- setups is quick and straight-forward.
- </p>
- </div>
- </div>
+ <p>
+ Our stateful packet inspection engine analyses every flow for
+ emerging threats, performing deep packet inspection in real time.
+ Complex rulesets that would take hours elsewhere take minutes in
+ IPFire's intuitive interface.
+ </p>
</div>
- <div class="column is-half">
- <div class="columns is-mobile is-vcentered">
- <div class="column is-narrow has-text-centered">
- <i class="fas fa-network-wired fa-4x fa-fw"></i>
- </div>
+ <div class="column is-half is-one-third-widescreen p-5">
+ <h5 class="title is-5">
+ <span class="icon">
+ <i class="fa-solid fa-globe-europe"></i>
+ </span>
- <div class="column">
- <p class="title is-5">We Connect the World</p>
+ Encrypted Connectivity, Everywhere
+ </h5>
- <p>
- We securely connect your employees to their desks at home,
- your global business partners and the infrastructure in your data centre,
- giving you maximum flexibility so that you can focus on what really matters.
- </p>
- </div>
- </div>
+ <p>
+ Seamlessly connect remote workers, global offices, and data-centre
+ infrastructure over site-to-site VPNs and zero-trust tunnels.
+ IPFire speaks every major protocol — WireGuard, OpenVPN, IPsec
+ — out of the box.
+ </p>
</div>
- <div class="column is-half">
- <div class="columns is-mobile is-vcentered">
- <div class="column is-narrow has-text-centered">
- <span class="fas fa-thumbs-up fa-4x fa-fw"></i>
- </div>
+ <div class="column is-half is-one-third-widescreen p-5">
+ <h5 class="title is-5">
+ <span class="icon">
+ <i class="fa-solid fa-terminal"></i>
+ </span>
- <div class="column">
- <p class="title is-5">Easy to Use</p>
+ Effortless Management
+ </h5>
- <p>
- IPFire is managed over a web-based console which
- is powerful, yet easy to use.
- Each feature is just one click away.
- Advanced reporting and real time graphs give you
- detailed insight into your network.
- </p>
- </div>
- </div>
+ <p>
+ A clean web console puts every feature one click away.
+ Real-time dashboards, detailed traffic graphs, and live threat
+ feeds give you deep visibility without the complexity tax of
+ legacy enterprise tools.
+ </p>
</div>
- <div class="column is-half">
- <div class="columns is-mobile is-vcentered">
- <div class="column is-narrow has-text-centered">
- <i class="fa-solid fa-earth-europe fa-4x fa-fw"></i>
- </div>
+ <div class="column is-half is-one-third-widescreen p-5">
+ <h5 class="title is-5">
+ <span class="icon">
+ <i class="fa-solid fa-plug"></i>
+ </span>
- <div class="column">
- <p class="title is-5">Supporting Global Standards</p>
+ Drop-In Compatibility
+ </h5>
- <p>
- Commonly deployed in businesses and educational organisations
- of all sizes, IPFire interoperates perfectly with solutions
- from other vendors making it an ideal drop-in replacement.
- </p>
- </div>
- </div>
+ <p>
+ Deployed in businesses and educational institutions of all sizes,
+ IPFire integrates seamlessly alongside equipment from any vendor —
+ making it an ideal upgrade path from commercial appliances or
+ end-of-life solutions.
+ </p>
</div>
- <div class="column is-half">
- <div class="columns is-mobile is-vcentered">
- <div class="column is-narrow has-text-centered">
- <i class="fas fa-terminal fa-4x fa-fw"></i>
- </div>
+ <div class="column is-half is-one-third-widescreen p-5">
+ <h5 class="title is-5">
+ <span class="icon">
+ <i class="fa-brands fa-osi"></i>
+ </span>
- <div class="column">
- <p class="title is-5">Free As In Freedom</p>
+ Free as in Freedom
+ </h5>
- <p>
- IPFire is free software.
- Our community develops and reviews all changes going
- into the code base and IPFire is regularly audited by
- independent third parties.
- Become a part of the community and help us
- to continue improving IPFire!
- </p>
- </div>
- </div>
+ <p>
+ IPFire is free software. Every change is community-reviewed and
+ third-party audited.
+ No surprise price increases.
+ No features held hostage behind a paywall.
+ Join thousands of contributors helping make it better every day.
+ </p>
</div>
</div>
</div>
</section>
- <section class="hero is-lwl">
+ <section class="hero is-medium is-dark">
+ <div class="hero-body">
+ <div class="container">
+ <div class="card">
+ <div class="card-content">
+ <div class="columns">
+ <div class="column is-half">
+ <p class="heading has-text-primary">
+ Digital Sovereignty
+ </p>
+
+ <h3 class="title is-3 has-text-dark">
+ Own Your Security Infrastructure
+ </h3>
+
+ <p class="is-size-5">
+ Too many organisations have drifted into security solutions they can't inspect,
+ can't customize, and can't afford to leave.
+ IPFire changes that — giving you full visibility, complete control, and the
+ freedom to run your network exactly the way you want.
+ </p>
+ </div>
+
+ <div class="column is-half">
+ <article class="media">
+ <div class="media-left">
+ <span class="icon">
+ <i class="fa-solid fa-lock fa-2x"></i>
+ </span>
+ </div>
+
+ <div class="media-content">
+ <p>
+ <strong>
+ No Vendor Lock-In
+ </strong>
+ </p>
+
+ <p>
+ Runs on commodity hardware, plays nicely with any existing
+ equipment, and never holds your configuration hostage.
+ </p>
+ </div>
+ </article>
+
+ <article class="media">
+ <div class="media-left">
+ <span class="icon">
+ <i class="fa-solid fa-globe-europe fa-2x"></i>
+ </span>
+ </div>
+
+ <div class="media-content">
+ <p>
+ <strong>
+ Open & Auditable
+ </strong>
+ </p>
+
+ <p>
+ Every line of code is publicly visible, community-reviewed,
+ and independently audited on a regular basis.
+ </p>
+ </div>
+ </article>
+
+ <article class="media">
+ <div class="media-left">
+ <span class="icon">
+ <i class="fa-solid fa-bolt fa-2x"></i>
+ </span>
+ </div>
+
+ <div class="media-content">
+ <p>
+ <strong>
+ Predictable Costs
+ </strong>
+ </p>
+
+ <p>
+ Free to download, free to run, free forever.
+ No surprise price hikes, no feature tiers, no licence renewals.
+ </p>
+ </div>
+ </article>
+ </div>
+ </div>
+ </div>
+ </div>
+ </div>
+ </div>
+ </section>
+
+ <section class="hero is-medium is-lwl">
<div class="hero-body">
<div class="container">
<div class="columns is-vcentered">
</div>
</section>
+ <section class="hero is-medium is-light">
+ <div class="hero-body">
+ <div class="container">
+ <div class="block">
+ <p class="heading">
+ The IPFire Ecosystem
+ </p>
+
+ <h3 class="title is-3">
+ Powerful Software. Open to Everyone.
+ </h3>
+
+ <p class="is-size-5">
+ IPFire's reach extends beyond the firewall itself.
+ These community-driven projects are freely available as
+ standalone tools — and deeply integrated when you run IPFire.
+ </p>
+ </div>
+
+ <div class="columns is-vcentered">
+ <div class="column">
+ <div class="card">
+ <div class="card-content">
+ <p class="heading has-text-primary">
+ Geolocation Database
+ </p>
+
+ <h3 class="title is-3 has-text-dark">
+ IPFire Location
+ </h3>
+
+ <div class="content">
+ <p>
+ The accurate, cryptographically-signed IP geolocation database
+ built for security applications.
+ Unlike legacy GeoIP products, IPFire Location is free,
+ open-source, and ships with ASN data, proxy flags, and
+ anycast detection — giving your firewall rules the precision
+ they need.
+ </p>
+
+ <p>
+ Used by Tor, F-Droid, and hundreds of other open-source projects.
+ Built to replace proprietary databases with something the
+ community actually controls.
+ </p>
+
+ <ul>
+ <li>
+ Block threats by country or autonomous system
+ </li>
+
+ <li>
+ Cryptographically verified updates
+ </li>
+
+ <li>
+ Designed for nanosecond lookups
+ </li>
+ </ul>
+ </div>
+
+ <a class="button is-primary" href="/location">
+ Explore IPFire Location →
+ </a>
+ </div>
+ </div>
+ </div>
+
+ <div class="column">
+ <div class="card">
+ <div class="card-content">
+ <p class="heading has-text-primary">
+ Domain Blocklist
+ </p>
+
+ <h3 class="title is-3 has-text-dark">
+ IPFire DBL
+ </h3>
+
+ <div class="content">
+ <p>
+ Domain-based threats don't stop at DNS.
+ IPFire DBL (Domain Blocklist) is a community-powered,
+ constantly updated blocklist that closes the gap
+ between DNS filtering and deep packet inspection
+ — blocking malicious, ad, and tracking domains
+ across every protocol, not just port 53.
+ </p>
+
+ <p>
+ Combined with IPFire's Suricata-based IPS,
+ DBL stops threats that DNS-only solutions miss entirely
+ — including encrypted DNS bypass and direct-IP connections.
+ </p>
+
+ <ul>
+ <li>
+ Community-driven curation
+ </li>
+
+ <li>
+ Works alongside Suricata IPS
+ </li>
+
+ <li>
+ Blocks threats that bypass DNS entirely
+ </li>
+ </ul>
+ </div>
+
+ <a class="button is-primary" href="/dbl">
+ Explore IPFire DBL →
+ </a>
+ </div>
+ </div>
+ </div>
+ </div>
+ </div>
+ </div>
+ </section>
+
<section class="hero">
<div class="hero-body">
<div class="container">
projects / ipfire.org.git / commitdiff
