List of router and firewall distributions

Last updated

This is a list of router and firewall distributions, which are operating systems designed for use as routers and/or firewalls.

NameStatusTypeArchitectureMin hardware requirementsLicenseCostDescription
Alpine Linux Active Linux distribution x86, x86-64, ARM Open source FreeLinux distribution running from a RAM drive. Its original target was small appliances like routers, VPN gateways, or embedded x86 devices. However, it supports hosting other Linux guest OSes under LXC control, making it an attractive hosting solution as well. Uses Busybox and musl.
ClearOS Active Red Hat Enterprise Linux derivative x86, x86-64 GPL and othersFree or paid registrationRouter and firewall for SMBs with network, gateway and server modules accessed through WebConfig. A paid registration for extra online services is available, but not necessary for operation of the product.
Cumulus Linux Active Debian derivative?Free with registration, or paid subscription.Open source Linux based networking operating system for bare metal switches.
DD-WRT Active Linux distribution MIPS, x86, ARM ?Free or paid registration for x86 Embedded Linux firmware distribution available on a variety of wireless routers.
Endian Firewall Active Linux distribution x86-64 ?Free (PC) or hardware version UTM distribution with routing, firewall, anti-spam and anti-virus for web, FTP and e-mail, OpenVPN, IPsec, captive portal functionality, and captive portal (missing in community version). Endian Firewall Community (EFW) is a complete version for x86. The anti-virus for EFW is Sophos or ClamAV. The intrusion protection is Snort.
fli4l Active Linux distribution x86, x86-64 GPL (Free software)FreeLinux-based router project supporting a large set of layer-1 technologies (e.g. Ethernet LAN, Wireless LAN, ISDN, DSL, UMTS), layer-3 protocols and functionality (IPv4, IPv6, stateful packet filter), and various network-related functionality (e.g. Bridging, Bonding, VLANs; DNS, DHCPv4, DHCPv6, IPv6 RA; PPP (client+server), PPTP (client+server), Multilink PPP, OpenVPN, 6in4 tunneling; support for various DynDNS clients, NTP time synchronization). It is easily extendable by a large number of additional packages.
floppyfw Unmaintained Linux distribution x86 ?FreeSingle-floppy router with Linux's advanced firewall capabilities.
FRRouting ActiveGPL2Free Range Routing or FRRouting or FRR is a network routing software suite running on Unix-like platforms, particularly Linux, Solaris, OpenBSD, FreeBSD and NetBSD.
Gargoyle Active Linux distribution MIPS, x86-64 A free OpenWrt-based Linux distribution for a range of Broadcom and Atheros chipset based wireless routers.
Global Technology Associates, Inc. Discontinued FreeBSD derivative x86 ?Free (limited functionality) or paidGB-OS firewall and UTM appliance.
IPFire Active Linux distribution x86, x86-64, ARM RAM : 1 GB
Storage : 4 GB		 GPLv3 FreeIPFire is a hardened Open Source Linux distribution that primarily performs as a Router and a Firewall; a standalone firewall system with a web-based management console for configuration.
Kerio Control ActiveLinux x86-64 ProprietaryPaid hardware or virtual applianceRouter/firewall distribution.
LEAF Project Active Linux distribution x86 ?Freelinux Embedded Appliance Framework; a customizable embedded Linux network appliance used as an Internet gateway, router, firewall, and wireless access point.
LibreCMC Active Linux-libre MIPS GPLv2 Free Linux-libre distribution for computers with minimal resources, such as the Ben NanoNote, ath9k-based Wi-Fi routers, and other hardware with emphasis on free software. Based on OpenWrt, the project's goal is to aim for compliance with the GNU Free System Distribution Guidelines (GNU FSDG) and ensure that the project continues to meet these requirements set forth by the Free Software Foundation (FSF). LibreCMC does not support ac (Wi-Fi 5) or ax (Wi-Fi 6) due to a lack of free chipsets.
m0n0wall Discontinued FreeBSD derivative x86 ?FreeDevelopment ended 2015-02-15. Small web-administrative router/firewall/VPN (IPsec/PPTP only; no OpenVPN) distribution. m0n0wall was forked to smallwall.org shortly after Manuel Kasper announced end of development for m0n0wall.
Openwall ActiveLinux x86, x86-64 ?FreeGNU/*/Linux (or Owl for short) is a small security-enhanced Linux distribution for servers, appliances, and virtual appliances. Effectively at end of life.
OpenWrt ActiveLinux x86, x86-64, MIPS, ARM, PowerPC, AVR32, CRIS, m68k, SPARC, SuperH, Ubicom32, etc. GPL V2 FreeLinux distribution with a focus on CPE-routers and similar embedded devices. Its comprehensive build system is based on a heavily modified uClibc#Buildroot and suitable for embedded systems in general.
OPNsense Active FreeBSD derivative, fork of pfSense x86-64 FreeBSD License Free or paidForward caching proxy, traffic shaping, intrusion detection, two-factor authentication, IPsec and OpenVPN [1]
pfSense Active FreeBSD derivative, fork of m0n0wall x86-64, ARM Closed & Open source licensesFree as PfSense CE or paid on Netgate Devices as PfSense Plus Customized distribution tailored for use as a firewall, router, DHCP server, gateway, OpenVPN, IPsec, proxy and anti-virus (Snort).
Smoothwall Active (Closed Source)Linux distribution x86 Closed & Open source licensesFree or paidRouter/firewall distribution with a web interface and light terminal.
Sophos ActiveLinux derivative x86-64 ?Free, Paid or hardware/virtual appliance UTM - offers free home use for up to 50 clients. Provides HTTP/S web filtering, spam filtering, antivirus (web and email), VPN (PPTP and a HTML5 agentless VPN) and Point-to-point links between UTM and other devices via IPSec and SSL-VPN. Formerly Astaro Security Gateway. [2]
Tomato Firmware Discontinued Linux distribution Broadcom only: MIPS, ARM ?FreeFree HyperWRT-based, Linux core firmware distribution for many Broadcom-based wireless routers, originally Linksys WRT54G. Now being ported to ARM-based consumer routers. [3]
Vyatta Discontinued Linux distribution x86, x86-64 ?PaidEnterprise-class router, firewall, VPN, intrusion protection and more delivered as a complete network operating system that runs on x86 hardware or in XenServer, VMware or Hyper-V to provide vFirewall, vRouter network virtualization functionality.
VyOS Active Linux distribution x86, x86-64 RAM : 512MB
Storage : 2GB
(recommended)		 GPL v2 Free "snapshot" builds or self-compiled. Stable builds require subscriptionBased on Vyatta. After Brocade halted development of Vyatta CE (free edition) in favor of the subscription edition, this project aims to keep open source development going. But have switched to a paid subscription model too.
Windows RRAS ActiveWindows add-in feature x86, x86-64 ?Requires prerequisite Windows OS licenseWindows Routing and Remote Access Service is a feature that can be installed on Windows (mainly server) Operating Systems, and can perform routing functions, NAT, and implement firewall rules.
Zentyal (formerly eBox Platform)Active Ubuntu derivative x86, x86-64 Open sourceFree with paid services availableZentyal is an open-source router/firewall and small business server.
Zeroshell Discontinued Linux distribution x86, ARM GPL V2 Free (contribution required for some graphing functions)Web-administrative router/firewall live CD with QoS features. It is also able to act as a Wi-Fi access point with advanced features such as the multiple SSID and 802.1x RADIUS authentication. Zeroshell supports VLAN trunking (802.1q), bridging, WAN load balancing, and fail-over features.

See also

Related Research Articles

Sophos is a British-based security software and hardware company. It was listed on the London Stock Exchange until it was acquired by Thoma Bravo in February 2020.

m0n0wall was an embedded firewall distribution of FreeBSD, one of the BSD operating system descendants. It provides a small image which can be put on Compact Flash cards as well as on CD-ROMs and hard disks. It runs on a number of embedded platforms and generic PCs. The PC version can be run with just a Live CD and a floppy disk to store configuration data, or on a single Compact Flash card. This eliminates the need for a hard drive, which reduces noise and heat levels and decreases the risk of system failure through elimination of moving parts found in older hard drives.

<span class="mw-page-title-main">Pardus (operating system)</span> Linux distribution

Pardus is a Linux distribution developed with support from the government of Turkey. Pardus' main focus is office-related work including use in Turkish government agencies. Despite that, Pardus ships in several languages. Its ease of use and availability free of charge has spawned numerous communities throughout the world.

<span class="mw-page-title-main">Korora (operating system)</span>

Korora was a remix of the Fedora Linux distribution. Originally Kororaa was a binary installation method for Gentoo Linux which aimed for easy installation of a Gentoo system by using install scripts instead of manual configuration. The name derives from the Māori word kororā – the little penguin.

Vyatta is a software-based virtual router, virtual firewall and VPN product for Internet Protocol networks. A free download of Vyatta has been available since March 2006. The system is a specialized Debian-based Linux distribution with networking applications such as Quagga, OpenVPN, and many others. A standardized management console, similar to Juniper JUNOS or Cisco IOS, in addition to a web-based GUI and traditional Linux system commands, provides configuration of the system and applications. In recent versions of Vyatta, web-based management interface is supplied only in the subscription edition. However, all functionality is available through KVM, serial console or SSH/telnet protocols. The software runs on standard x86-64 servers.

<span class="mw-page-title-main">DistroWatch</span> Website displaying info about free software Unix-like distributions

DistroWatch is a website which provides news, distribution pages hit rankings, and other general information about various Linux distributions as well as other free software/open source Unix-like operating systems. It now contains information on several hundred distributions and a few hundred distributions labeled as active.

<span class="mw-page-title-main">Zeroshell</span> Linux distribution

Zeroshell is a small open-source Linux distribution for servers and embedded systems which aims to provide network services. Its administration relies on a web-based graphical interface; no shell is needed to administer and configure it. Zeroshell is available as Live CD and CompactFlash images, and VMware virtual machines.

<span class="mw-page-title-main">ClearOS</span> Linux distribution

ClearOS is a Linux distribution by ClearFoundation, with network gateway, file, print, mail, and messaging services.

<span class="mw-page-title-main">Android-x86</span> Unofficial port of the Android mobile operating system

Android-x86 was an open source project that made an unofficial porting of the Android mobile operating system developed by the Open Handset Alliance to run on devices powered by x86 processors, rather than RISC-based ARM chips.

paldo (operating system) Linux distribution

paldo is a Linux distribution. It was originally developed by Jürg Billeter and Raffaele Sandrini and released in 2004, mainly under the GNU GPL.

<span class="mw-page-title-main">VyOS</span> Linux distribution

VyOS is an open source network operating system based on Debian.

<span class="mw-page-title-main">Endian Firewall</span> Linux distribution

Endian Firewall is an open-source router, firewall and gateway security Linux distribution developed by the South Tyrolean company Endian. The product is available as either free software, commercial software with guaranteed support services, or as a hardware appliance.

<span class="mw-page-title-main">Void Linux</span> Independent distribution developed entirely by volunteers

Void Linux is an independent Linux distribution that uses the X Binary Package System (XBPS) package manager, which was designed and implemented from scratch, and the runit init system. Excluding binary kernel blobs, a base install is composed entirely of free software.

Subgraph OS was a Debian-based project designed to be resistant to surveillance and interference by sophisticated adversaries over the Internet. It has been mentioned by Edward Snowden as showing future potential.

<span class="mw-page-title-main">Zorin OS</span> Linux distribution based on Ubuntu LTS

Zorin OS is a Linux distribution based on Ubuntu. It uses a GNOME 3 and XFCE 4 desktop environment by default, although the desktop is heavily customized in order to help users transition from Windows and macOS easily. Wine and PlayOnLinux are supported, allowing users to run compatible Windows software, like Microsoft Office. Its creators maintain three free editions of the operating system, and sell a professional edition.

<span class="mw-page-title-main">OPNsense</span> Firewall distribution

OPNsense is an open source, FreeBSD-based firewall and routing software developed by Deciso, a company in the Netherlands that makes hardware and sells support packages for OPNsense. It is a fork of pfSense, which in turn was forked from m0n0wall built on FreeBSD. It was launched in January 2015. When m0n0wall closed down in February 2015 its creator, Manuel Kasper, referred its developer community to OPNsense.

Router software requires updating to stay secure, this comparison provides an overview of third party options.

<span class="mw-page-title-main">IPFire</span> Linux distribution

IPFire is a hardened open source Linux distribution that primarily performs as a router and a firewall; a standalone firewall system with a web-based management console for configuration.

References

  1. ↑ "DistroWatch.com: OPNsense". DistroWatch. November 21, 2017.
  2. ↑ "Next-Gen Firewall | Network UTM Firewall Appliances | Sophos NGFW". Sophos.com. Retrieved 2015-07-31.
  3. ↑ "Tomato for ARM routers". Linksysinfo.org. Retrieved 2015-07-31.
This page is based on this Wikipedia article
Text is available under the CC BY-SA 4.0 license; additional terms may apply.
Images, videos and audio are available under their respective licenses.