List of router and firewall distributions

This is a list of router and firewall distributions, which are operating systems designed for use as routers and/or firewalls.

NameStatusTypeArchitectureMin hardware requirementsLicenseCostDescription
LibreCMCActive GNU/Linux-libre MIPS GPLv2Free GNU/Linux-libre distribution for computers with minimal resources, such as the Ben NanoNote, ath9k-based Wi-Fi routers, and other hardware with emphasis on free software. Based on OpenWrt, the project's goal is to aim for compliance with the GNU Free System Distribution Guidelines (GNU FSDG) and ensure that the project continues to meet these requirements set forth by the Free Software Foundation (FSF). LibreCMC does not support ac (Wi-Fi 5) or ax (Wi-Fi 6) due to a lack of free chipsets.
Alpine LinuxActiveLinux distributionx86, x86-64, ARMOpen sourceFreeLinux distribution running from a RAM drive. Its original target was small appliances like routers, VPN gateways, or embedded x86 devices. However, it supports hosting other Linux guest OSes under LXC control, making it an attractive hosting solution as well. Uses Busybox and musl.
ClearOSActiveRed Hat Enterprise Linux derivativex86, x86-64GPL and othersFree or paid registrationRouter and firewall for SMBs with network, gateway and server modules accessed through WebConfig. A paid registration for extra online services is available, but not necessary for operation of the product.
Cumulus LinuxActiveDebian derivative?Free with registration, or paid subscription.Open source Linux based networking operating system for bare metal switches.
DD-WRTActiveLinux distributionMIPS, x86, ARM?Free or paid registration for x86Embedded Linux firmware distribution available on a variety of wireless routers.
Endian FirewallActiveLinux distributionx86-64?Free (PC) or hardware versionUTM distribution with routing, firewall, anti-spam and anti-virus for web, FTP and e-mail, OpenVPN, IPsec, captive portal functionality, and captive portal (missing in community version). Endian Firewall Community (EFW) is a complete version for x86. The anti-virus for EFW is Sophos or ClamAV. The intrusion protection is Snort.
fli4lActiveLinux distributionx86, x86-64GPL (Free software)FreeLinux-based router project supporting a large set of layer-1 technologies (e.g. Ethernet LAN, Wireless LAN, ISDN, DSL, UMTS), layer-3 protocols and functionality (IPv4, IPv6, stateful packet filter), and various network-related functionality (e.g. Bridging, Bonding, VLANs; DNS, DHCPv4, DHCPv6, IPv6 RA; PPP (client+server), PPTP (client+server), Multilink PPP, OpenVPN, 6in4 tunneling; support for various DynDNS clients, NTP time synchronization). It is easily extendable by a large number of additional packages.
floppyfwUnmaintainedLinux distributionx86?FreeSingle-floppy router with Linux's advanced firewall capabilities.
Global Technology Associates, Inc.DiscontinuedFreeBSD derivativex86?Free (limited functionality) or paidGB-OS firewall and UTM appliance.
IPFireActiveLinux distributionx86, x86-64, ARMRAM : 1 GB
Storage : 4 GB
GPLv3FreeIPFire is a hardened Open Source Linux distribution that primarily performs as a Router and a Firewall; a standalone firewall system with a web-based management console for configuration.
Kerio ControlActiveLinuxx86-64ProprietaryPaid hardware or virtual applianceRouter/firewall distribution.
LEAF ProjectActiveLinux distributionx86?Freelinux Embedded Appliance Framework; a customizable embedded Linux network appliance used as an Internet gateway, router, firewall, and wireless access point.
m0n0wallDiscontinuedFreeBSD derivativex86?FreeDevelopment ended 2015-02-15. Small web-administrative router/firewall/VPN (IPsec/PPTP only; no OpenVPN) distribution. m0n0wall was forked to smallwall.org shortly after Manuel Kasper announced end of development for m0n0wall.
OpenwallActiveLinuxx86, x86-64?FreeGNU/*/Linux (or Owl for short) is a small security-enhanced Linux distribution for servers, appliances, and virtual appliances.
OpenWrtActiveLinuxx86, x86-64, MIPS, ARM, PowerPC, AVR32, CRIS, m68k, SPARC, SuperH, Ubicom32, etc.GPL V2FreeNiche Linux distribution with a focus on CPE-routers and similar embedded devices. Its comprehensive build system is based upon a heavily modified uClibc#Buildroot and suitable for embedded systems in general.
OPNsenseActiveHardenedBSD derivative, fork of pfSensex86-64FreeBSD LicenseFree or paidForward caching proxy, traffic shaping, intrusion detection, two-factor authentication and OpenVPN[1]
pfSenseActiveFreeBSD derivative, fork of m0n0wallx86, x86-64, ARMApacheFree or paidCustomized distribution tailored for use as a firewall, router, DHCP server, gateway, OpenVPN, IPsec, proxy and anti-virus (Snort).
SmoothwallActive (Closed Source)Linux distributionx86Closed & Open source licencesFree or paidRouter/firewall distribution with a web interface and light terminal.
SophosActiveLinux derivativex86-64?Free, Paid or hardware/virtual applianceUTM - offers free home use for up to 50 clients. Provides HTTP/S web filtering, spam filtering, antivirus (web and email), VPN (PPTP and a HTML5 agentless VPN) and Point-to-point links between UTM and other devices via IPSec and SSL-VPN. Formerly Astaro Security Gateway.[2]
Tomato FirmwareActiveLinux distributionBroadcom only: MIPS, ARM?FreeFree HyperWRT-based, Linux core firmware distribution for many Broadcom-based wireless routers, originally Linksys WRT54G. Now being ported to ARM-based consumer routers.[3]
VyattaActiveLinux distributionx86, x86-64?PaidEnterprise-class router, firewall, VPN, intrusion protection and more delivered as a complete network operating system that runs on x86 hardware or in XenServer, VMware or Hyper-V to provide vFirewall, vRouter network virtualization functionality.
VyOSActiveLinux distributionx86, x86-64RAM : 512MB
Storage : 2GB
(recommended)
GPL v2Free "snapshot" builds or self-compiled. Stable builds require subscriptionBased on Vyatta. After Brocade halted development of Vyatta CE (free edition) in favor of the subscription edition, this project aims to keep open source development going. But have switched to a paid subscription model too.
Windows RRASActiveWindows add-in featurex86, x86-64?Requires prerequisite Windows OS licenseWindows Routing and Remote Access Service is a feature that can be installed on Windows (mainly server) Operating Systems, and can perform routing functions, NAT, and implement firewall rules.
Zentyal (formerly eBox Platform)ActiveUbuntu derivativex86, x86-64Open sourceFree with paid services availableZentyal is an open-source router/firewall and small business server.
ZeroshellActiveLinux distributionx86, ARMGPL V2Free (contribution required for some graphing functions)Web-administrative router/firewall live CD with QoS features. It is also able to act as a Wi-Fi access point with advanced features such as the multiple SSID and 802.1x RADIUS authentication. Zeroshell supports VLAN trunking (802.1q), bridging, WAN load balancing, and fail-over features.

See also

References

  1. "DistroWatch.com: OPNsense". DistroWatch. November 21, 2017.
  2. "Next-Gen Firewall | Network UTM Firewall Appliances | Sophos NGFW". Sophos.com. Retrieved 2015-07-31.
  3. "Tomato for ARM routers". Linksysinfo.org. Retrieved 2015-07-31.
This article is issued from Wikipedia. The text is licensed under Creative Commons - Attribution - Sharealike. Additional terms may apply for the media files.