Jump to content

List of router and firewall distributions

From Wikipedia, the free encyclopedia

This is a list of router and firewall distributions, which are operating systems designed for use as routers and/or firewalls.

NameStatusTypeArchitectureMin hardware requirementsLicenseCostDescription
Alpine LinuxActiveLinux distributionx86, x86-64, ARMOpen sourceFreeRuns from RAM drive. Original target was small appliances like routers, VPN gateways, or embedded x86 devices. Supports hosting other Linux guest OSes, under LXC control. Uses Busybox and musl.
ClearOSDiscontinuedRed Hat Enterprise Linux derivativex86, x86-64GPL and othersFree or paid registrationRouter and firewall for SMBs with network, gateway and server modules accessed via WebConfig. Paid registration for extra online services available, but unneeded to operate product.
Cumulus LinuxDiscontinuedDebian derivative?Free with registration, or paid subscription.Open source networking operating system for bare metal switches.
DD-WRTActiveLinux distributionMIPS, x86, ARM?Free or paid registration for x86Is embedded firmware, available for variety of wireless routers.
Endian FirewallActiveLinux distributionx86-64?Free (PC) or hardware versionUTM distribution with routing, firewall, anti-spam and anti-virus for web, FTP and e-mail, OpenVPN, IPsec, captive portal functions, and captive portal (missing in community version). Endian Firewall Community (EFW) is a complete version for x86. The anti-virus for EFW is Sophos or ClamAV. The intrusion protection is Snort.
fli4lActiveLinux distributionx86, x86-64GPL (Free software)FreeRouter project supporting a large set of layer-1 technologies (e.g., Ethernet LAN, Wireless LAN, ISDN, DSL, UMTS), layer-3 protocols and functions (IPv4, IPv6, stateful packet filter), and various network-related functions (e.g., Bridging, Bonding, VLANs; DNS, DHCPv4, DHCPv6, IPv6 RA; PPP (client+server), PPTP (client+server), Multilink PPP, OpenVPN, 6in4 tunneling; support for various DynDNS clients, NTP time synchronization). Easily extendable via many added packages.
floppyfwUnmaintainedLinux distributionx86?FreeSingle-floppy router with advanced Linux firewall abilities.
FRRoutingActiveGPL2Free Range Routing or FRRouting or FRR is a network routing software suite running on Unix-like platforms, particularly Linux, Solaris, OpenBSD, FreeBSD, and NetBSD.
GargoyleActiveLinux distributionMIPS, x86-64Free OpenWrt-based, for a range of Broadcom and Atheros chipset based wireless routers.
Global Technology Associates, Inc.DiscontinuedFreeBSD derivativex86?Free (limited functions) or paidGB-OS firewall and UTM appliance.
IPFireActiveLinux distributionx86, x86-64, ARMRAM : 1 GB
Storage : 4 GB
GPLv3FreeHardened, open source, mainly performs as router and firewall; a standalone firewall system with a web-based management console for configuring.
Kerio ControlActiveLinuxx86-64ProprietaryPaid hardware or virtual applianceFor router, firewall.
LEAF ProjectActiveLinux distributionx86GPLv2, MITFreelinux Embedded Appliance Framework; a customizable embedded Linux network appliance used as an Internet gateway, router, firewall, and wireless access point.
LibreCMCActive Linux-libre MIPS GPLv2Free Linux-libre distribution for computers with minimal resources, such as the Ben NanoNote, ath9k-based Wi-Fi routers, and other hardware with emphasis on free software. Based on OpenWrt, the project's goal is to aim for compliance with the GNU Free System Distribution Guidelines (GNU FSDG) and ensure that the project continues to meet these requirements set forth by the Free Software Foundation (FSF). LibreCMC does not support ac (Wi-Fi 5) or ax (Wi-Fi 6) due to a lack of free chipsets.
m0n0wallDiscontinuedFreeBSD derivativex86?FreeDevelopment ended 2015-02-15. Small web-administrative router/firewall/VPN (IPsec/PPTP only; no OpenVPN) distribution. m0n0wall was forked to smallwall.org shortly after Manuel Kasper announced end of development for m0n0wall.
OpenwallActiveLinuxx86, x86-64?FreeGNU/*/Linux (or Owl for short) is a small security-enhanced Linux distribution for servers, appliances, and virtual appliances. Effectively at end of life.
OpenWrtActiveLinuxx86, x86-64, MIPS, ARM, PowerPC, AVR32, CRIS, m68k, SPARC, SuperH, Ubicom32, etc.GPL V2FreeLinux distribution with a focus on CPE-routers and similar embedded devices. Its comprehensive build system is based on a heavily modified uClibc#Buildroot and suitable for embedded systems in general.
OPNsenseActiveFreeBSD derivative, fork of pfSensex86-64FreeBSD LicenseFree or paidForward caching proxy, traffic shaping, intrusion detection, two-factor authentication, IPsec and OpenVPN[1]
pfSenseActiveFreeBSD derivative, fork of m0n0wallx86-64, ARMClosed & Open source licensesFree as PfSense CE or paid on Netgate Devices as PfSense PlusCustomized distribution tailored for use as a firewall, router, DHCP server, gateway, OpenVPN, IPsec, proxy and anti-virus (Snort).
SmoothwallActive (Closed Source)Linux distributionx86Closed & Open source licensesFree or paidRouter/firewall distribution with a web interface and light terminal.
SophosActiveLinux derivativex86-64?Free, Paid or hardware/virtual applianceUTM - offers free home use for up to 50 clients. Provides HTTP/S web filtering, spam filtering, antivirus (web and email), VPN (PPTP and a HTML5 agentless VPN) and Point-to-point links between UTM and other devices via IPSec and SSL-VPN. Formerly Astaro Security Gateway.[2]
Tomato FirmwareActiveLinux distributionBroadcom only: MIPS, ARMGPL V3FreeFree HyperWRT-based, Linux core firmware distribution for many Broadcom-based wireless routers, originally Linksys WRT54G. Ported to ARM-based consumer routers.[3] Now active under the FreshTomato Fork
VyattaDiscontinuedLinux distributionx86, x86-64?PaidEnterprise-class router, firewall, VPN, intrusion protection and more delivered as a complete network operating system that runs on x86 hardware or in XenServer, VMware or Hyper-V to provide vFirewall, vRouter network virtualizing functions.
VyOSActiveLinux distributionx86, x86-64RAM : 512MB
Storage : 2GB
(recommended)
GPL v2Free "snapshot" builds or self-compiled. Stable builds require subscriptionBased on Vyatta. After Brocade ended development of Vyatta CE (free edition) in favor of the subscription edition, this project aims to keep open source development going. But has changed to paid subscription model too.
Windows RRASActiveWindows add-in featurex86, x86-64?Requires prerequisite Windows OS licenseWindows Routing and Remote Access Service is a feature that can be installed on Windows (mainly server) operating systems, and can perform routing functions, NAT, and implement firewall rules.
Zentyal (formerly eBox Platform)ActiveUbuntu derivativex86, x86-64Open sourceFree with paid services availableAn open-source router, firewall, and small business server.
ZeroshellDiscontinuedLinux distributionx86, ARMGPL V2Free (contribution required for some graphing functions)Web-administrative router/firewall live CD with QoS features. Can be Wi-Fi access point with advanced features such as the multiple SSID and 802.1x RADIUS authentication; supports VLAN trunking (802.1q), bridging, WAN load balancing, and fail-over features.

See also

[edit]

References

[edit]
  1. "DistroWatch.com: OPNsense". DistroWatch. November 21, 2017.
  2. "Next-Gen Firewall | Network UTM Firewall Appliances | Sophos NGFW". Sophos.com. Retrieved 2015-07-31.
  3. "Tomato for ARM routers". Linksysinfo.org. 28 February 2014. Retrieved 2015-07-31.