| Basic information | |
|---|---|
 Web interface | |
| Developer | IPFire-Team |
| Source model | Open source (free software) |
| Latest release | Version 2.29 Core Update 199[1] / January 7, 2026; 43 days ago (2026-01-07) |
| Repository | |
| Available in | Multilingual (including English) |
| Package manager | Pakfire |
| Supported platforms | x86-64,AArch64,RISC-V (experimental) |
| Kernel type | Linux kernel[2] |
| Official website | www |
IPFire is ahardened[3]open sourceLinux distribution that primarily performs as arouter and afirewall; a standalone firewall system with a web-based management console for configuration.
IPFire originally started as afork of IPCop[4] (itselfforked fromSmoothwall). Since version 2,[5] IPCop has been rewritten on the basis ofLinux From Scratch. It supports installation of add-ons to addserver services, which can be extended into aSOHO server.[6]In April 2015, the project became a member of theOpen Invention Network.[7]
The basic requirements are at least a 1 GHz 64-bit CPU, 1GB of RAM, and a 4GB hard drive. Twonetwork cards are needed to connect to an Ethernet network.DSL,LTE andWi-Fi (WLAN) are supported, too, with corresponding hardware.[8]
The requiredcomputing power to run IPFire depends on the area of application. Most commonly,x86 systems are being used, butARM devices, such asRaspberry Pi orBanana Pi, are supported, too.[9]IPFire can be used in virtual environments (such asVMware,VirtualBox,QEMU,KVM,Xen, etc.).
The basic setup of IPFire happens over a guided dialogue on the console, and the further administration takes place on the web-based management interface, such as add-ons and additional features.[10]
The project is regularly updated by the development team to maintain the security.[11] Developed as astateful packet inspection (SPI) firewall.[12]
IPFire separates the network into different segments based on their security risk which are organised in colours. Normal clients connected to the LAN are represented as green, the Internet is represented as red, an optionalDMZ is represented as orange and an optional Wireless network is represented as blue. No traffic can flow between segments unless specifically permitted through a firewall rule.[13]
IPFire's package management system, called Pakfire[14] allows to install system updates, which keep security up to date, and additional software packages for customisation to different usage scenarios and needs. TheLinux system is customised for the concrete purpose of a firewall.[15]
The design is modular, making its functionalities extensible through plugins,[16] but the base comes with the following features[17]
The IPFire Project built a freeInternet geolocation database published under theCreative Commons license.[23] It is being used byThe Tor Project to identify the location ofTor nodes and relays.
{{cite web}}: CS1 maint: numeric names: authors list (link)