IPFire
Open source firewall distribution with one edition and no licence tiers, maintained from Germany
Quick Overview
| Company | Lightning Wire Labs GmbH (IPFire Project) |
|---|---|
| Category | Firewall Software (NGFW) |
| Headquarters | Datteln, Germany |
| Founded | 2004 |
| EU Presence | Yes - Germany (EU) |
| Data Location | Runs on your own hardware |
| Open Source | Open source (licence not verified here) |
| GDPR Compliant | Yes |
| Self-Hosting | Yes, installs on your own hardware |
| Main Features | Stateful packet inspection, network zones (DMZ, guest), WireGuard, OpenVPN, IPsec, web console, traffic graphs, IPFire Location database |
| Pricing | Free software; appliances and support sold in the IPFire store |
| Best For | Small offices, schools and home labs with technical staff |
| Replaces | Fortinet FortiGate, commercial UTM boxes |
Detailed Review
IPFire states it has been developed in the open since 2004 by an independent team, and the legal page lists The IPFire Project c/o Lightning Wire Labs GmbH in Datteln, Germany.
There is only one edition. The site says no feature needs a licence and no update needs a subscription.
Network zones and VPN
The console builds separated zones such as a DMZ and a guest network. VPN options listed are WireGuard, OpenVPN and IPsec.
Support and appliances
The software is free, while appliances and support contracts are sold in a store. That keeps the code open and gives companies a paid route when they need an SLA.
Location database
The project also publishes IPFire Location, a geolocation database it describes as free and open source, used for country-based rules.
Limitations to Consider
There is no vendor certification such as ANSSI or Common Criteria stated on the pages checked, and no central multi-site console is described. Support quality depends on the plan you buy. Buyers needing government approval should look at Stormshield or genua instead.
Who Should Use IPFire
Technical administrators who prefer auditable code, predictable zero licence cost and their own hardware choice.
Pros and Cons
Pros
- Single free edition
- No subscription needed for updates
- WireGuard, OpenVPN and IPsec
- Zone-based network design
- German legal contact
Cons
- No stated government certification
- No central multi-site console described
- Support is a separate purchase
- You maintain hardware yourself
Alternatives to IPFire
Other European firewall software (ngfw) worth comparing before you decide:
Stormshield
France · French network firewalls qualified by ANSSI, for IT and OT
genua
Germany · Two-box high resistance firewall for classified networks
R&S LANCOM Unified Firewalls
Germany · German UTM firewalls from the LANCOM line, hardware or virtual
Securepoint
Germany · German UTM firewalls with an all-inclusive licence per device
See all European firewall software (ngfw) or compare them directly against Fortinet FortiGate on our alternatives page.
Frequently Asked Questions
The software is free; the site says no licence or subscription is required, and sells appliances and support separately.
The legal page names Lightning Wire Labs GmbH in Datteln, Germany.
WireGuard, OpenVPN and IPsec are listed.