https://www.firezone.dev/

Deploy self-hosted Firezone via Github 
firezone vpn server and firewall
PricingDeployDocsWe're Hiring!Star us on Github
Star us on Github

The Open Source
VPN Server and Firewall

Firezone is built on WireGuard(r) to be stable, performant, and
lightweight. Deploy and manage secure remote access to your private
resources in minutes.

Get Started
 
GitHub Repo stars
usage of Firezone VPN to add a device

Product Features

fast and stable performance

WireGuard(r) Support

  * Built on top of the WireGuard(r) protocol for performance and
    stability

web interface

Web GUI Management

  * Manage the VPN server and firewall through an intuitive web UI

self hosted

Self-Hosted

  * Host open-source Firezone on your own infrastructure for free

sso authentication

Single Sign On

  * Authenticate using Okta, G Suite, and more

Open source network security built for small teams

Easy to use

Simple to deploy and manage on your own hardware

  * Packaged with Chef Omnibus. No external dependencies
  * Supports  Ubuntu, CentOS, Debian, Fedora, OpenSUSE or any recent
    Linux kernel (4.19+) with nftables and WireGuard(r) support
  * Runs unprivileged. HTTPS enforced. Encrypted cookies

linux distributions logo
WireGuard performance relative to other VPN protocols

Faster and more stable

Leverage the benefits of WireGuard(r)

  * Simpler and leaner than IPsec / IKEv2
  * Up to 4x faster than OpenVPN (benchmark stats)
  * High throughput and low latency
  * Use the native WireGuard(r) clients on iOS, Android, Windows, and
    MacOS

Firewall included

Manage rules for allowed network traffic

  * Uses nftables to block unwanted egress traffic to specific
    IP addresses or CIDRs
  * Only allow the traffic you need and prevent traffic from going to
    unwanted hosts

Firezone firewall allowlist and denylist

Designed for simplicity and security

Get Started

Common Use Cases

Tutorials for common set-ups and configurations using Firezone. If
you have a question about your architecture, please drop by our Slack
Group and say hello 
Whitelisting with static ip diagram

NAT Gateway (Static IP)

Restrict access for a self-hosted web app to a single whitelisted
static IP running Firezone.

See Documentation >

node to multiple node diagram

Reverse Tunnels

Enable an administrator to access a server, container, or machine
that is normally behind a NAT or firewall.

See Documentation >

split tunnel diagram

Split Tunnels

Only traffic to defined IP ranges will be routed through the VPN
server.

See Documentation >

firezone vpn server and firewall
WireGuard(r) is a registered trademark of Jason A. Donenfeld.

Company

  * About
  * Jobs
  * Pricing
  * Open Source
  * Join the Beta

Resources

  * Documentation
  * Support
  * Contact Us

Community

  * Slack
  * Github
  * Forum
  * Twitter
  * LinkedIn