Firezone is a self-hosted VPN server and Linux firewall
- Manage remote access through an intuitive web interface and CLI utility.
- Deploy on your own infrastructure to keep control of your network traffic.
- Built on WireGuard® to be stable, performant, and lightweight.
Follow our deploy guide to install your self-hosted instance of Firezone.
Or, if you're on a supported platform, try our one-line install script:
bash <(curl -Ls https://github.com/firezone/firezone/raw/master/scripts/install.sh)Using Firezone for your team? Take a look at our business tier.
- Fast: Uses WireGuard® to be 3-4 times faster than OpenVPN.
- SSO Integration: Authenticate using any identity provider with an OpenID Connect (OIDC) connector.
- No dependencies: All dependencies are bundled thanks to Chef Omnibus.
- Simple: Takes minutes to set up. Manage via a simple CLI.
- Secure: Runs unprivileged. HTTPS enforced. Encrypted cookies.
- Firewall included: Uses Linux nftables to block unwanted egress traffic.
Firezone is not:
- An inbound firewall
- A tool for creating mesh networks
- A full-featured router
- An IPSec or OpenVPN server
Additional documentation on general usage, troubleshooting, and configuration can be found at https://docs.firezone.dev.
If you're looking for help installing and configuring Firezone, we're happy to help:
- Discussion Forums: ask questions, report bugs, and suggest features
- Community Slack: join discussions, meet other users, and meet the contributors
- Email Us: we're always happy to chat
Package repository hosting is graciously provided by Cloudsmith. Cloudsmith is the only fully hosted, cloud-native, universal package management solution, that enables your organization to create, store and share packages in any format, to any place, with total confidence.
See CONTRIBUTING.md.
See SECURITY.md.
See LICENSE.
WireGuard® is a registered trademark of Jason A. Donenfeld.