List of router and firewall distributions


This is a list of router and firewall distributions, which are operating systems designed for use as routers and/or firewalls.
NameStatusTypeArchitectureMin hardware requirementsLicenseCostDescription
Alpine LinuxLinux distributionx86, x86-64, ARMOpen sourceRuns from RAM drive. Original target was small appliances like routers, VPN gateways, or embedded x86 devices. Supports hosting other Linux guest OSes, under LXC control. Uses Busybox and musl.
ClearOSRed Hat Enterprise Linux derivativex86, x86-64GPL and othersFree or paid registrationRouter and firewall for SMBs with network, gateway and server modules accessed via WebConfig. Paid registration for extra online services available, but unneeded to operate product.
Cumulus LinuxDebian derivativeFree with registration, or paid subscription.Open source networking operating system for bare metal switches.
DD-WRTLinux distributionMIPS, x86, ARMFree or paid registration for x86Is embedded firmware, available for variety of wireless routers.
Endian FirewallLinux distributionx86-64Free or hardware versionUTM distribution with routing, firewall, anti-spam and anti-virus for web, FTP and e-mail, OpenVPN, IPsec, captive portal functions, and captive portal. Endian Firewall Community is a complete version for x86. The anti-virus for EFW is Sophos or ClamAV. The intrusion protection is Snort.
fli4lLinux distributionx86, x86-64GPL Router project supporting a large set of layer-1 technologies, layer-3 protocols and functions, and various network-related functions, PPTP. Easily extendable via many added packages.
floppyfwLinux distributionx86Single-floppy router with advanced Linux firewall abilities.
FRRoutingGPL2Free Range Routing or FRRouting or FRR is a network routing software suite running on Unix-like platforms, particularly Linux, Solaris, OpenBSD, FreeBSD, and NetBSD.
GargoyleLinux distributionMIPS, x86-64Free OpenWrt-based, for a range of Broadcom and Atheros chipset based wireless routers.
Global Technology Associates, Inc.FreeBSD derivativex86Free or paidGB-OS firewall and UTM appliance.
IPFireLinux distributionx86, x86-64, ARMRAM : 1 GB
Storage : 4 GB		GPLv3Hardened, open source, mainly performs as router and firewall; a standalone firewall system with a web-based management console for configuring.
Kerio ControlLinuxx86-64ProprietaryPaid hardware or virtual applianceFor router, firewall.
LEAF ProjectLinux distributionx86GPLv2, MITlinux Embedded Appliance Framework; a customizable embedded Linux network appliance used as an Internet gateway, router, firewall, and wireless access point.
LibreCMCLinux-libreMIPSGPLv2Linux-libre distribution for computers with minimal resources, such as the Ben NanoNote, ath9k-based Wi-Fi routers, and other hardware with emphasis on free software. Based on OpenWrt, the project's goal is to aim for compliance with the GNU Free System Distribution Guidelines and ensure that the project continues to meet these requirements set forth by the Free Software Foundation. LibreCMC does not support ac (Wi-Fi 5) or ax (Wi-Fi 6) due to a lack of free chipsets.
m0n0wallFreeBSD derivativex86Development ended 2015-02-15. Small web-administrative router/firewall/VPN distribution. m0n0wall was forked to smallwall.org shortly after Manuel Kasper announced end of development for m0n0wall.
OpenwallLinuxx86, x86-64GNU/*/Linux is a small security-enhanced Linux distribution for servers, appliances, and virtual appliances. Effectively at end of life.
OpenWrtLinuxx86, x86-64, MIPS, ARM, PowerPC, AVR32, CRIS, m68k, SPARC, SuperH, Ubicom32, etc.GPL V2Linux distribution with a focus on CPE-routers and similar embedded devices. Its comprehensive build system is based on a heavily modified uClibc#Buildroot and suitable for embedded systems in general.
OPNsenseFreeBSD derivative, fork of pfSensex86-64FreeBSD LicenseFree or paidForward caching proxy, traffic shaping, intrusion detection, two-factor authentication, IPsec and OpenVPN
pfSenseFreeBSD derivative, fork of m0n0wallx86-64, ARMClosed & Open source licensesFree as PfSense CE or paid on Netgate Devices as Customized distribution tailored for use as a firewall, router, DHCP server, gateway, OpenVPN, IPsec, proxy and anti-virus.
SmoothwallLinux distributionx86Closed & Open source licensesFree or paidRouter/firewall distribution with a web interface and light terminal.
SophosLinux derivativex86-64Free, Paid or hardware/virtual applianceUTM - offers free home use for up to 50 clients. Provides HTTP/S web filtering, spam filtering, antivirus, VPN and Point-to-point links between UTM and other devices via IPSec and SSL-VPN. Formerly Astaro Security Gateway.
Tomato FirmwareLinux distributionBroadcom only: MIPS, ARMGPL V3Free HyperWRT-based, Linux core firmware distribution for many Broadcom-based wireless routers, originally Linksys WRT54G. Ported to ARM-based consumer routers. Now active under the FreshTomato Fork
VyattaLinux distributionx86, x86-64PaidEnterprise-class router, firewall, VPN, intrusion protection and more delivered as a complete network operating system that runs on x86 hardware or in XenServer, VMware or Hyper-V to provide vFirewall, vRouter network virtualizing functions.
VyOSLinux distributionx86, x86-64RAM : 512MB
Storage : 2GB
GPL v2Free "snapshot" builds or self-compiled. Stable builds require subscriptionBased on Vyatta. After Brocade ended development of Vyatta CE in favor of the subscription edition, this project aims to keep open source development going. But has changed to paid subscription model too.
Windows RRASWindows add-in featurex86, x86-64Requires prerequisite Windows OS licenseWindows Routing and Remote Access Service is a feature that can be installed on Windows operating systems, and can perform routing functions, NAT, and implement firewall rules.
Zentyal Ubuntu derivativex86, x86-64Open sourceFree with paid services availableAn open-source router, firewall, and small business server.
ZeroshellLinux distributionx86, ARMGPL V2Free Web-administrative router/firewall live CD with QoS features. Can be Wi-Fi access point with advanced features such as the multiple SSID and 802.1x RADIUS authentication; supports VLAN trunking, bridging, WAN load balancing, and fail-over features.