Lightning Wire Labs is the company behind the flagship series of IPFire appliances. They are developing reference hardware that has been optimised to work perfectly together with IPFire.

Rack-mount appliances

For deployments in larger companies and authorities, or in schools with hundreds of students accessing the Internet, there are rack-mountable appliances available that get the maximum out of IPFire and being power-efficient at the same time.

SOHO/IoT appliances

For small businesses, home offices or remote offices, a series of smaller appliances is available that bring the full set of features of IPFire in a small form-factor. They are also perfect for IoT applications.

Cloud Appliances

Virtual appliances are also available on Amazon Web Services.

Comparison Chart

IPFire Enterprise Appliance IPFire Business Appliance IPFire Office Appliance IPFire Mini Appliance (2025)
Revision Rev 1.0 Rev 1.0 Rev 1.0 Rev 2.0
System
Processor Series Intel Xeon-D Series Intel Atom Server Series Intel Atom Server Series Intel Celeron Series
Memory 16 GB 8 GB 8 GB 8 GB
Networking
Ethernet Adapters 2x 10G, 2x 1G 4x 1G 4x 1G 4x 2.5G
Firewall Throughput1 Full 10G Full 1G Full 1G Full 2.5G
Intrusion Prevention Throughput4 4.52 GBit/s 1.48 GBit/s 750 MBit/s 1.64 GBit/s
VPN
IPsec
 » AES-256-GCM 2 GBit/s 307 MBit/s 307 MBit/s 1 GBit/s
» AES-256-CBC SHA512 1 GBit/s 400 MBit/s3 400 MBit/s3 640 MBit/s
» AES-256-CBC SHA1 1.2 GBit/s 420 MBit/s3 420 MBit/s3 860 MBit/s
» ChaCha20Poly1305 1.6 GBit/s 260 MBit/s 260 MBit/s 1 GBit/s
WireGuard 2.6 GBit/s 780 MBit/s 780 MBit/s 1.55 GBit/s
Cryptography2
AES 256 GCM (per CPU) ~2.4 GByte/s ~740 MByte/s ~740 MByte/s ~ 2.3 GByte/s
AES 256 CBC ~422 MByte/s ~400 MByte/s3 ~400 MByte/s3 ~730 MByte/s
HWRNG RDRAND & RDSEED RDRAND & RDSEED RDRAND & RDSEED RDRAND & RDSEED
Power Consumption
Typical Load ~34 W ~25 W ~16W ~15W
Full CPU Load ~77 W ~32 W 24W 20 W

Further Reading


  1. per NIC, bidirectional 

  2. openssl speed -evp CIPHER 

  3. Accelerated by Intel Quick Assist Technology 

  4. Tested without offloading, but full scanning only