Finally, it is here! WireGuard in IPFire. IPFire 2.29 - Core Update 195 adds the long-awaited native support for WireGuard as well as a couple of further improvements and bug and security fixes.
Developing IPFire requires ongoing effort, time, and financial support. Recent features, like WireGuard, have only been possible thanks to the contributions of our community—but this work often doesn’t receive the support it deserves. If you rely on IPFire, please make a donation to help us continue building a secure and reliable firewall for everyone.
WireGuard Is Here
This release introduces support for WireGuard, a modern VPN protocol designed for simplicity and performance. IPFire now includes a fully integrated interface to configure and manage WireGuard tunnels through the web user interface.
WireGuard can be used for both net-to-net and host-to-net (Roadwarrior) VPN connections and is a lightweight alternative to IPsec and OpenVPN. Configuration is straightforward, and the IPFire implementation includes:
- Full integration into the firewall GUI
- Support for multiple peers with individual settings
- QR code display for easy mobile client configuration and configuration file export
- Connection importer for interoperability with other vendors and VPN providers
- Full support for the Intrusion Prevention System and Connection Tracking
WireGuard can be enabled alongside existing VPN services and is intended to offer another option for users who prefer its design and simplicity.
Documentation is available with details on setup and usage.
Misc.
- All blocklists from 3CoreSec have been removed due to them being discontinued
- Stefan Schantl refactored some internal downloading code for the IP blocklists and IPS rulesets so that it can be re-used in other places, too
- Password for the proxy user database will now be stored using the bcrypt hash
- Stephen Cuka contributed some further aesthetic improvements for the Pakfire to increase its usability
- The system will now automatically update its SMART database with information about hard drives.
- Updated packages: coreutils 9.7, btrfs-progs 6.14, diffutils 3.12, fontconfig 2.16.2, gawk 5.3.2, grep 3.12, gzip 1.14, harfbuzz 11.2.0, hwdata 0.394, libcap 2.76, libffi 3.4.8, libgpg-error 1.54, OpenSSH 10.0.p1, OpenSSL 3.5.0, patch 2.8, protobuf 30.2, protobuf-c 1.5.2, Unbound 1.23.0, xfsprogs 6.14.0
Add-Ons
- Updated packages: alsa 1.2.14, monit 5.35.2, nano 8.4, nfs 2.8.3, htop 3.4.1, tshark 4.4.6