JFirePack Firewall

JFirePack Firewall is is a network operating system based on VyOS, which supports most of modern routing protocols and network security features.

JFirePack Firewall runs equally well on both bare metal hardware and inside virtual machines, including common cloud platforms.


JFirePack Firewall is a GNU/Linux-based operating system which ties many popular open source applications under a single, unified command line interface.

JFirePack Firewall offers features that are inherent to the traditional hardware routers: commit and rollback functionality, built-in configuration versioning and archiving, scripting APIs.

At the same time it provides VPN and firewalls options.

One of the most popular use cases for JFirePack Firewall is connecting an existing enterprise network to the cloud infrastructure or connecting networks that hosted at different cloud platform vendors to each other.


  • Open and community-driven nature of development
  • Enterprise- and service provider networks oriented
  • Adaptable for any network – from a small office to a data center rack
  • Continues to be actively developed and improved by the VyOS community

Services Offered

  • Commercial support
  • Development services on demand
  • Private deployments design and configuration for small and medium-sized businesses (ISPs, MSPs and Enterprise users)
  • Trainings and workshops

Key Features

  • Wide range of supported VPN technologies: GRE, IPSec, IPSec VTI, OpenVPN, WireGuard
  • API for working with configuration from shell, Python, and Perl scripts
  • Physical and virtual hardware supported equally
  • Command line interface in the style of JunOS
  • Wide range of COTS hardware and virtual platforms supported
  • One-step image build process: any users can build custom images for their needs
  • Support BGP, OSPF routing protocols
  • QoS for traffic prioritization and shaping
  • Safe and easy image-based upgrades

How You Can Use JFirePack Firewall

(SMB Edge Router)

This image has an empty alt attribute; its file name is jpack1.png

It can serve as an SMB Edge Router to ensure more stable and configurable network infrastructure. JFirePack supports Network Address Translation (NAT), Dynamic Host Configuration Protocol Server functionality (DHCP), Virtual Router Redundancy Protocol (VRRP) for increasing availability of routing paths via default gateway.

(Border Router)

This image has an empty alt attribute; its file name is jpack2.png

JFirePack Firewall can be used as an Enterprise Border Router due to the support of Border Gateway Protocol (BGP) – the most scalable among all routing protocols. For this case JFirePack can serve as an exterior and interior BGP-peer, providing high level of network stability and availability.

(VPN Gateway)

This image has an empty alt attribute; its file name is jpack3.png

JFirePack Firewall offers route-based IP Security (IPsec) VPNs: IPSec/ GRE, IPSec VTI, Dynamic Multipoint VPN (DMVPN) and OpenVPN. It allows you to connect distributed sites directly to the cloud deployment enabling your users and servers to connect to a remote private network through the encrypted channel over Internet. JFirePack Firewall can act as a L2TPv3 router and provide Layer 2 stretching across the distributed sites.

(VPN Remote Access Server)

This image has an empty alt attribute; its file name is jpack4.png

JFirePack Firewall can be easily configured as a remote access VPN server. For this tasks you can use common L2TP over IPSec as it has native client for most current operating systems. Another option is to choose OpenVPN solution which is integrated into JFirePack Firewall. Applying firewall configuration enhances the abilities and allows you to provide granular network access.