• Manage remote access through an intuitive web interface and CLI utility.
• Deploy on your own infrastructure to keep control of your network traffic.
• Built on WireGuard® to be stable, performant, and lightweight.

Follow our deploy guide to install your self-hosted instance of Firezone.

Or, if you're on a supported platform, try our one-line install script:

sudo -E bash -c "$(curl -fsSL https://github.com/firezone/firezone/raw/master/scripts/install.sh)"

Using Firezone for your team? Take a look at our business tier.

• Fast: Uses WireGuard® to be 3-4 times faster than OpenVPN.
• SSO Integration: Authenticate using any identity provider with an OpenID Connect (OIDC) connector.
• No dependencies: All dependencies are bundled thanks to Chef Omnibus.
• Simple: Takes minutes to set up. Manage via a simple CLI.
• Secure: Runs unprivileged. HTTPS enforced. Encrypted cookies.
• Firewall included: Uses Linux nftables to block unwanted egress traffic.

Firezone is not:

• An inbound firewall
• A tool for creating mesh networks
• A full-featured router
• An IPSec or OpenVPN server

Additional documentation on general usage, troubleshooting, and configuration can be found at https://docs.firezone.dev.

If you're looking for help installing and configuring Firezone, we're happy to help:

• Discussion Forums: ask questions, report bugs, and suggest features
• Community Slack: join discussions, meet other users, and meet the contributors
• Email Us: we're always happy to chat

Package repository hosting is graciously provided by Cloudsmith. Cloudsmith is the only fully hosted, cloud-native, universal package management solution, that enables your organization to create, store and share packages in any format, to any place, with total confidence.

See CONTRIBUTING.md.

See SECURITY.md.

See LICENSE.

WireGuard® is a registered trademark of Jason A. Donenfeld.