IPFire as primary router/firewall in a rack?

Hey guys,

I just learned about IPFire through an article in the news.

I saw that there are AWS instances of ipfire that can run in a VM, but my question is a little different.

I’m curious if anyone deployed, or even recommends deploying, ipfire in a datacenter environment within a single rack as the main router/firewall? We have about 30 servers in a rack and they push about 750mbps continuously. Most have their own IPs using our own ARIN assigned subnet and a few are on DHCP.

I was thinking of putting ipFire on a Dell R620 server to test run.

So to be more specific, here are some questions:

  1. Does ipfire have basic built in protection against SynFloods and other similar attacks?
  2. Does ipfire support BGP peering (for use with our own public IPs)
  3. Does ipfire support using my own IPs (ex: and DHCP?


1 Like

Did you check https://wiki.ipfire.org/hardware/lightningwirelabs/enterprise ?

You could install IPFire on any small PC and put that LAN-side of your existing router/firewall, if you want to explore its logs and see what it is blocking


o hell ya!

  1. im not aware of the SynFlood protection but i have seen it blocked befor in my IDS logs
  2. i think it does support something like BGP peering but ive never used it
  3. it should. external ips (inbound)can be set statically or via DHCP and i do believe you can set an internal ip address outside 192.168 but whenever i setup dhcp i skip the 192.168.0 netblock because some set of ips are used internally by ipfire


  1. Does ipfire have basic built in protection against SynFloods and other similar attacks?

Yes, the Kernel handles SYN flooding by sending SYN cookies.

Thanks, and best regards,
Peter Müller

Yes, it supports BGP peering with either frr or bird. I like to use the latter one.

You can choose whatever IP address you like :slight_smile:

For such a large installation, dedicated hardware is - as almost always - a must. The IPFire Enterprise Appliance is a good choice for performance and saves some energy at the same time.

Awesome, thanks for the responses guys.

In regards to the IPFire Enterprise Appliance, I can’t seem any link anywhere (including on lightingwire labs) on pricing and how to purchase the appliance. Any tips?