Open source firewall projects
Every project in the registry tagged firewall, ranked by real GitHub adoption.
A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.
Open-source backend platform for rapid app development
SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.
The easiest, and most secure way to access and protect all of your infrastructure.
Open-source IDS/IPS, WAF and bot detection for Linux, Windows, Docker and Kubernetes, with a crowdsourced blocklist of malicious IPs.
NPS Enhanced — Lightweight intranet tunneling and reverse proxy with Web UI | NPS 内网穿透 反向代理 增强版 全修 新版 二开
The fast and secure Load Balancer / API Gateway / Reverse Proxy with built-in service discovery, GeoIP, WAF, bot protection and much more - https://pingoo.io
Real-time network monitor + outbound firewall — see & block every connection. Privacy-first, local-first, Rust fleet agent, SIEM exports, 8 languages. / Moniteu
Fast and light-weight API proxy firewall for request and response validation by OpenAPI specs.
Secure, scalable server access management for DevOps
Related tags
Frequently asked questions
How many open source firewall projects are there?
This registry tracks 10 projects tagged firewall, with 231,493 GitHub stars between them. The most-adopted is frp at 110,378 stars.
Are these firewall projects free to use?
Yes — 9 of the 10 carry an explicit open-source licence across 6 distinct licences, so there is no licence fee. Where a project also sells a hosted or enterprise version, the self-hosted path remains free.
Which firewall project should I choose?
The list above is ranked by GitHub stars, but stars measure attention rather than fit. Check three things on each card: the licence (permissive versus copyleft), the language it is written in, and the last-push date — a high-star project that has not been pushed in a year is a liability.
Are these firewall projects still maintained?
8 of the 10 were pushed in the last 90 days, and every card shows its exact last-push date so you can see the rest. Sort your shortlist by that date before committing to a migration.