Difference between revisions of "Main Page"

From securityrouter.org, an OpenBSD-based firewall
Jump to: navigation, search
 
(43 intermediate revisions by 3 users not shown)
Line 1: Line 1:
[http://www.halon.se Halon Security]'s ''security router'' (SR) is a network operating system and software distribution based on OpenBSD[http://en.wikipedia.org/wiki/OpenBSD], with the main differentiator being
+
<div class="toc nomobile">
the single, revision-managed, clear-text [[configuration file]] with [[backend|soft re-configuration]] (atomic commits) editable from [[configure|CLI]] and web[http://sr.demo.halon.se] interfaces, and documented security [[architecture]].
+
{|
 +
| style="text-align:center; white-space:nowrap; color:#000;padding-right: 20px" |
 +
<div style="font-size:162%; border:none; margin:0; padding:.1em; color:#000;">The '''securityrouter.org''' project,</div>
 +
<div style="top:+0.2em; font-size:95%;">an OpenBSD-based firewall and router.</div>
 +
| style="font-size:95%;padding-right:20px" |
 +
* '''Current version'''
 +
* Software [https://github.com/securityrouter/changelog 6.3]
 +
* OpenBSD 6.3
 +
| style="font-size:95%;" |
 +
*  '''[http://dl2.halon.se/vsr/ Download]'''
 +
[http://demo.securityrouter.org/ Live demo]
 +
[[Getting started]]
 +
|}
 +
</div>
  
In general, it's a routing platform with security and VPN features. It aims to be a replacement for proprietary solutions like Cisco IOS[http://en.wikipedia.org/wiki/Cisco_IOS] and Juniper Junos[http://en.wikipedia.org/wiki/Junos]. You can download it for free from http://dl.halon.se/vsr/ and run it from (for example) a USB stick in a x86 computer (anything from the affordable ALIX[http://www.pcengines.ch/alix.htm] to high end systems with 10GE cards), or as a virtual machine. New user are encouraged to read the [[getting started]] page.
+
The ''securityrouter.org'' project is a network operating system and software distribution based on [http://en.wikipedia.org/wiki/OpenBSD OpenBSD], with the main differentiator being the single, revision-managed, clear-text [[configuration file]] with [[backend|soft re-configuration]] (atomic commits) editable from [[configure|CLI]] and [http://demo.securityrouter.org web interface], and documented security [[architecture]].  
  
== Notable articles ==
+
In general, it's a routing platform with security and VPN features. It aims to be a replacement for proprietary solutions like Cisco [http://en.wikipedia.org/wiki/Cisco_IOS IOS] and Juniper [http://en.wikipedia.org/wiki/Junos Junos]. You can [http://dl2.halon.se/vsr/ download] it for free and run it from (for example) a USB stick in a x86 computer (anything from the affordable [http://www.pcengines.ch PC Engines] to high end systems with 10GE cards), or as a virtual machine. New user are encouraged to read the [[getting started]] page.
This informational website is arranged as a wiki[http://en.wikipedia.org/wiki/Wiki]. However, below are a list of the most requested articles for your convenience.  
 
  
=== Management ===
+
== Background ==
* [[Getting started]]
+
[[Image:Front-page.png |thumb|right|300px| Try the web admin on our [http://demo.securityrouter.org demo] system]]
 +
It came to life because we wanted a router/firewall with Unix [[root access]], strict security [[architecture]], [[SOAP|API]]s and a beautiful [[configuration file]] that applied atomically (enabling for example rollbacks without rebooting). The file system is read-only, enabling it to be run from USB thumb drivers or CompactFlash cards. It doesn't need to be "installed", the software can be [[Writing system images|written directly onto]] for example a USB stick. The system is a mix of open (web interface, system scripts, LCD interfaces, patches, [http://en.wikipedia.org/wiki/OpenBSD OpenBSD]) and closed ([[backend]]) source.
 +
 
 +
== Get started ==
 +
* '''[http://dl2.halon.se/vsr/ Download]''' the software
 +
* [[Getting started]] guide
 
** [[Writing system images]]
 
** [[Writing system images]]
 
** [[Supported hardware]]
 
** [[Supported hardware]]
 +
* [[Pricing]] and free-tier information
 +
 +
== Management ==
 
* The [[configuration file]] syntax
 
* The [[configuration file]] syntax
 
*  [[CLI]]
 
*  [[CLI]]
Line 17: Line 37:
 
** Using a [[serial console]]
 
** Using a [[serial console]]
 
* How to [[update]] software
 
* How to [[update]] software
* Performing [[recovery]] if something goes wrong
+
* [[Recovery]] if something goes wrong, and resetting
 
* [[Clustering]]
 
* [[Clustering]]
 
* [[SOAP]] and [[REST]] API
 
* [[SOAP]] and [[REST]] API
  
=== Network ===
+
== Network ==
 
* IP [[addressing]] and [[DHCP]]
 
* IP [[addressing]] and [[DHCP]]
 
* [[Firewalling]]
 
* [[Firewalling]]
Line 34: Line 54:
 
** [[EtherIP]] (layer-2) tunnels
 
** [[EtherIP]] (layer-2) tunnels
 
** [[IPsec]]
 
** [[IPsec]]
* [[Load balancing]]
+
* [[Load balancing]] and [[Load balancing#Internet failover|Internet failover]]
 
* Using an [[PPPoE]] internet connection
 
* Using an [[PPPoE]] internet connection
  
=== System ===
+
== System ==
 
* [[Comparison]] with other products
 
* [[Comparison]] with other products
 
* List of [[features]] and [[architecture]] description
 
* List of [[features]] and [[architecture]] description
 
* [[Performance]] and [[pricing]]
 
* [[Performance]] and [[pricing]]
* Unofficial hacks such as [[DNS cache]], [[dynamic DNS]] and [[UPnP]]
+
* Unofficial hacks such as [[DNS cache]], [[dynamic DNS]], [[UPnP]], [[OpenVPN]], [[IKEv2]], [[web filter]], [[mobile internet]], [[IPdeny]] and [[Pingdom]] probe server access

Latest revision as of 11:52, 28 August 2018

The securityrouter.org project,
an OpenBSD-based firewall and router.
  • Current version
  • Software 6.3
  • OpenBSD 6.3

The securityrouter.org project is a network operating system and software distribution based on OpenBSD, with the main differentiator being the single, revision-managed, clear-text configuration file with soft re-configuration (atomic commits) editable from CLI and web interface, and documented security architecture.

In general, it's a routing platform with security and VPN features. It aims to be a replacement for proprietary solutions like Cisco IOS and Juniper Junos. You can download it for free and run it from (for example) a USB stick in a x86 computer (anything from the affordable PC Engines to high end systems with 10GE cards), or as a virtual machine. New user are encouraged to read the getting started page.

Background

Try the web admin on our demo system

It came to life because we wanted a router/firewall with Unix root access, strict security architecture, APIs and a beautiful configuration file that applied atomically (enabling for example rollbacks without rebooting). The file system is read-only, enabling it to be run from USB thumb drivers or CompactFlash cards. It doesn't need to be "installed", the software can be written directly onto for example a USB stick. The system is a mix of open (web interface, system scripts, LCD interfaces, patches, OpenBSD) and closed (backend) source.

Get started

Management

Network

System