LoongFire is port of IPFire for LoongArch CPU
LoongFire is a hardened, versatile, state-of-the-art Open Source firewall based on Linux. Its ease of use, high performance in any scenario and extensibility make it usable for everyone. For a full list of features have a look here.
LoongFire also enable revolutionary kernel eBPF XDP/TC features for dynamic, high speed network processing.
LoongFire 是IPFire移植到龙芯的, 一个基于Linux的安全坚固、多功能、先进的开源防火墙. LoongFire 为普罗大众带来革命创新性的eBPF技术,为家庭用户或任何大小组织企业的网络安全保驾护航. 当前支持的eBPF应用包括:
- XDP DDoS protection Pkgten DDoS attack
- XDP DNS monitor, blocking
- XDP SSL/TLS server name indicator (SNI) monitor, blocking
- Intrusion prevention system (IPS) in XDP mode suricata XDP
- DNS Load balancing in eBPF XSK AF_XDP mode dnsdist AF_XDP
- eBPF based LoxiLB load balancer, Firewall, Proxy, see full features LoxiLB
LoongArch mini PC Home Internet Firewall Demo here
This repository contains the source code of LoongFire which is used to build the whole distribution from scratch, since LoongFire is not based on any other distribution.
https://bpfire.net/download/loongfire
LoongFire support Loongson 3A6000 mini PC (NUC), Loongson server should be supported, but not tested due to lack of hardware for testing.
for example mini PC I use at home.
On LoongArch machine (I used Loongson 3A6000 mini PC running Fedora):
- git clone https://github.com/vincentmli/loongfire.git
- cd loongfire
- wget --mirror --convert-links --adjust-extension --page-requisites --no-parent --cut-dirs=2 -nH --reject "index.html*" --reject "*.gif" https://www.bpfire.net/download/loongfire/cache/
- ./make.sh build