Features
For all network device roles.
Routing
BGP (IPv4 and IPv6), OSPF (v2 and v3), RIP and RIPng, policy-based routing.
VPN
IPsec, VTI, VXLAN, L2TPv3, L2TP/IPsec and PPTP servers, tunnel interfaces (GRE, IPIP, SIT), OpenVPN in client, server, or site-to-site modes, WireGuard.
Firewall and NAT
Stateful firewall, zone-based firewall, all types of source and destination NAT (one to one, one to many, many to many).
Network services
DHCP and DHCPv6 server and relay, IPv6 RA, DNS forwarding, TFTP server, web proxy, PPPoE access concentrator, NetFlow/sFlow sensor, QoS.
High availability
VRRP for IPv4 and IPv6, ability to execute custom health checks and transition scripts; ECMP, stateful load balancing.
Fully Open Source
The entire codebase and the build toolchain are available to everyone for auditing, building customized images, and contributing.
Built-in versioning
And archiving make external configuration backup tools redundant.