The popular open source firewall IPFire has just received a new stable version. which introduces significant improvements, updated components, and several modifications to its functionality. IPFire Core Update 196 follows the previous update and focuses on strengthening the platform's security and performance.
With this update, administrators have more tools and greater flexibility. to protect your networks thanks to improved integration of the WireGuard protocol, modernized graphical support, and the addition of new utilities.
IPFire 2.29 Core Update 196 introduces specific improvements to WireGuard
One of the main novelties of Core Update 196 is the reinforcement of support for WireGuardThe status of active WireGuard connections can now be accessed directly from the dashboard in the web interface, allowing for more intuitive and efficient control. Additionally, support for Generic Segmentation Offload (GSO) has been enabled, significantly increasing TCP throughput over WireGuard tunnels. These improvements result from the integration of specific Linux kernel patches, providing much more agile and faster management of VPN communications.
Graphical Console Update: DRM
Another relevant advance is switching to the Linux Direct Rendering Manager (DRM) system on the consoleThis transition enables the automatic use of higher display resolutions on supported hardware, offering sharper text and smoother switching between virtual consoles. This results in improved graphics performance and better support for multi-GPU or embedded systems. It should be noted that DRM is not supported after a clean install, while previously installed systems are not automatically migrated to this new graphics stack.
Security and compatibility improvements in VPNs
In the section VPNs, IPsec and OpenVPN also receive significant improvements.. OpenSSH configuration has been adjusted to match classic algorithms such as Curve25519 in OpenSSH, increasing security compatibility and flexibility. Furthermore, OpenVPN adds the “auth-user-pass” line by generating client configurations, thus facilitating use on clients where additional authentication is required. The distribution also enhances aspects of post-quantum cryptography, allowing new algorithms to be combined with classic practices when the situation requires it.
Redesign and improvements to the web interface
IPFire does not forget the user experience and brings visual improvements to the Pakfire website, its package management system. Also, A barrier to IP blocklist functionality is removed, now allowing empty lists to be downloaded without errors or crashes, increasing management flexibility in specific contexts.
Core package updates and new add-ons
The update brings with it renewed essential packages such as the Linux kernel 6.12.34 LTS, GCC 15, BIND 9.20.10, Boost 1.88.0, CMake 4.0.2, Ruby 3.4.4, and many others. This version jump ensures more secure, faster, and up-to-date operation. In addition, recent add-ons such as ClamAV 1.4.3, Samba 4.22.2, Tor 0.4.8.16, TShark 4.4.7, Git 2.50.0, and highlights the introduction of FORT Validator, an open source RPKI validation utility that extends the system's security capabilities.
Availability and update requirements
IPFire Core Update 196 It is now available for download Both ISO and USB images for x86_64 and ARM64 architectures. Current IPFire users only need to update their installation to access the latest packages, enhancements, and add-ons. For more detailed information, the official release page offers all the details and new features.
A new, consolidated version that strengthens both security and management experience, solidifying IPFire as a solid, up-to-date option for those seeking a robust and adaptable Linux firewall.