ibehren1/fw-gui

By ibehren1

Updated 1 day ago

GUI for visually creating and managing firewall configurations on VyOS firewalls.

Image
Networking
Security
1

7.5K

ibehren1/fw-gui repository overview

"Buy Me A Coffee"

Tell me how you are using FW-GUI! File a Usage Report

Disclaimer

The FW-GUI project is not affiliated with VyOS in any way. It is a wholly separate project to build a community tool that helps to visually build and manage firewall specific configurations for VyOS firewalls. This project is not owned by VyOS.io, or Sentrium S.L., nor does it seek to appear to be an official project, product or partner of the aforementioned.

FW-GUI is developed and maintained by @ibehren1.
Copyright © 2023-2025 Isaac Behrens. All rights reserved.

FW-GUI for Managing Firewall Rule Configurations on VyOS Firewalls

The web-based FW-GUI allows the user to visually:

  • Create and manage group objects
  • Create and manage firewall chains
  • Create and manage filters of chains
  • Create and manage flowtables
  • Support for managing multiple firewall configurations
  • Create and compare (diff) snapshots of firewall configurations
  • Push the created policy configurations to the firewall(s) via SSH connectivity from the web interface
  • Import/export a JSON file of the fw-gui configuration for backup and to move between instances of the GUI

(FW-GUI only manages configurations under 'set firewall' in the command line syntax.)

Diagram

VyOS Release Support

VyOS ReleaseFW-GUI TestingFW-GUI Support (no SLA)
VyOS 1.3.x Equuleus- Untested- No support (do not open issues)
VyOS 1.4.x Sagiitta- Designed for 1.4 and heavily tested in 2024.
- No known issues but no longer tested due to VyOS closed release versions.
- Open GitHub issues for errors.
- Best effort support on old build from July 2024.
VyOS 1.5.x Circinus
(rolling release)
- Minimal testing but no known issues.- Open GitHub issues for errors.
- Issues may be deprioritized due to unstable daily build status.
VyOS 1.5 Stream
(latest release)
- Minimal testing but no known issues.
- Current target version for development and testing.
- Open GitHub issues for errors.
- Current quarterly stream release is where testing/fixes will be targeted.

Docker Compose

(More advanced docker-compose.yml with support for TLS via Nginx Proxy Manager available in the GitHub Readme.

version: '3.7'
services:
  fw-gui:
    image: ibehren1/fw-gui:latest
    container_name: fw-gui
    depends_on:
      - mongodb
    environment:
      - APP_SECRET_KEY='This is the secret key.'
      - DISABLE_REGISTRATION=False
      - SESSION_TIMEOUT=120
      - MONGODB_URI=mongodb
      - BUCKET_NAME=
      - AWS_ACCESS_KEY_ID=
      - AWS_SECRET_ACCESS_KEY=
    ports:
      - 8080:8080/tcp
    restart: unless-stopped
    volumes:
      - data:/opt/fw-gui/data
  mongodb:
    container_name: mongodb
    image: mongo:latest
    restart: always
    volumes:
      - mongo-data:/data/db
      - mongo-config:/data/configdb
volumes:
  data:
  mongo-data:
  mongo-config:

Kubernetes Install via Helm

git clone https://github.com/ibehren1/fw-gui.git
cd fw-gui
helm install fw-gui ./chart/fw-gui-0.1.0.tgz
Breaking Upgrade v1.4.0+

FW-GUI v1.4.0+ uses a separate MongoDB database to store configurations. If you first deployed with a version lower than 1.4.0, you will need to update your deployment to connect to either an external MongoDB database or deploy a second container to host MongoDB. See the GitHub Readme for specific changes required.

Interface Screenshots

image 1 image 2 image 3 image 4

Tag summary

Content type

Image

Digest

sha256:aeb084d19

Size

202.6 MB

Last updated

1 day ago

docker pull ibehren1/fw-gui