firewalld/firewalld

Health v2 · maintenance only

Adoption not part of the score

1037 stars · 304 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

firewalld is a dynamically managed firewall daemon for Linux that provides zone-based trust levels for network connections and interfaces, with a D-Bus interface for runtime and permanent configuration. It supports IPv4, IPv6, ethernet bridges, and backends like nftables, iptables, and ipset.

Use cases

• manage a dynamic firewall on a linux server
• define trust zones for network interfaces
• switch firewall backend between nftables and iptables
• allow applications to add firewall rules via D-Bus
• separate runtime and permanent firewall configuration
• configure ipv4 and ipv6 firewall rules
• set up ipsets for large rule sets

When to choose

• you run Linux and want zone-based firewall management
• you need a D-Bus API so applications can request firewall changes
• you want runtime changes without losing permanent configuration
• you need support for nftables, iptables, ipset, or ebtables

When to avoid

• you need a simple static ruleset better managed with nft or iptables directly
• you are on a non-Linux platform
• you need a host-based intrusion detection or IDS rather than packet filtering

Facets

service · maturity stable

security networking configuration-management security networking operating-systems self-hosted python firewall nftables iptables ipset zones dbus daemon linux

Member repositories

For agents

markdown · JSON · MCP: product_card(name="firewalld/firewalld")