NetRoute

A Debian 13 routing & firewall operating system — OPNsense-class, routing-first.

IN DEV Routing & BGP · 7 features · Debian 13 · PHP 8.4 / CI4 · Go · BIRD

overview

NetRoute is a network operating system built on Debian 13 (trixie): a custom debootstrap pipeline produces a live ISO, an installer ISO and raw disk images, with a one-line curl | sh installer for existing boxes.

A CodeIgniter 4 WebUI drives a Go control daemon, pathvector-ng renders BGP onto BIRD / FRR / Cairn, and the dataplane runs on the kernel profile or VPP. First boot runs an auto-configuration wizard.

features

  • ▸Interfaces — physical, VLAN/QinQ, LAG/bond, bridge, VXLAN/GRE, PPPoE, CARP/VRRP, DHCP/PPPoE/SLAAC client modes, jumbo frames
  • ▸Routing — static, OSPF, BGP via pathvector-ng → BIRD2/FRR/Cairn; policy routing (VRF, fwmark, PBR); route leaking; RTBH; looking glass
  • ▸Firewall — stateful nftables, aliases, NAT (masquerade, 1:1, port-forward, reflection), schedules, per-rule logging, CAKE/HTB shaping
  • ▸Selectable engines — DHCP: Kea / dnsmasq / isc-dhcp · DNS: Unbound / PowerDNS Recursor / Authoritative / dnsmasq
  • ▸VPN — WireGuard, IPsec/IKEv2 (strongSwan), OpenVPN
  • ▸Monitoring — dashboards, BGFlow flow analytics, SNMP, Prometheus, optional BGPulse RTBH
  • ▸System — RBAC, TOTP 2FA, hash-chained audit, REST API, encrypted backup/restore, firmware channel, HA phase 2

stack

Debian 13 PHP 8.4 / CI4 Go BIRD FRR Cairn VPP nftables MariaDB