MurOS [BETA]
BETA · v0.9.0-rc
Production-grade features, breaking changes still possible.

Turn any Linux into a firewall.

An open source firewall appliance on Debian 13, managed entirely from a web UI. Stateful filtering, NAT, routing, VPN and high availability, all native in the core. The capabilities of pfSense, OPNsense or FortiGate, free, on any hardware Linux runs on.

  • AGPL-3.0, no subscription
  • Native on Debian 13
  • No CLI required
MurOS 1U rack appliance
Install on a fresh Debian 13:
curl -fsSL https://apt.muros.org/install.sh | sudo bash

What MurOS gives you

Free and open source

AGPL-3.0. No edition, no paywall, no subscription.

Runs on your hardware

Built on Debian Linux: mini-PCs, servers, VMs and modern NICs.

One web UI

Stage, Apply, kernel push, auto-rollback. No CLI required.

Native, tested core

Every service integrated and tested together, upgraded as one.

The web UI

Every page follows the same pattern: stage in DB, click Apply, kernel push happens. Auto-rollback if the new ruleset breaks reachability.

https://muros.lan/
MurOS - Dashboard MurOS - Network interfaces MurOS - Filter rules MurOS - NAT MurOS - Routing MurOS - WireGuard MurOS - High availability MurOS - DHCP server MurOS - DNS server MurOS - Logs
Dashboard Live system and traffic counters: CPU, memory, conntrack and per-interface throughput, refreshed every 3 seconds.

Feature comparison

What MurOS does compared to the incumbents, focused on the core network features most companies actually run.

CapabilityFortiGatepfSenseOPNsenseMurOS
Stateful firewall (nft)yesyesyesyes
NAT (SNAT / DNAT)yesyesyesyes
IPsec site-to-siteyesyesyesyes
WireGuardrecentyesyesyes
HA (VRRP active/passive)yesyesyesyes
Multi-WAN failoveryesyesyesyes
DHCP + recursive DNSyesyesyesyes
IDS / IPS (Suricata)yespackageyesplanned
External auth (LDAP / RADIUS)yesyesyesplanned

Where MurOS says planned, it means native in the core, not a third-party plugin. See what it is for and what is on the roadmap.