{ "componentChunkName": "component---src-templates-issues-tsx", "path": "/issues/167", "result": {"data":{"issuesJson":{"id":"087c998c-7d08-52ea-9b4f-da5c240f78a6","title":"firezone/firezone: 一个开源平台，可安全地管理各种规模组织的远程访问。与大多数 VPN 不同，Firezone 采用细粒度、最小权限的访问管理方法。","number":167,"bodyHTML":"

\n

\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n

Repos	firezone/firezone
Views	$\"views\"$
Stars	$\"stars\"$
Forks	$\"forks\"$
License	$\"license\"$
UpdatedAt	$\"last-commit\"$
CreatedAt	$\"create-at\"$

\n\n

\n

\n

\n

\n \n \n $\"firezone$ \n \n

\n

\n A modern alternative to legacy VPNs.\n

\n

\n

\n \n \n \n \n $\"firezone$ \n \n $\"firezone\"$ \n \n $\"Coverage$ \n \n $\"GitHub$ \n $\"GitHub$ \n \n $\"Cloudsmith\"$ \n \n \n $\"follow$ \n \n

\n

\n

Overview

\n

Firezone is an open source
\nplatform to securely manage remote access for any-sized organization. Unlike
\nmost VPNs, Firezone takes a granular, least-privileged approach to access
\nmanagement with group-based policies that control access to individual
\napplications, entire subnets, and everything in between.

\n

\n $\"architecture\"$ \n

\n\n

Features

\n

Firezone is:

\n

Fast: Built on WireGuard® to be
\n3-4 times faster than OpenVPN.
Scalable: Deploy two or more gateways for automatic load balancing and
\nfailover.
Private: Peer-to-peer, end-to-end encrypted tunnels prevent packets from
\nrouting through our infrastructure.
Secure: Zero attack surface thanks to Firezone's holepunching tech which
\nestablishes tunnels on-the-fly at the time of access.
Open: Our entire product is open-source, allowing anyone to audit the
\ncodebase.
Flexible: Authenticate users via email, Google Workspace, Okta, Entra ID,
\nor OIDC and sync users and groups automatically.
Simple: Deploy gateways and configure access in minutes with a snappy
\nadmin UI.

\n

Firezone is not:

\n

A tool for creating bi-directional mesh networks
A full-featured router or firewall
An IPSec or OpenVPN server

\n

Contents of this repository

\n

This is a monorepo containing the full Firezone product, marketing website, and
\nproduct documentation, organized as follows:

\n

elixir: Control plane and internal Elixir libraries:\n
- elixir/apps/web: Admin UI
- elixir/apps/api: API for Clients, Relays and Gateways.
\n
rust/: Data plane and internal Rust libraries:\n
- rust/gateway: Gateway - Tunnel server based on WireGuard
  \nand deployed to your infrastructure.
- rust/relay: Relay - STUN/TURN server to facilitate
  \nholepunching.
- rust/headless-client: Cross-platform CLI client.
- rust/gui-client: Cross-platform GUI client.
\n
swift/: macOS / iOS clients.
kotlin/: Android / ChromeOS clients.
website/: Marketing website and product documentation.
terraform/: Terraform files for various example deployments.\n
- terraform/examples/google-cloud/nat-gateway:
  \nExample Terraform configuration for deploying a cluster of Firezone Gateways
  \nbehind a NAT gateway on GCP with a single egress IP.
- terraform/modules/google-cloud/apps/gateway-region-instance-group:
  \nProduction-ready Terraform module for deploying regional Firezone Gateways
  \nto Google Cloud Compute using Regional Instance Groups.
\n

\n

Quickstart

\n

The quickest way to get started with Firezone is to sign up for an account at
\nhttps://app.firezone.dev/sign_up.

\n

Once you've signed up, follow the instructions in the welcome email to get
\nstarted.

\n

Frequently asked questions (FAQ)

\n

Can I self-host Firezone?

\n

Our license won't stop you from self-hosting the entire Firezone
\nproduct top to bottom, but our internal APIs are changing rapidly so we can't
\nmeaningfully support self-hosting Firezone in production at this time.

\n

If you're feeling especially adventurous and want to self-host Firezone for
\neducational or hobby purposes, follow the instructions to spin up a
\nlocal development environment in CONTRIBUTING.md.

\n

The latest published clients (on App Stores and on
\nreleases) are only guaranteed
\nto work with the managed version of Firezone and may not work with a self-hosted
\nportal built from this repository. This is because Apple and Google can
\nsometimes delay updates to their app stores, and so the latest published version
\nmay not be compatible with the tip of main from this repository.

\n

Therefore, if you're experimenting with self-hosting Firezone, you will probably
\nwant to use clients you build and distribute yourself as well.

\n

See the READMEs in the following directories for more information on building
\neach client:

\n

macOS / iOS: swift/apple
Android / ChromeOS: kotlin/android
Windows / Linux: rust/gui-client

\n

How long will 0.7 be supported until?

\n

Firezone 0.7 is currently end-of-life and has stopped receiving updates as of
\nJanuary 31st, 2024. It will continue to be available indefinitely from the
\nlegacy branch of this repo under the Apache 2.0 license.

\n

How much does it cost?

\n

We offer flexible per-seat monthly and annual plans for the cloud-managed
\nversion of Firezone, with optional invoicing for larger organizations. See our
\npricing page for more
\ndetails.

\n

Those experimenting with self-hosting can use Firezone for free without feature
\nor seat limitations, but we can't provide support for self-hosted installations
\nat this time.

\n

Documentation

\n

Additional documentation on general usage, troubleshooting, and configuration
\ncan be found at https://www.firezone.dev/kb.

\n

Get Help

\n

If you're looking for help installing, configuring, or using Firezone, check our
\ncommunity support options:

\n

Discussion Forums: Ask
\nquestions, report bugs, and suggest features.
Join our Discord Server: Join live
\ndiscussions, meet other users, and chat with the Firezone team.
Open a PR: Contribute a bugfix
\nor make a contribution to Firezone.

\n

If you need help deploying or maintaining Firezone for your business, consider
\ncontacting our sales team
\nto speak with a Firezone expert.

\n

See all support options on our main support page.

\n

Star History

\n

\n

Developing and Contributing

\n

See CONTRIBUTING.md.

\n

Security

\n

See SECURITY.md.

\n

License

\n

Portions of this software are licensed as follows:

\n

All content residing under the \"elixir/\" directory of this repository, if that
\ndirectory exists, is licensed under the \"Elastic License 2.0\" license defined
\nin \"elixir/LICENSE\".
All third party components incorporated into the Firezone Software are
\nlicensed under the original license provided by the owner of the applicable
\ncomponent.
Content outside of the above mentioned directories or restrictions above is
\navailable under the \"Apache 2.0 License\" license as defined in \"LICENSE\".

\n

WireGuard® is a registered trademark of Jason A. Donenfeld.

","updatedAt":"2025-05-21T15:57:43Z","upvoteCount":null,"author":{"login":"eryajf","avatarUrl":"https://avatars.githubusercontent.com/u/33259379?u=e4a4090a38ac2473aaed4ef9945233636776c6c3&v=4","url":"https://github.com/eryajf"},"category":null,"labels":{"edges":[{"node":{"name":"更多","color":"25B472"}},{"node":{"name":"VPN","color":"da3863"}},{"node":{"name":"firezone","color":"a7af5a"}}]},"comments":{"edges":[]}}},"pageContext":{"number":167,"previous":{"title":"rock-app/fabu.love: 应用发布平台类似 fir.im/蒲公英, 支持检查更新, 灰度发布等","number":166},"next":{"title":"wansenai/flow: 开箱即用的流程引擎一体化解决方案","number":168}}}, "staticQueryHashes": ["151096407","2861350382"]}