If you manage a home lab, there is a very good chance you already know about Firewalla. They produce some of the fastest-expanding, amateur-friendly prosumer firewalls on the market. I have been running the Firewalla Gold SE in my server rack for nearly five years, and it is rock solid.

However, hardware is getting expensive. The current state of global supply chains and the shortage of RAM chips have forced many hardware companies to rethink their strategies. Firewalla is doing exactly that. They are seriously considering a massive pivot to a Bring Your Own Router (BYOR) or Bring Your Own Hardware software model.

This means we could soon be running Firewalla’s elite routing, VPN controls, and Managed Security Portal (MSP) entirely on third-party budget hardware.

What We Know About Firewalla BYOR

Firewalla recently sent out a feasibility survey to gauge interest, and they were surprised by the massive demand for a software-only solution. When you remember that Firewalla originally started on a Raspberry Pi back in 2016, a return to software makes a lot of sense.

If this moves forward, here is what the initial release will look like:

• Subscription Licensing: The software will be subscription-based.
• x86 Support Only: ARM boards are out, at least for launch. You will need an x86 system.
• Dual Port Limitation: At launch, the software will likely only support dual ports. You will definitely want a managed switch downstream to handle heavy traffic and VLANs.
• Modes: Bridge and Router modes will both be fully supported.
• Virtualization: Virtual Machine (VM) support is entirely dependent on how the community responds to the survey.

Bridging the Gap with Budget Hardware

One of the biggest hurdles to getting into the Firewalla ecosystem is the initial hardware cost. A BYOR model bridges that entry-level gap. Users who want to test the Firewalla interface, dynamic routing, and VPN capabilities can now do so without heavy investment.

Imagine deploying the Firewalla software onto an affordable ZimaBoard 1 or ZimaBoard 2. For an entry-level user, taking an inexpensive dual-port x86 board and throwing a Firewalla subscription on it creates an absolute powerhouse. It allows you to utilize Firewalla’s intuitive mobile app and their robust web-based Managed Security Portal (MSP) for just a minor additional cost.

The Power of the Software

The true value of Firewalla isn’t just the metal box; it’s the intelligence routing the packets. Even on third-party hardware, you will have access to incredibly advanced configurations:

• VPN Controls: Run OpenVPN or WireGuard clients natively. I use target lists to route specific torrent traffic or media consumption through distinct VPN interfaces (like routing Usenet out through an Amsterdam server while keeping standard web traffic local).
• Static Routing: Easily route traffic to specific edge devices. If you use an external hardware VPN like a GL.iNet Brume 3 for heavy WireGuard lifting, Firewalla handles the static routes seamlessly.
• DNS Over HTTPS: No need to configure Pi-hole or AdGuard Home. Firewalla handles DNS encryption and strict ad-blocking directly inside the software at the IP level.
• Target Lists: Consolidate your allow/block rules. Group multiple IP addresses (like every mobile phone in your house) into a single list and apply firewall rules to that group entirely.

Firewalla opening the doors to software-only deployments is a massive win for the networking community. If you want to see this become a reality, make sure to find the Firewalla survey and let them know there is serious demand.

Unmatched Simplicity: The App & MSP Evolution

What really sets Firewalla apart is how they manage to package enterprise-grade features into a UI that an amateur can actually master. Traditionally, this has been driven entirely by their highly intuitive mobile app. With a few taps, you can set up DNS over HTTPS, block specific regions, enforce kid-safe browsing restrictions, or activate strict ad-blocking.

But the real magic for homelabbers is their web-based Managed Security Portal (MSP). While the MSP started out primarily as a read-only monitoring dashboard, Firewalla has been steadily migrating active command and control features straight into the browser.

Now, on the web interface, you can manage complex tasks seamlessly:

• Target Lists: Stop copying and pasting IP addresses. You can group your trusted devices (phones, tablets, servers) into a single “Target List” and write one rule that instantly applies to all of them.
• Policy-Based Routing: Easily send your heavy-lifting torrent or Usenet traffic out via dedicated VPN groups (like NordVPN) while keeping your latency-sensitive smart TVs or gaming consoles on your direct ISP line.
• Failovers and Performance Logs: Monitor ISP stability. If your main fiber line drops, the portal tracks when the network automatically fails over to a backup 4G connection so you never lose internet access.

Firewalla opening the doors to software-only x86 deployments is a massive win for the networking community. It gives us the premium UI we love without the hardware premium. If you want to see this become a reality, make sure to find the Firewalla survey and let them know there is serious demand.

The survey form – https://forms.gle/znJ1RbdSAo3r6QuL6

The Reddit post – https://www.reddit.com/r/firewalla/comments/1tgt9q6/would_you_run_firewalla_software_on_your_own/

The Official website – https://help.firewalla.com/hc/en-us/community/posts/51813529117715-Firewalla-Software-Bring-Your-Own-Hardware?brand_id=114095132753

Buy a Firewalla Device – https://firewalla.com/?ref=KLTechVideos

Support the Channel ☕

If you found this guide helpful and are feeling extra appreciative, consider supporting the channel:

• Donate me a KO-FI: https://www.ko-fi.com/kltechvideos
• Follow on X (Twitter): https://x.com/kltechvideos (Help me beat the algorithm! 😂)
• Subscribe on YT (YouTube): https://www.youtube.com/@kltechvideos
• Checkout the Blog for more cool projects!: https://blog.kltechvideos.co.uk
• Don’t forget to let me know what content you are watching or reading on my socials!