VyOS

Firewallvyos

Open source router and firewall operating system whose base chains accept by default and log nothing until a rule says so.

Provider: default
Kind: Firewall
Category: Security
Official docs: https://docs.vyos.io/en/latest/

Properties · 3 set by this component

property	type	values	required	kind default	this component
customChainDefaultAction · component property	enum	allow \| drop	no	drop	inherited
defaultAction	enum	allow \| deny	no	—	▸ allow
intrusionPrevention	boolean	—	no	—	inherited
logging	boolean	—	no	—	▸ false
managed	boolean	—	no	false	▸ false
ruleCount	integer	—	no	—	inherited
statePolicyConfigured · component property	boolean	—	no	false	inherited
stateful	boolean	—	no	—	inherited

Rules that apply · 0

Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.

No rule reads this kind yet. That is a gap, not a guarantee.

Use it in a design

nodes:
  - { id: "vyos", component: "vyos" }

Other Firewall products · 35

Cloud Firewallalibaba-cloud-firewallalibabacloudfirewall Network ACLalibaba-network-aclalibabacloudfirewall ECS Security Groupalibaba-security-groupalibabacloudfirewall Network ACLaws-network-aclawsfirewall AWS Network Firewallaws-network-firewallawsfirewall Amazon Route 53 Resolver DNS Firewallaws-route53-dns-firewallawsfirewall Security groupaws-security-groupawsfirewall Microsoft Entra Internet Accessazure-entra-internet-accessazurefirewall Azure Firewallazure-firewallazurefirewall Network Security Groupazure-network-security-groupazurefirewall Network security perimeterazure-network-security-perimeterazurefirewall Cloudflare DNS Firewallcloudflare-dns-firewallcloudflarefirewall Cloudflare Gatewaycloudflare-gatewaycloudflarefirewall Cloudflare Network Firewallcloudflare-network-firewallcloudflarefirewall Generic firewallfirewallfirewall Firewall appliancefirewall-appliancefirewall Fortinet FortiGatefortigatefirewall MikroTik RouterOSmikrotik-routerosfirewall nftablesnftablesfirewall OPNsenseopnsensefirewall Palo Alto Networks NGFWpalo-alto-ngfwfirewall pfSensepfsensefirewall Snortsnortfirewall Suricatasuricatafirewall DigitalOcean Cloud Firewallsdigitalocean-cloud-firewalldigitaloceanfirewall Cloud IDSgoogle-cloud-idsgcpfirewall Cloud NGFWgoogle-cloud-ngfwgcpfirewall Secure Web Proxygoogle-secure-web-proxygcpfirewall IBM Cloud Hardware Firewallibm-firewallibmfirewall VPC Security Groupibm-security-groupibmfirewall NetworkPolicyk8s-network-policyk8sfirewall Network Firewalloci-network-firewallocifirewall Network Security Groupoci-network-security-groupocifirewall Security Listoci-security-listocifirewall Security Groupoutscale-security-groupoutscalefirewall

Source

1# yaml-language-server: $schema=../../schema/component.schema.json
2# VyOS: open source router and firewall operating system configured from a single CLI.
3# "IPv4 Firewall Configuration" states that with no default-action configured the base chains
4# (input, forward, output) accept, while a user-defined chain defaults to drop, and that logging
5# is off unless a rule sets log. Connection state matching exists but a state policy has to be
6# written explicitly, so no stateful default is claimed here.
7schemaVersion: "1"
8type: "component"
9id: "vyos"
10kind: "firewall"
11provider: "default"
12docs: "https://docs.vyos.io/en/latest/"
13defaults:
14  managed: false
15  defaultAction: "allow"
16  logging: false
17properties:
18  customChainDefaultAction:
19    type: "enum"
20    values: ["allow", "drop"]
21    default: "drop"
22  statePolicyConfigured:
23    type: "boolean"
24    default: false

The same page as markdown, for an agent: /catalogue/components/vyos.md