Goblin Gate
OverviewFeaturesTourRoadmap
Roadmap

Where the goblin is headed

Built in the open, one release at a time. Anything here can move earlier if people ask for it: say so in Discussions.

Now

The road to 0.1.0

Now

The last beta

  • Daily use as a real home firewall
  • More installs on real hardware
  • Fix what beta testers find: no new features until 0.1.0
  • First stable release: 0.1.0
Next · after 0.1.0

Polish and integrations

  • An OpenAPI description of the whole API
  • A built-in throughput test and measured benchmarks
  • Translations
  • A reverse proxy with Let's Encrypt
  • Home Assistant integration
  • More plugins
Later

Enterprise for free

  • High availability: two boxes with a floating address, state and config sync
  • Dynamic routing: BGP and OSPF
  • Single sign-on (OIDC, LDAP, RADIUS) and role-based admins
  • A captive portal for guest networks
  • 802.1X port and Wi-Fi authentication
  • Site-to-site VPN mesh and central management of many boxes
On the list

For the tinkerers

  • A Terraform provider and an Ansible module
  • Proxmox, ESXi and Docker awareness: VMs and containers as firewall objects
  • A plugin SDK with a template repository
  • More official plugins, like ntopng
Done

What each release added

Every release has its notes and downloads on GitHub.

0.1.0-beta.8A security audit and its fixes: stricter web headers, modern TLS only, stronger login throttling, more sandboxed services. The demo image.
0.1.0-beta.7Goblin Checks, templates, UPS support, ET Pro rules, two update channels (stable and beta).
0.1.0-beta.6Custom nftables rules, a CrowdSec bouncer, scoped API tokens, live events, global search, the phone layout.
0.1.0-beta.5Country rules, allowed sources on port forwards, config history in git, log export, automatic security updates, anti-spoofing, sandboxed services.
0.1.0-beta.4Two-factor login, active sessions, smart queue, dynamic DNS, diagnostics, Wake-on-LAN, DNS rebinding protection.
0.1.0-beta.3Devices, the policy simulator, packet capture, live traffic, the generated config viewer, snapshots, Prometheus metrics.
0.1.0-beta.2Fixes from the first beta testers: clearer errors, safer deletes, IPS tuned to the box's CPU.
0.1.0-beta.1Plugins, Goblin Sentry, G.O.B.L.I.N. and temporary blocks.
0.1.0-alpha.3Importing an old firewall's config, multi-WAN and policy routing, VPN providers with a kill switch, schedules, UPnP, the Updates page, IPv6 in the web UI.
0.1.0-alpha.2Safe signed updates with automatic rollback, IPv6, the System and Notifications pages.
0.1.0-alpha.1The first installable firewall: policies, NAT, DHCP, DNS, IPS, web and DNS filters, threat feeds, WireGuard, Tailscale, dashboards, the web UI, the REST API and the CLI.