Firezone Headless Client Firezone

Fast: Uses WireGuard® to be 3-4 times faster than OpenVPN.
SSO Integration: Authenticate using any identity provider with an OpenID Connect (OIDC) connector.
Containerized: All dependencies are bundled via Docker.
Simple: Takes minutes to set up. Manage via a simple CLI.
Secure: Runs unprivileged. HTTPS enforced. Encrypted cookies.
Firewall included: Uses Linux nftables to block unwanted egress traffic.

Use this command to install Firezone Headless Client:

winget install --id=Firezone.Client.Headless -e

Headless Client for the Firezone zero-trust access platform.

Firezone Headless Client is a headless client designed to provide seamless integration with the Firezone zero-trust access platform. Built on WireGuard®, it offers fast, secure, and scalable remote access solutions for organizations of all sizes.

Key Features:

WireGuard®-based performance for faster connectivity compared to traditional VPNs.
Cross-platform compatibility, supporting multiple operating systems.
Integration with identity providers like Google Workspace, Okta, and Entra ID for streamlined user authentication.
Zero-trust access policies ensuring granular control over resource access.
End-to-end encryption for secure peer-to-peer communication.
Scalable infrastructure support through load balancing and failover capabilities.

Audience & Benefit: Ideal for IT administrators and organizations seeking to secure remote access without the limitations of legacy VPNs. Firezone Headless Client provides a robust, modern solution that enhances security while maintaining performance and flexibility. It can be installed via winget for easy deployment.

Note: The legacy branch of Firezone tracks the 0.7 release, which is currently EOL status. Please see the README in main for the current version.