Home

Addons

Firewall

Security that scales with you

Firewall

Firewall protection for every layer of your infrastructure

Chat with an expert

vFirewall

vFirewall

Firewall protection that lives outside your VPS, not inside it.

vFirewall moves firewall protection out of your VPS and onto the infrastructure layer. Instead of configuring and maintaining iptables, ufw, firewalld, or any other firewall software, your traffic is filtered before it ever reaches your server.

This means one less service running on your server, one less thing that can be misconfigured, and one less digital asset to defend.

Key Features

Zero Installation

Traditional firewalls live inside the OS, competing for CPU and memory, and require careful rule management to avoid locking yourself out. vFirewall eliminates that entirely; nothing to install, patch, or break.

Enhanced Security by Default

Filtering happens above the VPS, stopping malicious packets before they arrive. This minimizes the exploitation window even if the VPS OS has vulnerabilities.

Simple, Centralized Management

Manage all firewall rules from myNetShop, our self-service control panel. One interface, regardless of whether your VPS runs Ubuntu, AlmaLinux, Debian, or Windows.

Zero Performance Overhead

Rule enforcement happens at the network level, so your VPS's resources go entirely to your applications, not to filtering traffic.

OS-Agnostic

vFirewall works the same whether your VPS is running Linux or Windows.

Deploy vFirewall for Free

All VPS Pro plans come with vFirewall included - no extra cost, no separate setup.

Explore VPS Plans

Cloud pfSense® Firewall

Full-featured pfSense protection, virtualized and managed in the cloud - without buying or racking any hardware.

Cloud Firewall is a dedicated, virtualized pfSense instance deployed on NetShop's cloud infrastructure, giving you the full pfSense feature set as a managed service: Routing, VPN, intrusion detection, and traffic shaping.

It sits in front of your servers as a single point of control, letting you build the exact network security posture your business needs without deploying and maintaining physical hardware.

Key Features

Advanced Rule Engine

Granular stateful filtering by IP, port, protocol, or schedule, giving you precise control over inbound and outbound traffic.

Built-in VPN Options

Connect remote teams or branch offices securely with IPsec, OpenVPN, or WireGuard tunnels configured directly on your firewall.

Intrusion Detection (IDS) & Prevention (IPS)

Suricata-based IDS/IPS inspects traffic in real time and blocks known attack signatures before they reach your infrastructure.

Multi-WAN & Traffic Shaping

Load-balance or fail over across multiple uplinks and prioritize critical application traffic.

High Availability (HA)

Deploy in a CARP-based failover pair so a single firewall outage never becomes downtime.

Zero Effort, Low-Cost Deployment

Infrastructure-wide protection, centrally managed

View Pricing

Hardware pfSense® Firewall

A physical pfSense appliance dedicated to your infrastructure — full isolation, hardware-accelerated throughput.

For businesses that need dedicated, physical separation of security infrastructure, Hardware Firewall places a standalone appliance running pfSense at the edge of your rack or colocation deployment.

Because it's dedicated hardware rather than a shared or virtualized resource, you get consistent, hardware-accelerated performance and complete isolation from other tenants on the network.

Key Features

Dedicated Appliance

Your own physical firewall, not a shared or virtualized instance. This makes the hardware firewall ideal for compliance-sensitive or high-throughput environments.

Hardware-Accelerated Performance

Purpose-built network hardware handles encryption and packet inspection without the overhead of virtualization.

Full Feature Set

The complete pfSense® toolkit: stateful filtering, VPN, IDS/IPS, traffic shaping, and multi-WAN failover.

Redundancy Options

Deploy appliances in HA pairs for uninterrupted protection during hardware maintenance or failure.

Ideal for Dedicated Infrastructure

Sits directly at the edge of your own rack space or dedicated infrastructure.

Firewall Plans & Pricing

vFirewall

Virtual network firewall for your Virtualizor VPS, with custom security groups for granular traffic control.

Free

CPU Cores

Unlimited

RAM

Unlimited

Disk

Unlimited

Netherlands, Cyprus

Location

Self-managed

Management

Cloud Firewall

Virtual Web Application Firewall deployed on our global Cloud infrastructure

€95.00

/month

1 x Dual-Core

2 GB

RAM

20 GB

Disk

United Kingdom, Cyprus, Malta

Location

€99/month

Management

Order Now

Hardware Firewall

Hardware Web Application Firewall for maximum throughput and security

€125.00

/month

1 x Six-Core

16 GB

RAM

500 GB

Disk

United Kingdom, Netherlands, Cyprus, Malta

Location

€99/month

Management

Order Now

Comparison Table

	vFirewall	Cloud Firewall (pfSense)	Hardware Firewall (pfSense)
Deployment	Infrastructure-layer filtering (no OS footprint)	Virtualized pfSense instance in NetShop's cloud	Dedicated physical appliance at your rack/colo edge
Installation & Maintenance	None - nothing to install or patch	Managed virtual instance, minimal setup	Physical provisioning required; lead time applies
Management	Centralized via myNetShop control panel	pfSense web UI (self-managed or fully managed)	pfSense web UI (self-managed or fully managed)
Performance Overhead on Server	Zero - filtering happens off-server	Low - shared cloud resources	None - dedicated hardware, hardware-accelerated
VPN Support	Not applicable (perimeter filtering only)	Yes - IPsec, OpenVPN, WireGuard	Yes - full pfSense VPN suite
IDS/IPS	No	Yes - Suricata-based	Yes - Suricata-based
Traffic Shaping / Multi-WAN	No	Yes	Yes
High Availability	No	Optional CARP	Optional HA
Tenant Isolation	Shared infrastructure layer, per-VPS rules	Virtualized, logically isolated	Fully dedicated hardware, complete isolation
OS Compatibility	Any OS	Any OS	Any OS