
IPFire replaces Unbound with Knot Resolver and introduces support for the Wi-Fi 6 GHz band
IPFire 2.29 Core Update 203 represents a significant upgrade for users of this open source Linux firewall and router distribution. The most substantial change is the replacement of Unbound with Knot Resolver as the system's DNS backend. While Unbound provided reliable name resolution for years, the move to Knot Resolver enables a more modular and scriptable approach. This brings new capabilities such as a DNS firewall, extended support for encrypted upstream forwarding, and deeper integration with IPFire’s overall architecture.
Following this architectural update, wireless networking in IPFire now supports the 6 GHz band. This enhancement allows users to take advantage of advancements in Wi-Fi 6E and Wi-Fi 7 hardware, providing more spectrum and potentially improved wireless performance where supported hardware is present.
Accompanying these major changes, Core Update 203 also delivers a round of routine security fixes and package updates throughout the distribution. These ongoing updates contribute to the stability and security of systems running IPFire.



Comments
I've always appreciated IPFire for being lightweight and reliable, so it's good to see meaningful improvements instead of just routine updates. Replacing Unbound with Knot Resolver seems like a solid step forward, especially with the added flexibility, DNS firewall capabilities, and better support for encrypted DNS. The new 6 GHz Wi-Fi support is also a nice bonus for anyone using Wi-Fi 6E or Wi-Fi 7 hardware. Overall, this feels like a well-rounded update that improves both security and future compatibility.