Ixolate ships a catalogue of optional services on its installation media. Enabling one installs it from that local catalogue, so it works on an appliance without any uplink. There are no tiers: any administrator can enable or disable any feature.
Enabling a feature
- Open System › Updates & License › Optional Features.
- Find the feature by its description (package names are intentionally not shown).
- Enable. The service’s own menu entries appear after the page reloads, usually under Services or VPN.
- Configure the service from its menu. The relevant guides are under Services and VPN.
Disable removes the package and its menu again. Configuration written by the service stays in the backup and is reused if the feature is enabled later.
Catalogue contents
The catalogue is built from the same list the interface shows; the exact set depends on the media version. Typical entries:
| Area | Features |
|---|---|
| VPN | WireGuard, OpenConnect, Tailscale-style mesh, ZeroTier |
| Proxy and web | Caddy reverse proxy, HAProxy, web filtering |
| Security | CrowdSec, intrusion detection rule feeds |
| Monitoring | SNMP, Zabbix agent, Telegraf, S.M.A.R.T. |
| Routing | FRR (BGP, OSPF, RIP), BFD |
| Housekeeping | Git backup, dynamic DNS, ACME certificates, QEMU guest agent |
Converted boxes
A firewall that was converted in place (see Convert an existing firewall) has no local catalogue. The same page works, but packages are fetched from the subscription repository, so a valid key and outbound HTTPS are required.
Notes
- Features are ordinary packages; they receive updates through Check for updates like everything else.
- Enabling a feature never changes firewall rules by itself. Services that listen on an interface still need a rule.
- If a feature is missing from the list on your media, ask support; the catalogue is refreshed with each media build.