---
title: "Optional features"
description: "Switch additional services (VPN types, proxies, monitoring, dynamic routing and more) on and off from the feature catalogue that ships with Ixolate."
---

> Documentation Index
> Fetch the complete documentation index at: https://docs.ixolate.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Optional features

Ixolate ships a catalogue of optional services on its installation media. Enabling one installs it from that local catalogue, so it works on an appliance without any uplink. There are no tiers: any administrator can enable or disable any feature.

## Enabling a feature

1. Open **System › Updates & License › Optional Features**.
2. Find the feature by its description (package names are intentionally not shown).
3. **Enable**. The service's own menu entries appear after the page reloads, usually under **Services** or **VPN**.
4. Configure the service from its menu. The relevant guides are under [Services](/services/dhcp) and [VPN](/vpn/overview).

**Disable** removes the package and its menu again. Configuration written by the service stays in the backup and is reused if the feature is enabled later.

## Catalogue contents

The catalogue is built from the same list the interface shows; the exact set depends on the media version. Typical entries:

| Area | Features |
|---|---|
| VPN | WireGuard, OpenConnect, Tailscale-style mesh, ZeroTier |
| Proxy and web | Caddy reverse proxy, HAProxy, web filtering |
| Security | CrowdSec, intrusion detection rule feeds |
| Monitoring | SNMP, Zabbix agent, Telegraf, S.M.A.R.T. |
| Routing | FRR (BGP, OSPF, RIP), BFD |
| Housekeeping | Git backup, dynamic DNS, ACME certificates, QEMU guest agent |

## Converted boxes

A firewall that was converted in place (see [Convert an existing firewall](/get-started/convert-existing)) has no local catalogue. The same page works, but packages are fetched from the subscription repository, so a valid key and outbound HTTPS are required.

## Notes

- Features are ordinary packages; they receive updates through **Check for updates** like everything else.
- Enabling a feature never changes firewall rules by itself. Services that listen on an interface still need a rule.
- If a feature is missing from the list on your media, ask support; the catalogue is refreshed with each media build.

Source: https://docs.ixolate.com/get-started/optional-features/index.mdx