Search Results for "netfilter-layer7"
Sort By:
Showing 80 open source projects for "netfilter-layer7"
View related business solutions-
Outbound sales softwareAdversus is an outbound dialing solution that helps you streamline your call strategies, automate manual processes, and provide valuable insights to improve your outbound workflows and efficiency.
-
The full-stack observability platform that protects your dataLayer, tags and conversion dataCode-Cube.io detects issues instantly, alerts you in real time and helps you resolve them fast. No manual QA. No unreliable data. Just data you can trust and act on.
-
1
loxilb
eBPF based cloud-native load-balancer
...Kubernetes defines many service constructs like cluster-ip, node-port, load-balancer etc for pod-to-pod, pod-to-service, and service from outside communication. All these services are provided by load balancers/proxies operating at Layer4/Layer7. Since Kubernetes's is highly modular, these services can be provided by different software modules. For example, kube-proxy is used by default to provide cluster-ip and node-port services. -
2
netsniff-ng
A Swiss army knife for your daily Linux network plumbing
netsniff-ng is a free Linux networking toolkit, a Swiss army knife for your daily Linux network plumbing if you will. Its gain of performance is reached by zero-copy mechanisms, so that on packet reception and transmission the kernel does not need to copy packets from kernel space to user space and vice versa. Our toolkit can be used for network development and analysis, debugging, auditing, or network reconnaissance. -
3
Web-based Firewall Log Analyzer
Firewall log analyzer
Flexible web-based firewall log analyzer, supporting netfilter and ipfilter, ipfw, ipchains, cisco routers and Windows XP system logs, and mysql or postgresql database logs using the iptables ULOG or NFLOG target of netfilter others mapped to the ulogd format with a view. Fully supports IPv6 for database logs, and netfilter and ipfilter system file logs. Also supports Maxmind's GeoIP version 2 location databases. -
4
trafmon
Traffic Monitor for Linux based systems
trafmon (Traffic Monitor) gathers historical traffic statistics for Linux based systems. Data is taken from Netfilter/IPtables incoming and outgoing data packets stats. All the IP based information is organized and structured in a database (MySQL or SQlite3) in order to be seen into a web interface. -
Agentic AI SRE built for Engineering and DevOps teams.NeuBird AI's agentic AI SRE delivers autonomous incident resolution, helping team cut MTTR up to 90% and reclaim engineering hours lost to troubleshooting.
-
5
FWiptables. Firewall With iptables.
iptables bash script in only file wizard
The fwiptables is a one-file WIZARD, for IPTABLES with COMMAND-LINE, with CLI-MENU, with GUI-MENU, with GUI-ROLL, with GUI-SHELL. fwiptables develop with Purpose Educational Since 2020, developing code Since 2024, cleaning code Since 2025, fixing code Browse Wiki: https://sourceforge.net/p/f-iptables/wiki/browse_pages/ Anonymouse Ticket: https://sourceforge.net/p/f-iptables/tickets/ -
6
HiddenWall
hidden firewall, custom firewall in kernel
HiddenWall is a Linux kernel module generator for custom rules with netfilter. (block ports, Hidden mode, rootkit functions etc). The motivation: on bad situation, attacker can put your iptables/ufw to fall... but if you have HiddenWall, the attacker will not find the hidden kernel module that block external access, because have a hook to netfilter on kernel land(think like a second layer for firewall). -
7
blocklist
blocklists for openbsd,freebsd,linux,iptables,bsd pf,pf,ipfilter
blocklists for openbsd,freebsd,linux,iptables,bsd pf,pf,ipfilter,pfsense,opnsense -
8
NetFlow/IPFIX iptables module
NetFlow iptables module for Linux kernel
ipt-netflow is high performance NetFlow exporting module for Linux kernel (up to 4.15). Designed for Linux router in high-throughput network. This is netfilter/iptables module adding support for -j NETFLOW target. Designed to work efficiently w/o conntrack. Supporting NetFlow protocols v5, v9, and IPFIX. Accounting for IPv4, IPv6 traffic, and NAT translation events (NEL). Additional options is SNMP-index translation rules, aggregation rules, Ethernet type, MPLS, VLAN, and MAC addresses exporting. -
9
ipset_list
ipset set listing wrapper script
ipset_list is a wrapper script for listing sets of the netfilter ipset program. It allows you to match and display sets, headers, and elements in various ways. The result can be saved as shell script and in ipset save, or xml format. -
Iris Powered By Generali - Iris puts your customer in control of their identity.Iris Identity Protection API sends identity monitoring and alerts data into your existing digital environment – an ideal solution for businesses that are looking to offer their customers identity protection services without having to build a new product or app from scratch.
-
10
Please see http://firehol.org/ for up-to-date releases and information. FireHOL is a stateful iptables packet filtering firewall configurator. It is abstracted, extensible, easy and powerful. It can handle any kind of firewall, but most importantly, it gives you the means to configure it, the same way you think of it.
-
11
upnpry
upnp port opener
upnpry is an upnp port opener for linux. It intercepts upnp port opening requests to routers and opens the corresponding ports on the linux box. -
12
NetFireCoRE
Network Firewall Linux Kernel Module with Conflict Resolution Engine
We implement an open source conflict resolution framework that consists of a user-space C application that automatically resolves firewall rules anomalies, and b) a generic tree (called policy tree), implemented as a Linux kernel module which maintains the resolved firewall rules and enables the necessary hooks to netfilter for matching incoming (or outgoing) network packets. Tree-based data structures offer improved efficiency compared to traditional access control lists (e.g. iptables or nftable maps), especially for large systems with a huge number of rules. Preliminary analysis from our implementation on ARM-based embedded systems examines efficiency and scalability of our framework. ... -
13
netfilter dhcp extension
modules and user space library concerning netfilter dhcp extension
-
14
authfail is a tool for adding IP addresses of those who attempt to log into a system, causing authentication failures in auth.log, to an ACL. It reads data from auth.log in real time and adds the IP into netfilter with a DROP/REJECT policy.
-
15
...Contains the old sourcecode repository that is no longer maintained. Please see http://git.netfilter.org/ebtables/ and http://git.netfilter.org/arptables/ for the currently maintained repository (courtesy of the netfilter team).
-
16
MAP66
Mapping (aka stateless NAT) for IPv6
IPv6 to IPv6 Address Mapping Linux Kernel Module: a netfilter extension that implements IPv6-to-IPv6 address mapping (stateless NAT66 as discussed by IETF). Maps a private IPv6 address range (ULA) to a public IPv6 address range e.g. on an IPv6 router -
17
jkaptive
A simple captive portal
...The reason behind this is because a lot of site administrators don't need tight security - their site is just a café which offers free internet access on an unsecured WLAN access point connected to the internet and they need a ticketing system to make it cumbersome for average people to use this offering without actually buying a single coffee. Jkaptive itself just presents the login page,checks the token and places netfilter rules. Telling apart ticketed from unticketed traffic is done through Linux' netfilter. As no proxy server is involved, jkaptive has no performance penalty, nor does it create problems with non-http traffic. Once the token is accepted, jkaptive is out of the way of any network packets completely. For presenting the login page, jkaptive has a built-in webserver, so no additional webserver application is needed. -
18
-
19
nf_quota is an ip-based traffic accounting project. IPs can be added to users. It provides a kernel module that hooks onto netfilter and counts every packet passing a specified interface. If the quota for a ip/user is exceeded, the packet is dropped.
-
20
IP Tables State implements the "state top" feature from IP Filter for IP Tables. "State top" displays the states held by your stateful firewall in a "top"-like manner, in real time. IPTState also has an option to print your state table once and NOTE: Development has moved to github: http://github.com/jaymzh/iptstate
-
21
A KDE-based wizard aimed at making the process of setting up a linux netfilter firewall easy, especially on distributions with no firewall tool of their own, such as slackware.
-
22
The PortKnocko project is composed of two parts: an iptables module (user space) and a netfilter module (kernel space). Both modules are used to implement the Port Knocking and SPA (Simple Packet Authentication).
-
23
-
24
This Netfilter module implements the IVI translation algorithm. IVI is a stateless way to provide a bridge between the IPv6 world and the IPv4 world. More information here: http://datatracker.ietf.org/doc/rfc6219/ You need DNS64 to get this work
-
25
mod_layer7 is an application switching and load balancing module for Apache 2.2.x . This module utilizes mod_proxy, mod_deflate and mod_cache and contains embedded Perl interpreter that enables request rewriting and other interesting features.
