Search Results for "host based firewall"
Sort By:
Showing 1287 open source projects for "host based firewall"
View related business solutions-
Try Google Cloud Risk-Free With $300 in CreditUse your credit across every product. Compute, storage, AI, analytics. When it runs out, 20+ products stay free. You only pay when you choose to.
-
Build Securely on Azure with Proven FrameworksMoving to the cloud brings new challenges. How can you manage a larger attack surface while ensuring great network performance? Turn to Fortinet’s Tested Reference Architectures, blueprints for designing and securing cloud environments built by cybersecurity experts. Learn more and explore use cases in this white paper.
-
1
OpenSnitch
OpenSnitch is a GNU/Linux port of the Little Snitch firewall
OpenSnitch is a GNU/Linux port of the Little Snitch firewall. You can launch the GUI from the icon or from the system menu. The daemon will start intercepting connections, prompting you to allow or deny them. If you don't apply an action, after 15 seconds (configurable) it'll apply the default action configured. When you open the GUI, you'll see all the connections and processes that the daemon has intercepted. -
2
Self Host Blocks
Modular server management based on NixOS modules
SHB's (Self Host Blocks) is yet another server management tool whose goal is to provide better building blocks for self-hosting. Indeed, SHB provides opinionated building blocks fitting together to self-host any service you'd want. Some common services are provided out of the box. SHB's goal is to make these building blocks plug-and-play. To achieve this, SHB pioneers contracts that allow you, the final user, to be more in control of which pieces go where. The promise here is to let you... -
3
simplewall
Simple tool to configure Windows Filtering Platform (WFP)
simplewall is an open-source Windows application that provides a user-friendly firewall control interface powered by Windows Filtering Platform (WFP), enabling users to block or allow outgoing and incoming network connections without diving into complex OS settings or command-line tools. The app presents a clean, intuitive UI where users can define rules based on process names, IP addresses, ports, and protocols, making it possible to restrict apps from accessing the internet or control specific traffic flows with fine granularity. ... -
4
LuLu
LuLu is the free open-source macOS firewall
LuLu is a free, open-source firewall for macOS developed by Objective-See. It blocks unauthorized outgoing network connections, allowing users to monitor and control which applications can transmit data externally. Designed for privacy and security, LuLu provides real-time prompts, rule-based filtering, and an intuitive interface, making it a valuable tool for Mac users seeking visibility over their system’s network behavior. -
AI-powered service management for IT and enterprise teamsGive your IT, operations, and business teams the ability to deliver exceptional services—without the complexity. Maximize operational efficiency with refreshingly simple, AI-powered Freshservice.
-
5
Zapret Discord YouTube
Windows-based network traffic manipulation tool
...By applying different “strategies” through batch scripts, the tool can dynamically adjust how traffic appears to filtering systems, effectively restoring access or improving connection quality for blocked or slowed services. It also integrates additional mechanisms such as host file updates and DNS configuration to improve compatibility with voice services and regional routing issues. -
6
Open Source API Firewall by Wallarm
Fast and light-weight API proxy firewall for request and response
API Firewall is a high-performance proxy with API request and response validation based on OpenAPI/Swagger schema. It is designed to protect REST API endpoints in cloud-native environments. API Firewall provides API hardening with the use of a positive security model allowing calls that match a predefined API specification for requests and responses, while rejecting everything else. -
7
n8n
Free and source-available fair-code licensed workflow automation tool
n8n is an extendable workflow automation tool. With a fair-code distribution model, n8n will always have visible source code, be available to self-host, and allow you to add your own custom functions, logic and apps. n8n's node-based approach makes it highly versatile, enabling you to connect anything to everything. n8n has 200+ different nodes to automate workflows. -
8
H2 Database
H2 is an embeddable RDBMS written in Java
Welcome to H2, the Java SQL database. Very fast, open source, JDBC API. Embedded and server modes; in-memory databases. Browser-based Console application. Small footprint: around 2.5 MB jar file size. Browser-based Console application. Encrypted databases. Fulltext search. Pure Java with small footprint: around 2.5 MB jar file size. ODBC driver. This database can be used in embedded mode, or in server mode. ou may get a security warning from the firewall. If you don't want other computers in the network to access the database on your machine, you can let the firewall block these connections. ... -
9
Flowseal
Bypass regional or ISP-level restrictions on services like Discord
Flowseal is a community-hosted repository that provides tools and scripts intended to help users bypass regional or ISP-level restrictions on services like Discord and YouTube, commonly blocked in certain countries or networks. It packages configurations and executable scripts (e.g., batch files) that leverage system-level filtering or packet redirection techniques (such as WinDivert or other strategies) to modify network behavior so that traffic destined for these services appears... -
Full-stack observability with actually useful AI | Grafana CloudBuilt on open standards like Prometheus and OpenTelemetry, Grafana Cloud includes Kubernetes Monitoring, Application Observability, Incident Response, plus the AI-powered Grafana Assistant. Get started with our generous free tier today.
-
10
SafeLine
Serve as a reverse proxy to protect your web services from attacks
SafeLine is a self-hosted WAF(Web Application Firewall) to protect your web apps from attacks and exploits. A web application firewall helps protect web apps by filtering and monitoring HTTP traffic between a web application and the Internet. It typically protects web apps from attacks such as SQL injection, XSS, code injection, os command injection, CRLF injection, LDAP injection, XPath injection, RCE, XXE, SSRF, path traversal, backdoor, brute force, HTTP-flood, bot abuse, among others. By... -
11
CrowdSec
Firewall able to analyze visitor behavior & provide adapted response
CrowdSec - an open-source massively multiplayer firewall able to analyze visitor behavior & provide an adapted response to all kinds of attacks. It also leverages the crowd power to generate a global IP reputation database to protect the user network. Crowdsec shouldn't, and didn't crash any production so far we know, but some features might be missing or undergo evolutions. IP Blocklists are limited to very-safe-to-ban IPs only (~5% of the global database so far, will grow soon). ... -
12
Zapret
Advanced open source tool for bypassing DPI-based censorship
Zapret is an open source, cross-platform tool designed to help users bypass and evade Deep Packet Inspection (DPI)-based traffic blocking and censorship systems. Rather than acting as a traditional proxy or VPN, it works by manipulating network packets and traffic streams locally to confuse or disrupt DPI mechanisms used by ISPs and network filters, making it possible to access restricted websites and services without relaying traffic through third-party servers. Zapret implements multiple... -
13
NetBird
Connect your devices into a secure WireGuard-based overlay network
NetBird is an open-source solution that builds a WireGuard®-based overlay network enabling seamless, encrypted peer-to-peer connectivity without the complexity of firewall rules, port forwarding, or centralized VPN gateways. It integrates access control features such as SSO and MFA for secure, policy-driven networking. Every machine in the network runs NetBird Agent (or Client) that manages WireGuard. -
14
Sunshine
Self-hosted game stream host for Moonlight
Sunshine is an open-source self‑hosted cloud gaming server that implements NVIDIA’s GameStream protocol. Compatible with Moonlight clients across platforms, it supports low‑latency streaming via software or hardware encoding (AMD/Intel/NVIDIA) and offers a browser‑based control UI for pairing. -
15
Toolbx Linux
Tool for interactive command line environments on Linux
...This is particularly useful on OSTree-based operating systems like Fedora CoreOS and Silverblue. The intention of these systems is to discourage installation of software on the host, and instead install software as (or in) containers — they mostly don't even have package managers like DNF or YUM. This makes it difficult to set up a development environment or troubleshoot the operating system in the usual way. -
16
edgetunnel
edgetunnel 2.0 VLESS/Trojan
edgetunnel is a modified version of a serverless tunnelling solution designed to run on platforms like Cloudflare Workers and Pages, enabling protocols such as VLESS and Trojan to be exposed through edge-functions rather than traditional servers. The project’s fork by cmliu emphasizes conversion of protocol configuration (especially VLESS) into subscription links, so that users can deploy and then generate “Clash” or “Sing-box” compatible subscription content easily. It provides a... -
17
frp
A Fast Reverse Proxy
frp stands for exactly what it is: a fast reverse proxy. It helps you expose a local server behind a NAT or firewall to the Internet. It is currently under development, but already supports TCP and UDP, as well as HTTP and HTTPS protocols where requests can be forwarded to internal services by domain name. It also has a P2P connect mode and many other nifty features. These include configuration files, environment variables, a dashboard that shows you frp's status and proxies' statistics... -
18
workerd
The JavaScript / Wasm runtime that powers Cloudflare Workers
workerd is the server runtime that powers Cloudflare Workers — a modern, standards-aligned JavaScript and WebAssembly execution environment that can be run outside of Cloudflare’s global edge network as a standalone server or proxy. Designed to host serverless applications written to the Workers platform API (including fetch() and Web standard libraries), workerd enables developers to self-host edge-style workloads in local data centers or development environments, or to test Workers code offline before deploying to the cloud. It emphasizes performance, predictable deployment semantics, and secure isolation, and it uses a capability-based configuration model to bind external resources and services into worker applications in a composable way. ... -
19
ClusterSSH (cssh)
Cluster SSH - Cluster Admin Via SSH
ClusterSSH is a tool to manage simultaneous interactive sessions across multiple SSH-accessible hosts. It opens one master terminal and many child terminal windows (or tabs), sending the same keystrokes to all clients while allowing isolated input per host. This is useful when orchestrating repetitive tasks—such as rolling updates or diagnosing distributed systems—without copying and pasting into each window. The interface supports splitting windows, delayed input modes, and host groupings to make clusters more manageable. It also includes features like per-host prompt prefixing or context awareness to avoid confusion in mixed environments. ... -
20
bee-host
Firefox/Chrome proxy app for an external editor
A native messaging host application for Browser's Exernal Editor extension (https://github.com/rosmanov/chrome-bee) -
21
ModSecurity
Cross platform web application firewall (WAF) engine for Apache
ModSecurity is an open-source, cross-platform web application firewall (WAF) engine for Apache, IIS and Nginx that is developed by Trustwave's SpiderLabs. It has a robust event-based programming language that provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analysis. Libmodsecurity is one component of the ModSecurity v3 project. -
22
Symfony Security Bundle
Integration of the Security component into the Symfony framework
Symfony Security Bundle is a powerful tool for adding authentication and authorization to Symfony applications. It provides mechanisms for managing user roles, password encryption, and access control. The bundle supports various authentication methods, including form login, HTTP basic auth, OAuth, and more. It also integrates with Symfony’s firewall and access control systems for secure application development. -
23
Micro App
A simple, efficient and powerful micro front-end framework
Micro-app is a web component-based micro-frontend framework from JD Retail. It enables sandboxed embedding of independent micro-apps into host pages, with automatic JS/style isolation, element segregation, preloading, and inter-app communication—all independent of framework. Provides plugin architecture and works across any frontend tech stack. -
24
IntelliJ Community Edition
IntelliJ IDEA & IntelliJ Platform
...From this base, JetBrains builds full editions (Ultimate) by layering proprietary features for enterprise frameworks and integrations. IntelliJ Community supports multiple JVM-based languages (Java, Kotlin, Scala, Groovy) and serves as a host for plugin ecosystems that add support for web, database, and cloud tooling. The project emphasizes performance, modularity, and a responsive user experience, maintaining a codebase that balances long-term maintainability with cutting-edge developer features. -
25
xxh
Bring your favorite shell wherever you go through the ssh
You stuffed the command shell with aliases, tools and colors but you lose it all when using ssh. The mission of xxh is to bring your favorite shell wherever you go through ssh without root access and system installations. Preparing portable shells and plugins occurs locally and then xxh uploads the result to the host. No installations or root access on the host is required. Security and host environment are a prime focus. No blindfold copying config files from local to the remote host....
