Search Results for "host based firewall"
Sort By:
Showing 1343 open source projects for "host based firewall"
View related business solutions-
Ship Agents FasterGemini Enterprise Agent Platform lets you rapidly build, scale, govern and optimize production-ready agents grounded in your organization's data. The platform enables developers to build custom or pre-built agents for virtually any use case. New customers get $300 in free credits.
-
Save Up to 91% on Cloud Compute With Spot VMsRun batch jobs at 60-91% off with Spot VMs. Long-running workloads get automatic discounts with sustained use.
-
1
Self Host Blocks
Modular server management based on NixOS modules
SHB's (Self Host Blocks) is yet another server management tool whose goal is to provide better building blocks for self-hosting. Indeed, SHB provides opinionated building blocks fitting together to self-host any service you'd want. Some common services are provided out of the box. SHB's goal is to make these building blocks plug-and-play. To achieve this, SHB pioneers contracts that allow you, the final user, to be more in control of which pieces go where. The promise here is to let you... -
2
OpenSnitch
OpenSnitch is a GNU/Linux port of the Little Snitch firewall
OpenSnitch is a GNU/Linux port of the Little Snitch firewall. You can launch the GUI from the icon or from the system menu. The daemon will start intercepting connections, prompting you to allow or deny them. If you don't apply an action, after 15 seconds (configurable) it'll apply the default action configured. When you open the GUI, you'll see all the connections and processes that the daemon has intercepted. -
3
simplewall
Simple tool to configure Windows Filtering Platform (WFP)
simplewall is an open-source Windows application that provides a user-friendly firewall control interface powered by Windows Filtering Platform (WFP), enabling users to block or allow outgoing and incoming network connections without diving into complex OS settings or command-line tools. The app presents a clean, intuitive UI where users can define rules based on process names, IP addresses, ports, and protocols, making it possible to restrict apps from accessing the internet or control specific traffic flows with fine granularity. ... -
4
Open Source API Firewall by Wallarm
Fast and light-weight API proxy firewall for request and response
API Firewall is a high-performance proxy with API request and response validation based on OpenAPI/Swagger schema. It is designed to protect REST API endpoints in cloud-native environments. API Firewall provides API hardening with the use of a positive security model allowing calls that match a predefined API specification for requests and responses, while rejecting everything else. -
99.99% Uptime for MySQL and PostgreSQL DatabasesCloud SQL Enterprise Plus delivers near-zero downtime with 35 days of point-in-time recovery. Supports MySQL, PostgreSQL, and SQL Server.
-
5
Zapret Discord YouTube
Windows-based network traffic manipulation tool
...By applying different “strategies” through batch scripts, the tool can dynamically adjust how traffic appears to filtering systems, effectively restoring access or improving connection quality for blocked or slowed services. It also integrates additional mechanisms such as host file updates and DNS configuration to improve compatibility with voice services and regional routing issues. -
6
LuLu
LuLu is the free open-source macOS firewall
LuLu is a free, open-source firewall for macOS developed by Objective-See. It blocks unauthorized outgoing network connections, allowing users to monitor and control which applications can transmit data externally. Designed for privacy and security, LuLu provides real-time prompts, rule-based filtering, and an intuitive interface, making it a valuable tool for Mac users seeking visibility over their system’s network behavior. -
7
Flowseal
Bypass regional or ISP-level restrictions on services like Discord
Flowseal is a community-hosted repository that provides tools and scripts intended to help users bypass regional or ISP-level restrictions on services like Discord and YouTube, commonly blocked in certain countries or networks. It packages configurations and executable scripts (e.g., batch files) that leverage system-level filtering or packet redirection techniques (such as WinDivert or other strategies) to modify network behavior so that traffic destined for these services appears... -
8
n8n
Free and source-available fair-code licensed workflow automation tool
n8n is an extendable workflow automation tool. With a fair-code distribution model, n8n will always have visible source code, be available to self-host, and allow you to add your own custom functions, logic and apps. n8n's node-based approach makes it highly versatile, enabling you to connect anything to everything. n8n has 200+ different nodes to automate workflows. -
9
bee-host
Firefox/Chrome/Vivaldi proxy app for an external editor
A native messaging host application for Browser's Exernal Editor extension (https://github.com/rosmanov/chrome-bee) -
Veeam Data Platform v13.1 - Get Your Free TrialTry Veeam Data Platform today. Experience the unified platform that's secure by design, portable by default, and proven to recover clean, fast, and anywhere.
-
10
H2 Database
H2 is an embeddable RDBMS written in Java
Welcome to H2, the Java SQL database. Very fast, open source, JDBC API. Embedded and server modes; in-memory databases. Browser-based Console application. Small footprint: around 2.5 MB jar file size. Browser-based Console application. Encrypted databases. Fulltext search. Pure Java with small footprint: around 2.5 MB jar file size. ODBC driver. This database can be used in embedded mode, or in server mode. ou may get a security warning from the firewall. If you don't want other computers in the network to access the database on your machine, you can let the firewall block these connections. ... -
11
NetBird
Connect your devices into a secure WireGuard-based overlay network
NetBird is an open-source solution that builds a WireGuard®-based overlay network enabling seamless, encrypted peer-to-peer connectivity without the complexity of firewall rules, port forwarding, or centralized VPN gateways. It integrates access control features such as SSO and MFA for secure, policy-driven networking. Every machine in the network runs NetBird Agent (or Client) that manages WireGuard. -
12
SafeLine
Serve as a reverse proxy to protect your web services from attacks
SafeLine is a self-hosted WAF(Web Application Firewall) to protect your web apps from attacks and exploits. A web application firewall helps protect web apps by filtering and monitoring HTTP traffic between a web application and the Internet. It typically protects web apps from attacks such as SQL injection, XSS, code injection, os command injection, CRLF injection, LDAP injection, XPath injection, RCE, XXE, SSRF, path traversal, backdoor, brute force, HTTP-flood, bot abuse, among others. By... -
13
SSH for GitHub Actions
GitHub Actions for executing remote ssh commands
...The project is built with Go and uses drone-ssh, giving it a practical foundation for flexible SSH execution. It supports common connection methods, including password-based access and private key authentication. It can run commands on one host or multiple hosts, including setups that require different ports or synchronous execution. It also supports proxy and jump host workflows, making it useful for more complex infrastructure environments. Developers can pass environment variables, run scripts from files, capture command output, and add security checks such as host fingerprint verification. -
14
CrowdSec
Firewall able to analyze visitor behavior & provide adapted response
CrowdSec - an open-source massively multiplayer firewall able to analyze visitor behavior & provide an adapted response to all kinds of attacks. It also leverages the crowd power to generate a global IP reputation database to protect the user network. Crowdsec shouldn't, and didn't crash any production so far we know, but some features might be missing or undergo evolutions. IP Blocklists are limited to very-safe-to-ban IPs only (~5% of the global database so far, will grow soon). ... -
15
xxh
Bring your favorite shell wherever you go through the ssh
You stuffed the command shell with aliases, tools and colors but you lose it all when using ssh. The mission of xxh is to bring your favorite shell wherever you go through ssh without root access and system installations. Preparing portable shells and plugins occurs locally and then xxh uploads the result to the host. No installations or root access on the host is required. Security and host environment are a prime focus. No blindfold copying config files from local to the remote host.... -
16
Sunshine
Self-hosted game stream host for Moonlight
Sunshine is an open-source self‑hosted cloud gaming server that implements NVIDIA’s GameStream protocol. Compatible with Moonlight clients across platforms, it supports low‑latency streaming via software or hardware encoding (AMD/Intel/NVIDIA) and offers a browser‑based control UI for pairing. -
17
Toolbx Linux
Tool for interactive command line environments on Linux
...This is particularly useful on OSTree-based operating systems like Fedora CoreOS and Silverblue. The intention of these systems is to discourage installation of software on the host, and instead install software as (or in) containers — they mostly don't even have package managers like DNF or YUM. This makes it difficult to set up a development environment or troubleshoot the operating system in the usual way. -
18
zapret2
Anti-dpi software
zapret2 is a standalone anti-DPI toolkit designed to alter network traffic behavior without depending on external proxy servers. It targets censorship, throttling, and protocol filtering performed through deep packet inspection. The project supports Linux, OpenWrt-oriented embedded routers, FreeBSD, OpenBSD, and Windows. Its nfqws2 engine retains protocol recognition, reassembly, decryption, profiles, host lists, IP sets, and basic filtering. Traffic-manipulation strategies are moved out of... -
19
ClusterSSH (cssh)
Cluster SSH - Cluster Admin Via SSH
ClusterSSH is a tool to manage simultaneous interactive sessions across multiple SSH-accessible hosts. It opens one master terminal and many child terminal windows (or tabs), sending the same keystrokes to all clients while allowing isolated input per host. This is useful when orchestrating repetitive tasks—such as rolling updates or diagnosing distributed systems—without copying and pasting into each window. The interface supports splitting windows, delayed input modes, and host groupings to make clusters more manageable. It also includes features like per-host prompt prefixing or context awareness to avoid confusion in mixed environments. ... -
20
frp
A Fast Reverse Proxy
frp stands for exactly what it is: a fast reverse proxy. It helps you expose a local server behind a NAT or firewall to the Internet. It is currently under development, but already supports TCP and UDP, as well as HTTP and HTTPS protocols where requests can be forwarded to internal services by domain name. It also has a P2P connect mode and many other nifty features. These include configuration files, environment variables, a dashboard that shows you frp's status and proxies' statistics... -
21
Symfony Security Bundle
Integration of the Security component into the Symfony framework
Symfony Security Bundle is a powerful tool for adding authentication and authorization to Symfony applications. It provides mechanisms for managing user roles, password encryption, and access control. The bundle supports various authentication methods, including form login, HTTP basic auth, OAuth, and more. It also integrates with Symfony’s firewall and access control systems for secure application development. -
22
agentOS
A portable open-source operating system for agents. ~6 ms coldstarts
agentOS is a portable, open-source runtime environment designed specifically for executing AI agents efficiently, acting as a lightweight operating system tailored for agent-based workloads. It is built using WebAssembly and V8 isolates to provide secure, sandboxed execution without the overhead of traditional containers or virtual machines. The system is optimized for extremely fast startup times, with near-instant cold starts that allow agents to be created and executed in milliseconds. AgentOS is designed to run directly within an application process, enabling agents to interact with host functions and resources without network overhead or complex orchestration layers. ... -
23
ModSecurity
Cross platform web application firewall (WAF) engine for Apache
ModSecurity is an open-source, cross-platform web application firewall (WAF) engine for Apache, IIS and Nginx that is developed by Trustwave's SpiderLabs. It has a robust event-based programming language that provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analysis. Libmodsecurity is one component of the ModSecurity v3 project. -
24
Zapret
Advanced open source tool for bypassing DPI-based censorship
Zapret is an open source, cross-platform tool designed to help users bypass and evade Deep Packet Inspection (DPI)-based traffic blocking and censorship systems. Rather than acting as a traditional proxy or VPN, it works by manipulating network packets and traffic streams locally to confuse or disrupt DPI mechanisms used by ISPs and network filters, making it possible to access restricted websites and services without relaying traffic through third-party servers. Zapret implements multiple... -
25
Micro App
A simple, efficient and powerful micro front-end framework
Micro-app is a web component-based micro-frontend framework from JD Retail. It enables sandboxed embedding of independent micro-apps into host pages, with automatic JS/style isolation, element segregation, preloading, and inter-app communication—all independent of framework. Provides plugin architecture and works across any frontend tech stack.
