Search Results for "netfilter-layer"
Sort By:
Showing 82 open source projects for "netfilter-layer"
View related business solutions-
Build AI Apps with Gemini 3 on Vertex AIVertex AI gives developers access to Gemini 3—Google’s most advanced reasoning and coding model—plus 200+ foundation models including Claude, Llama, and Gemma. Build generative AI apps with Vertex AI Studio, customize with fine-tuning, and deploy to production with enterprise-grade MLOps. New customers get $300 in free credits.
-
Run Any Workload on Compute Engine VMsCompute Engine delivers high-performance virtual machines for web apps, databases, containers, and AI workloads. Choose from general-purpose, compute-optimized, or GPU/TPU-accelerated machine types—or build custom VMs to match your exact specs. With live migration and automatic failover, your workloads stay online. New customers get $300 in free credits.
-
1
dive
A tool for exploring each layer in a docker image
A tool for exploring a docker image, layer contents, and discovering ways to shrink the size of your Docker/OCI image. As you select a layer on the left, you are shown the contents of that layer combined with all previous layers on the right. Also, you can fully explore the file tree with the arrow keys. Files that have changed, been modified, added, or removed are indicated in the file tree. -
2
db
Data access layer for PostgreSQL, CockroachDB, MySQL, SQLite, etc.
upper/db is a productive data access layer (DAL) for Go that provides agnostic tools to work with different data sources. Data access layer for PostgreSQL, CockroachDB, MySQL, SQLite and MongoDB with ORM-like features. Our agnostic API is compatible with SQL and NoSQL databases. Use the SQL builder or raw SQL statements for advanced cases. An (optional) ORM-like layer is available for all your data modelling needs. -
3
Cloudflare Tunnel Client
Cloudflare Tunnel Client
...All usages related with proxying to your origins are available under cloudflared tunnel help. You can also use cloudflared to access Tunnel origins (that are protected with cloudflared tunnel) for TCP traffic at Layer 4 (i.e., not HTTP/web socket), which is relevant for use cases such as SSH, RDP, etc. Such usages are available under cloudflared access help. -
4
kube-vip
Kubernetes Control Plane Virtual IP and Load-Balancer
kube-vip provides Kubernetes clusters with a virtual IP and load balancer for both the control plane (for building a highly-available cluster) and Kubernetes Services of type LoadBalancer without relying on any external hardware or software. ARP is a layer 2 protocol that is used to inform the network of the location of a new address. When a new IP address is configured to a device, there needs to be a mechanism to inform the network of which piece of hardware is hosting this new address. ARP is the technology that is used to ensure that a network understands the link between the hardware address (MAC) and the logical address (IP). -
Easily Host LLMs and Web Apps on Cloud RunRun frontend and backend services, batch jobs, host LLMs, and queue processing workloads without the need to manage infrastructure. Cloud Run gives you on-demand GPU access for hosting LLMs and running real-time AI—with 5-second cold starts and automatic scale-to-zero so you only pay for actual usage. New customers get $300 in free credit to start.
-
5
Tun2Socks
tun2socks , powered by gVisor TCP/IP stack
...Proxy Protocols: HTTP/Socks4/Socks5/Shadowsocks with authentication support for remote connections. Run Everywhere. Linux/macOS/Windows/FreeBSD/OpenBSD multi-platform support with specific optimization. Gateway Mode: Act as a layer three gateway to handle network traffic from other devices in the same network. Full IPv6 Support: All functions work in IPv6, tunnel IPv4 connections through IPv6 proxy and vice versa. Network Stack: Powered by user-space TCP/IP stack from Google container application kernel gVisor. -
6
Erigon
Ethereum implementation on the efficiency frontier
...Ethereum Mainnet Full node ( see --prune* flags): 400Gb. Erigon by default is "all in one binary" solution, but it's possible start TxPool as separated processes. Same true about: JSON RPC layer (RPCDaemon), p2p layer (Sentry), history download layer (Downloader), consensus. Don't start services as separated processes unless you have clear reason for it: resource limiting, scale, replace by your own implementation, security. How to start Erigon's services as separated processes, see in docker-compose.yml. -
7
BFE
A modern layer 7 load balancer from baidu
BFE (Beyond Front End) is a modern layer 7 load balancer from baidu. BFE has a builtin plugin framework that makes it possible to develop new features rapidly by writing plugins. BFE is designed to provide every tenant a dedicated share of the instance. Each tenant’s configuration is isolated and remains invisible to other tenants. BFE supports HTTP, HTTPS, SPDY, HTTP2, gRPC, WebSocket, TLS, FastCGI, etc. -
8
Hysteria
Hysteria is a powerful, lightning fast and censorship resistant proxy
Hysteria is a high-performance, censorship-resistant proxy and VPN-like networking tool designed to deliver fast, reliable connectivity over unstable or lossy networks by leveraging a custom UDP/QUIC-based transport layer that can masquerade as standard HTTP/3 traffic to evade detection. It supports a wide range of use cases including SOCKS5 and HTTP proxying, TCP/UDP forwarding, Linux TProxy for network redirection, and even tunneling via TUN interfaces, making it a flexible choice for developers and network engineers needing robust remote access or traffic obfuscation. ... -
9
eRPC
An efficient, extensible and easy-to-use RPC framework
...Suitable for RPC, Microservice, Peer-to-Peer, IM, Game and other fields. Use peer to provide the same API package for the server and client. Optimized high-performance transport layer. Use a Non-block socket and I/O multiplexing technology. Support setting the size of socket I/O buffer. Support setting the size of the reading message (if exceed disconnect it). Support controlling the connection file descriptor. Detailed log information, support print input and output details. Support setting slow operation alarm threshold. ... -
AI-powered service management for IT and enterprise teamsGive your IT, operations, and business teams the ability to deliver exceptional services—without the complexity. Maximize operational efficiency with refreshingly simple, AI-powered Freshservice.
-
10
Go Clean template
Clean Architecture template for Golang services
The purpose of the template is to show how to organize a project and prevent it from turning into spaghetti code, where to store business logic so that it remains independent, clean, and extensible, how not to lose control when a microservice grows. Configuration. First, config.yml is read, then environment variables overwrite the yaml config if they match. The config structure is in the config.go. The env-required: true tag obliges you to specify a value (either in yaml, or in environment... -
11
Kivik
Common interface to CouchDB or CouchDB-like databases for Go
Kivik is a Go client library for interacting with CouchDB and PouchDB databases, providing an abstraction layer for NoSQL document storage and retrieval. It simplifies database operations for Go developers. -
12
sbctl
Secure Boot key manager
sbctl intends to be a user-friendly secure boot key manager capable of setting up secure boot, offering key management capabilities, and keeping track of files that need to be signed in the boot chain. It is written top-to-bottom in Golang using go-uefi for the API layer and doesn't rely on existing secure boot tooling. It also tries to sport some integration testing towards tianocore utilizing vmtest. -
13
Trillian
A transparent, highly scalable and cryptographically verifiable data
trillian is a transparent, cryptographically verifiable data store built on Merkle trees that provides append-only logs and verifiable key–value maps. It separates a storage layer from a verifiability layer, letting applications prove inclusion, consistency, and non-existence through compact cryptographic proofs. The system is designed for horizontal scale with gRPC APIs, enabling multiple frontends and sequencers to operate over a shared backend. Common use cases include certificate transparency, package registries, and audit logs where public verifiability or tamper evidence is required. ... -
14
Obot MCP Gateway
Hosting, Registry, Gateway, and Chat Client
Obot is an open-source platform built to help organizations adopt and operate Model Context Protocol (MCP) capabilities in a centralized, production-friendly way. It combines multiple MCP building blocks into one system, including hosting for MCP servers, a registry for discovery, a gateway layer to route access, and a standards-compliant chat client experience. The project is aimed at solving common enterprise rollout problems such as reliably hosting servers for internal and external users, curating “approved” MCP servers for employees to find, and enforcing authentication, access control, and auditable activity. It also supports building richer agents and chatbots that can leverage MCP servers while keeping operations manageable for IT and platform teams. ... -
15
Kubernetes Gateway API
Repository for the next iteration of composite service
...This project represents the next generation of Kubernetes Ingress, Load Balancing, and Service Mesh APIs. From the outset, it has been designed to be generic, expressive, and role-oriented. Most of the configuration in this API is contained in the Routing layer. These protocol-specific resources (HTTPRoute, GRPCRoute, etc) enable advanced routing capabilities for both Ingress and Mesh. When using Gateway API to manage ingress traffic, the Gateway resource defines a point of access at which traffic can be routed across multiple contexts -- for example, from outside the cluster to inside the cluster (north/south traffic). ... -
16
Kargo
Application lifecycle orchestration
...It builds upon GitOps principles and integrates with existing technologies, like Argo CD, to streamline and automate the progressive rollout of changes across the many stages of an application's lifecycle. Kargo's goal is to provide an intuitive and flexible layer "above" existing GitOps tooling, wherein you can describe the relationships between various application instances deployed to different environments as well as procedures for progressing changes from one application instance's source of truth to the next. -
17
GoQuorum
A permissioned implementation of Ethereum supporting data privacy
ConsenSys Quorum enables enterprises to leverage Ethereum for their high-value blockchain applications. Businesses can rely on the Quorum open-source protocol layer and integrate on top of it product modules from ConsenSys, other companies, or your own in-house development team to build high-performance, customizable applications. Our mission is the seamless adoption of blockchain technology. A trusted, open source foundation for your blockchain solution. Learn about our open source protocol layer to select the right solution for your company. ... -
18
Proton Mail Bridge
Proton Mail Bridge application
...Because standard IMAP cannot natively decrypt end-to-end encrypted messages, Bridge acts as a translator that downloads encrypted mail, decrypts it locally, and serves it to your preferred mail client over a local server, while encrypting outgoing messages before they’re sent to Proton’s servers. It provides a seamless integration layer for users who need offline support, familiar local client workflows, or tighter integration with desktop tools while preserving Proton’s zero-access encryption model. The Bridge app continues running even when its GUI is closed so that mail clients can remain connected and synchronized, and it supports automatic startup and robust credential handling via secure storage. -
19
Mercure
Server-sent live updates, protocol and reference implementation
...It is a modern and convenient replacement for both the WebSocket API and the higher-level libraries and services relying on it. Mercure is especially useful to add streaming and asynchronous capabilities to REST and GraphQL APIs. Because it is a thin layer on top of HTTP and SSE, Mercure is natively supported by modern web browsers, mobile applications, and IoT devices. A free (as in beer, and as in speech) reference server, as well as a hosted service, are available. Designed for REST and GraphQL. Private updates (JWT authorization). Presence API and subscription events. Event store. ... -
20
Cilium
eBPF-based networking, security, and observability
...Cilium can attract this traffic with BGP and accelerate leveraging XDP and eBPF. Together these technologies provide a very robust and secure implementation of Load Balancing. Cilium and eBPF operate at the kernel layer. With this level of context we can make intelligent decisions about how to connect different workloads whether on the same node or between clusters. With eBPF and XDP Cilium enables significant improvements in latency and performance and eliminates the need for kube-proxy entirely. -
21
DoltgreSQL
DoltgreSQL - Version Controlled PostgreSQL
...It allows users to commit, branch, merge, and revert changes to data and schema, bringing collaborative workflows to SQL databases. DoltgreSQL is designed for teams who want full auditability and control over every change made in their data layer. -
22
SPQR
Stateless Postgres Query Router
SPQR is a sharding proxy for PostgreSQL that enables horizontal scalability by distributing queries across multiple PostgreSQL instances. Designed for large-scale, multi-tenant architectures, SPQR routes, rewrites, and manages SQL queries to ensure they are executed efficiently across shards. It provides a PostgreSQL-compatible interface so applications can scale transparently without code changes. -
23
Kaniko
Build Container Images In Kubernetes
kaniko is a tool to build container images from a Dockerfile, inside a container or Kubernetes cluster. kaniko doesn't depend on a Docker daemon and executes each command within a Dockerfile completely in userspace. This enables building container images in environments that can't easily or securely run a Docker daemon, such as a standard Kubernetes cluster. -
24
Macaron
Package macaron is a high productive and modular web framework in Go
...Allow to use of the in-memory templates and static files. Easy to plugin/unplugin features with a modular design. Handy dependency injection powered by inject. Better router layer and less reflection make faster speed. -
25
Shell-operator
A tool for running event-driven scripts in Kubernetes
Shell-operator is a tool for running event-driven scripts in a Kubernetes cluster. This operator is not an operator for a particular software product such as Prometheus-operator or Kafka-operator. Shell-operator provides an integration layer between Kubernetes cluster events and shell scripts by treating scripts as hooks triggered by events. Think of it as an operator-sdk but for scripts. Shell-operator is used as a base for a more advanced addon-operator that supports Helm charts and value storages.
