Search Results for "rules"
Sort By:
Showing 155 open source projects for "rules"
View related business solutions-
Stop vibe-debugging.AppSignal's MCP server hands Claude, Cursor, or Zed your real errors, traces, and the deploy that shipped them. AI writes the fix; you review the diff.
-
Fully Managed MySQL, PostgreSQL, and SQL ServerCloud SQL handles your database ops end to end, so you can focus on your app.
-
1
OpenSnitch
OpenSnitch is a GNU/Linux port of the Little Snitch firewall
...Double click on a row to view the details of a process, rule, host or user. Once you know which are the common processes, IPs and hosts that your machine is connecting to, you can start creating permanent rules (Duration: always) to deny or allow them. You can also convert temporary rules to permanent by right-clicking on a temporary rule or by double-clicking on it, and then edit it. By default OpenSnitch UI listens on a local Unix socket in /tmp/osui.sock. -
2
simplewall
Simple tool to configure Windows Filtering Platform (WFP)
simplewall is an open-source Windows application that provides a user-friendly firewall control interface powered by Windows Filtering Platform (WFP), enabling users to block or allow outgoing and incoming network connections without diving into complex OS settings or command-line tools. The app presents a clean, intuitive UI where users can define rules based on process names, IP addresses, ports, and protocols, making it possible to restrict apps from accessing the internet or control specific traffic flows with fine granularity. Because simplewall leverages WFP directly, it operates at a low level in the network stack, ensuring reliable enforcement of rules system-wide while remaining lightweight. ... -
3
Nipe
An engine to make Tor network your default gateway
Nipe is a Perl-based engine whose primary aim is to make the Tor network act as the default gateway for outgoing traffic. In practice, it configures system firewall rules (iptables) and network routing so that almost all IPv4 traffic is redirected through Tor. The tool provides commands such as install, start, stop, restart, and status to manage its behavior. When “start” is issued, it sets up the necessary rules; when “stop” is used, it attempts to remove those rules. Nipe currently operates over IPv4 and does not yet support IPv6, meaning that users with IPv6 connectivity may bypass Tor routing. ... -
4
Netmaker
Netmaker makes networks with WireGuard
...It blows past any NAT’s, firewalls, or subnets that stand between them. Devices are scattered across data centers, offices, clouds, clusters, and more. Distinct networks separate them, each with different management rules. Connecting machines across environments means setting up gateways, firewalls, and tunnels, often manually. -
Build Agents and Models on One PlatformGemini Enterprise Agent Platform is Google Cloud's comprehensive platform for developers to build, scale, govern, and optimize agents and models. Choose from Google's most advanced models and third-party models like Anthropic's Claude Model Family.
-
5
FireHOL
A firewall for humans.
...FireQOS is a program that sets up traffic shaping from an easy-to-understand and flexible configuration file. Both programs abstract away the differences between IPv4 and IPv6. so you can concentrate on the rules you want. You can apply rules for IPv4 or IPv6, or both, as you need. -
6
LuLu
LuLu is the free open-source macOS firewall
LuLu is a free, open-source firewall for macOS developed by Objective-See. It blocks unauthorized outgoing network connections, allowing users to monitor and control which applications can transmit data externally. Designed for privacy and security, LuLu provides real-time prompts, rule-based filtering, and an intuitive interface, making it a valuable tool for Mac users seeking visibility over their system’s network behavior. -
7
Antrea
Kubernetes networking based on Open vSwitch
Antrea is a Kubernetes-native project that implements the Container Network Interface (CNI) and Kubernetes NetworkPolicy thereby providing network connectivity and security for pod workloads. Antrea extends the benefit of programmable networks from Open vSwitch (OVS) to Kubernetes. Antrea simplifies Kubernetes networking across differing clouds and operating systems with a unified network stack built atop Open vSwitch. Antrea is designed to ease deployment, operations and troubleshooting by... -
8
NGINX Ingress Controller
NGINX Ingress Controller for Kubernetes
ingress-nginx is an Ingress controller for Kubernetes using NGINX as a reverse proxy and load balancer. It is built around the Kubernetes Ingress resource, using a ConfigMap to store the NGINX configuration. The goal of this Ingress controller is the assembly of a configuration file (nginx.conf). The main implication of this requirement is the need to reload NGINX after any change in the configuration file. Though it is important to note that we don't reload Nginx on changes that impact only... -
9
glider
glider is a forward proxy with multiple protocols support
...Load balancing with the following scheduling algorithm, rr: round robin, ha: high availability, lha: latency based high availability, dh: destination hashing. Rule & priority based forwarder choosing: Config Examples. DNS forwarding server. Force upstream querying by TCP. Association rules between dns and forwarder choosing. Association rules between dns and ipset. dns cache support. Custom dns record. IPSet management (linux kernel version >= 2.6.32). Add ip/cidrs from rule files on startup. Add resolved ips for domains from rule files by dns forwarding server. Serve HTTP and socks5 on the same port. Periodical availability checking for the forwarder. -
Cut Data Warehouse Costs by 54%BigQuery delivers 54% lower TCO with exabyte scale and flexible pricing. Free migration tools handle the SQL translation automatically.
-
10
NetBird
Connect your devices into a secure WireGuard-based overlay network
NetBird is an open-source solution that builds a WireGuard®-based overlay network enabling seamless, encrypted peer-to-peer connectivity without the complexity of firewall rules, port forwarding, or centralized VPN gateways. It integrates access control features such as SSO and MFA for secure, policy-driven networking. Every machine in the network runs NetBird Agent (or Client) that manages WireGuard. Every agent connects to Management Service that holds network state, manages peer IPs, and distributes network updates to agents (peers). ... -
11
Nezha Monitoring
Self-hosted, lightweight server and website monitoring and O&M tool
Nezha is a self-hosted monitoring and alerting tool for servers, providing real-time tracking and notifications on server health and performance. -
12
Grafana Alloy
OpenTelemetry Collector distribution with programmable pipelines
Grafana Alloy is an open source OpenTelemetry Collector distribution with built-in Prometheus pipelines and support for metrics, logs, traces, and profiles. Grafana Alloy is Grafana Labs’ distribution of the OpenTelemetry Collector. It is an OTLP-compatible collector with built-in Prometheus optimizations that also support signals across metrics, logs, traces, and profiles. Alloy was started at Grafana Labs and announced at GrafanaCON in 2024. The mission of the project is to create the best... -
13
Apache HertzBeat
Apache HertzBeat(incubating) is a real-time monitoring system
Apache HertzBeat (incubating) is an easy-to-use, open source, real-time monitoring system with an agentless, high-performance cluster, Prometheus-compatible, and offers powerful custom monitoring and status page building capabilities. Hertzbeat is an open-source monitoring and alerting platform for IT infrastructure, including servers, networks, and applications. -
14
Apple WLOC
Modify Apple network location (gs-loc) to return coordinates
...The picker can parse location links from Apple Maps, Google Maps, Amap, Baidu Maps, and coordinate text. Overall, it is a specialized iOS networking and location-testing utility for users who understand proxy rules, MITM certificates, and the limits of network-based positioning. -
15
BFE
A modern layer 7 load balancer from baidu
...BFE supports HTTP, HTTPS, SPDY, HTTP2, gRPC, WebSocket, TLS, FastCGI, etc. Future support is planned for HTTP/3. BFE provides an advanced domain-specific language to describe routing rules which are easy to understand and maintain. BFE supports global load balancing and distributed load balancing for zone aware balancing, zone level failure resilience, overload protection etc. BFE provides a rich set of plugins for traffic management, security, observability, etc. BFE includes detailed built-in metrics for all subsystems. ... -
16
UbiquitiWGWizard
Generate Wireguard VPN configurations for Ubiquiti Routers
UbiquitiWgWizard automates the creation of: • WireGuard interface configuration for EdgeOS • Firewall rules (WG-IN, WG-LOCAL, WAN->LOCAL) • NAT masquerade rules for VPN clients • Client configuration files (.conf) • Optional QR codes for mobile clients • A step-by-step HOW_TO_APPLY_CONFIG.txt document The wizard prompts for: • Router model • WAN interface • LAN interface(s) • Split tunnel vs full tunnel (per client) • Public endpoint / DDNS • Number of clients • Optional QR code generation All output is generated safely and never applied automatically. ________________________________________ Supported Router Models The wizard includes templates for: • ER-4 • ER-6P • ER-X • ER-12 You may select any physical or logical interface supported by your router (eth ports, switch interfaces, etc.). ________________________________________ -
17
Cloud Scanner of Death is a professional-grade cloud security assessment tool designed to identify vulnerabilities, misconfigurations, and compliance issues across AWS, Azure, and Google Cloud Platform (GCP) environments. The tool provides comprehensive security scanning with detailed reporting and remediation guidance.
-
18
VPN Connection Sharing
Share a VPN connection with VMs or containers
Easily share a VPN connection with your virtual machines or containers with this script. Works with IPsec VPN connections (like strongSwan), and lets your VMs reuse the VPN connection of your host system. Create a desktop launcher to start the VPN connection sharing script whenever you need it. -
19
Full set of scripts to implemente a full featured firewall.
-
20
IP64Bridge
A TCP/UDP packet forwarding tool for IPv6 and IPv4
Use this program to enable IPv6 remote multiplay for games that support only IPv4 or local LAN connections. It is also possible to customize the port forwarding/mapping rules. -
21
FancySS
fancyss is a project for bypassing the Great Firewall (GFW)
...V2Ray) to circumvent firewall or censorship (“GFW” in the Chinese context). Because it integrates into the router’s firmware environment, fancyss automates configuration, routing, and firewall rules to minimize manual tinkering. It supports multiple architectures and firmware versions, though some submodules or variants (e.g. “fancyss_hnd”) are optimized for specific chipsets. The project also maintains offline packages for constrained environments and hardware support lists. Many users adopt fancyss to turn relatively cheap consumer routers into censorship-resilient gateways, avoiding separate proxy appliances. -
22
IP-Array
An iptables IPv4 firewall and traffic shaping program
A Linux IPv4 iptables firewall and traffic shaper. It allows flexible rule creation, while also shipping with presets for common needs. Rules are written in simple XML, allowing various ways to group and nest the arguments. An interactive mode is available in order to build configuration files in a wizard based manner. Extensive documentation is also included. -
23
Verigio - Multi Port Forwarder
Simple software for port forwarding and routing w/o a hardware router
A multi functional tool for port forwarding offers a full matrix of capabilities for selecting network traffic by interface,MAC,IP,TCP,UDP and forwarding it to another interface,MAC,IP,TCP,UDP. Flexible rules allow to change specific attributes of the traffic leaving the rest intact. The port forwarding rules can be imported/exported into XML files. Vivid user interface indicates in real time which rules are triggered by the traffic. The program has its own proprietary traffic management engine (network device driver) which does not make changes to the operating system, instead it simply filters the traffic. ... -
24
Verigio - DNS Proxywall / DNS Firewall
One of the most advanced DNS Proxy and DNS Firewall in one product.
It is a versatile DNS Proxy server with DNS firewall which filters DNS traffic between local computer and DNS servers with flexible rules, supports blocking by IP geography, caching, import/export rules into XML. With a click of a button acts as a DNS proxy (or DNS server), supports multiple client authentication methods, calculates statistics for DNS servers and proxy clients, supports load balancing between multiple upstream DNS servers. -
25
OWASP ModSecurity CRS
OWASP ModSecurity Core Rule Set (CRS) Project
...It focuses on broad protection—SQL injection, cross-site scripting, local/remote file inclusion, command injection, and protocol violations—without requiring app-specific knowledge. Rules are organized into paranoia levels so operators can tune detection aggressiveness and balance false positives against coverage. An anomaly-scoring model accumulates rule hits per request, enabling nuanced blocking thresholds and easier incident triage. The project ships with extensive documentation, exclusion packages, and testing tools to help tailor deployment for frameworks, CDNs, and APIs. ...
