Search Results for "rules"
Sort By:
Showing 58 open source projects for "rules"
View related business solutions-
$300 Free Credits for Your Google Cloud ProjectsLaunch your next project with $300 in free Google Cloud credits—no strings attached. Test, build, and deploy without risk. Use your credits across the entire Google Cloud platform to find what works best for your needs. After your credits are used, continue with always-free tier services. Only pay when you're ready to scale. Sign up in minutes and start exploring.
-
Stop Cyber Threats with VM-Series Next-Gen Firewall on AzureGain integrated visibility across all traffic in a single pass. Deploy Palo Alto Networks VM-Series to determine application identity and content while automating security policy updates via rich APIs.
-
1
simplewall
Simple tool to configure Windows Filtering Platform (WFP)
simplewall is an open-source Windows application that provides a user-friendly firewall control interface powered by Windows Filtering Platform (WFP), enabling users to block or allow outgoing and incoming network connections without diving into complex OS settings or command-line tools. The app presents a clean, intuitive UI where users can define rules based on process names, IP addresses, ports, and protocols, making it possible to restrict apps from accessing the internet or control specific traffic flows with fine granularity. Because simplewall leverages WFP directly, it operates at a low level in the network stack, ensuring reliable enforcement of rules system-wide while remaining lightweight. ... -
2
Nipe
An engine to make Tor network your default gateway
Nipe is a Perl-based engine whose primary aim is to make the Tor network act as the default gateway for outgoing traffic. In practice, it configures system firewall rules (iptables) and network routing so that almost all IPv4 traffic is redirected through Tor. The tool provides commands such as install, start, stop, restart, and status to manage its behavior. When “start” is issued, it sets up the necessary rules; when “stop” is used, it attempts to remove those rules. Nipe currently operates over IPv4 and does not yet support IPv6, meaning that users with IPv6 connectivity may bypass Tor routing. ... -
3
Netmaker
Netmaker makes networks with WireGuard
...It blows past any NAT’s, firewalls, or subnets that stand between them. Devices are scattered across data centers, offices, clouds, clusters, and more. Distinct networks separate them, each with different management rules. Connecting machines across environments means setting up gateways, firewalls, and tunnels, often manually. -
4
FireHOL
A firewall for humans.
...FireQOS is a program that sets up traffic shaping from an easy-to-understand and flexible configuration file. Both programs abstract away the differences between IPv4 and IPv6. so you can concentrate on the rules you want. You can apply rules for IPv4 or IPv6, or both, as you need. -
Error to trace to log to deploy. One click. No SSH.AppSignal links every error to the trace, the trace to the log, the log to the deploy that shipped it.
-
5
Antrea
Kubernetes networking based on Open vSwitch
Antrea is a Kubernetes-native project that implements the Container Network Interface (CNI) and Kubernetes NetworkPolicy thereby providing network connectivity and security for pod workloads. Antrea extends the benefit of programmable networks from Open vSwitch (OVS) to Kubernetes. Antrea simplifies Kubernetes networking across differing clouds and operating systems with a unified network stack built atop Open vSwitch. Antrea is designed to ease deployment, operations and troubleshooting by... -
6
NGINX Ingress Controller
NGINX Ingress Controller for Kubernetes
ingress-nginx is an Ingress controller for Kubernetes using NGINX as a reverse proxy and load balancer. It is built around the Kubernetes Ingress resource, using a ConfigMap to store the NGINX configuration. The goal of this Ingress controller is the assembly of a configuration file (nginx.conf). The main implication of this requirement is the need to reload NGINX after any change in the configuration file. Though it is important to note that we don't reload Nginx on changes that impact only... -
7
glider
glider is a forward proxy with multiple protocols support
...Load balancing with the following scheduling algorithm, rr: round robin, ha: high availability, lha: latency based high availability, dh: destination hashing. Rule & priority based forwarder choosing: Config Examples. DNS forwarding server. Force upstream querying by TCP. Association rules between dns and forwarder choosing. Association rules between dns and ipset. dns cache support. Custom dns record. IPSet management (linux kernel version >= 2.6.32). Add ip/cidrs from rule files on startup. Add resolved ips for domains from rule files by dns forwarding server. Serve HTTP and socks5 on the same port. Periodical availability checking for the forwarder. -
8
NetBird
Connect your devices into a secure WireGuard-based overlay network
NetBird is an open-source solution that builds a WireGuard®-based overlay network enabling seamless, encrypted peer-to-peer connectivity without the complexity of firewall rules, port forwarding, or centralized VPN gateways. It integrates access control features such as SSO and MFA for secure, policy-driven networking. Every machine in the network runs NetBird Agent (or Client) that manages WireGuard. Every agent connects to Management Service that holds network state, manages peer IPs, and distributes network updates to agents (peers). ... -
9
Nezha Monitoring
Self-hosted, lightweight server and website monitoring and O&M tool
Nezha is a self-hosted monitoring and alerting tool for servers, providing real-time tracking and notifications on server health and performance. -
Train ML Models With SQL You Already KnowBuild and deploy ML models using familiar SQL. Automate data prep with built-in Gemini. Query 1 TB and store 10 GB free monthly.
-
10
Grafana Alloy
OpenTelemetry Collector distribution with programmable pipelines
Grafana Alloy is an open source OpenTelemetry Collector distribution with built-in Prometheus pipelines and support for metrics, logs, traces, and profiles. Grafana Alloy is Grafana Labs’ distribution of the OpenTelemetry Collector. It is an OTLP-compatible collector with built-in Prometheus optimizations that also support signals across metrics, logs, traces, and profiles. Alloy was started at Grafana Labs and announced at GrafanaCON in 2024. The mission of the project is to create the best... -
11
Apache HertzBeat
Apache HertzBeat(incubating) is a real-time monitoring system
Apache HertzBeat (incubating) is an easy-to-use, open source, real-time monitoring system with an agentless, high-performance cluster, Prometheus-compatible, and offers powerful custom monitoring and status page building capabilities. Hertzbeat is an open-source monitoring and alerting platform for IT infrastructure, including servers, networks, and applications. -
12
Apple WLOC
Modify Apple network location (gs-loc) to return coordinates
...The picker can parse location links from Apple Maps, Google Maps, Amap, Baidu Maps, and coordinate text. Overall, it is a specialized iOS networking and location-testing utility for users who understand proxy rules, MITM certificates, and the limits of network-based positioning. -
13
BFE
A modern layer 7 load balancer from baidu
...BFE supports HTTP, HTTPS, SPDY, HTTP2, gRPC, WebSocket, TLS, FastCGI, etc. Future support is planned for HTTP/3. BFE provides an advanced domain-specific language to describe routing rules which are easy to understand and maintain. BFE supports global load balancing and distributed load balancing for zone aware balancing, zone level failure resilience, overload protection etc. BFE provides a rich set of plugins for traffic management, security, observability, etc. BFE includes detailed built-in metrics for all subsystems. ... -
14
UbiquitiWGWizard
Generate Wireguard VPN configurations for Ubiquiti Routers
UbiquitiWgWizard automates the creation of: • WireGuard interface configuration for EdgeOS • Firewall rules (WG-IN, WG-LOCAL, WAN->LOCAL) • NAT masquerade rules for VPN clients • Client configuration files (.conf) • Optional QR codes for mobile clients • A step-by-step HOW_TO_APPLY_CONFIG.txt document The wizard prompts for: • Router model • WAN interface • LAN interface(s) • Split tunnel vs full tunnel (per client) • Public endpoint / DDNS • Number of clients • Optional QR code generation All output is generated safely and never applied automatically. ________________________________________ Supported Router Models The wizard includes templates for: • ER-4 • ER-6P • ER-X • ER-12 You may select any physical or logical interface supported by your router (eth ports, switch interfaces, etc.). ________________________________________ -
15
Cloud Scanner of Death is a professional-grade cloud security assessment tool designed to identify vulnerabilities, misconfigurations, and compliance issues across AWS, Azure, and Google Cloud Platform (GCP) environments. The tool provides comprehensive security scanning with detailed reporting and remediation guidance.
-
16
IP64Bridge
A TCP/UDP packet forwarding tool for IPv6 and IPv4
Use this program to enable IPv6 remote multiplay for games that support only IPv4 or local LAN connections. It is also possible to customize the port forwarding/mapping rules. -
17
FancySS
fancyss is a project for bypassing the Great Firewall (GFW)
...V2Ray) to circumvent firewall or censorship (“GFW” in the Chinese context). Because it integrates into the router’s firmware environment, fancyss automates configuration, routing, and firewall rules to minimize manual tinkering. It supports multiple architectures and firmware versions, though some submodules or variants (e.g. “fancyss_hnd”) are optimized for specific chipsets. The project also maintains offline packages for constrained environments and hardware support lists. Many users adopt fancyss to turn relatively cheap consumer routers into censorship-resilient gateways, avoiding separate proxy appliances. -
18
Verigio - Multi Port Forwarder
Simple software for port forwarding and routing w/o a hardware router
A multi functional tool for port forwarding offers a full matrix of capabilities for selecting network traffic by interface,MAC,IP,TCP,UDP and forwarding it to another interface,MAC,IP,TCP,UDP. Flexible rules allow to change specific attributes of the traffic leaving the rest intact. The port forwarding rules can be imported/exported into XML files. Vivid user interface indicates in real time which rules are triggered by the traffic. The program has its own proprietary traffic management engine (network device driver) which does not make changes to the operating system, instead it simply filters the traffic. ... -
19
Verigio - DNS Proxywall / DNS Firewall
One of the most advanced DNS Proxy and DNS Firewall in one product.
It is a versatile DNS Proxy server with DNS firewall which filters DNS traffic between local computer and DNS servers with flexible rules, supports blocking by IP geography, caching, import/export rules into XML. With a click of a button acts as a DNS proxy (or DNS server), supports multiple client authentication methods, calculates statistics for DNS servers and proxy clients, supports load balancing between multiple upstream DNS servers. -
20
OWASP ModSecurity CRS
OWASP ModSecurity Core Rule Set (CRS) Project
...It focuses on broad protection—SQL injection, cross-site scripting, local/remote file inclusion, command injection, and protocol violations—without requiring app-specific knowledge. Rules are organized into paranoia levels so operators can tune detection aggressiveness and balance false positives against coverage. An anomaly-scoring model accumulates rule hits per request, enabling nuanced blocking thresholds and easier incident triage. The project ships with extensive documentation, exclusion packages, and testing tools to help tailor deployment for frameworks, CDNs, and APIs. ... -
21
HttpRouter
A high performance HTTP request router that scales well
...A compressing dynamic trie (radix tree) structure is used for efficient matching. With other routers, like http.ServeMux, a requested URL path could match multiple patterns. Therefore they have some awkward pattern priority rules, like longest match or first registered, first matched. By design of this router, a request can only match exactly one or no route. As a result, there are also no unintended matches, which makes it great for SEO and improves the user experience. -
22
Falcon+
An open-source and enterprise-level monitoring system
...Users can collect their customized metrics by writing plugins or just simply run a script/program to relay metrics to falcon-agent. For easier management of alerting rules, Open-Falcon supports strategy templating, inheritance, and multiple alerting method, and callback for recovery. Open-Falcon could present multi-dimension graph, including user-defined dashboard/screen. -
23
WinFire
Create and delete block rules for the Windows firewall
WinFire is a batch file (CMD line script) that allows fast and simple creation of blocking rules on executable applications, DLL's and any other file type. Rules will be created using the management prefix 'WinFire' for single application executable or all application executables/'types defined' within a directory and subdirectories (recursive). * These block rules are shown ticked/selected in "...Windows Firewall\Allowed Programs". -
24
Personal Renamer - Easy file renaming
Portable Bulk File Renamer, Folder monitor. All in one.
Renames files just about any way you like. Monitor folders for files and auto rename(Have program rename images when downloaded). Undo, Save settings, Imageview,Drag-drop, and more. File Management made easy. Very good for those pesky PDFs from customer firms that need cleaning. New features on their way, Anyone need a Folder renamer? -
25
Scrollout F1
An easy-to-use anti-spam email gateway
... • Built-in multilayer security levels make configuration effort equal to a car radio. • It combines simplicity with effective protection using powerful open source with additional set of rules & filters. • Available as 64bit: - ISO image (Internet connection required during installation) - install from scratch (Internet connection required during installation). • Minimum Requirements (for 5,000 messages/day): 1 GB of RAM 30 GB storage drive 1 Processor x86/AMD64 1 Ethernet x 1 IPv4 address UDP ports: 53 123 4500 6277 24441 TCP ports: 25 80 443 2703
