Search Results for "host based firewall"
Sort By:
Showing 167 open source projects for "host based firewall"
View related business solutions-
Demo Series - Small Business Backup By VeeamWatch this on-demand demo series and learn how to protect your Microsoft 365 data with clear, simple, actionable steps that are easy to implement for businesses of all sizes.
-
Go from Code to Production URL in SecondsSkip the Kubernetes configs. Cloud Run handles HTTPS, scaling, and infrastructure automatically. Two million requests free per month.
-
1
Self Host Blocks
Modular server management based on NixOS modules
SHB's (Self Host Blocks) is yet another server management tool whose goal is to provide better building blocks for self-hosting. Indeed, SHB provides opinionated building blocks fitting together to self-host any service you'd want. Some common services are provided out of the box. SHB's goal is to make these building blocks plug-and-play. To achieve this, SHB pioneers contracts that allow you, the final user, to be more in control of which pieces go where. The promise here is to let you... -
2
SSH for GitHub Actions
GitHub Actions for executing remote ssh commands
...The project is built with Go and uses drone-ssh, giving it a practical foundation for flexible SSH execution. It supports common connection methods, including password-based access and private key authentication. It can run commands on one host or multiple hosts, including setups that require different ports or synchronous execution. It also supports proxy and jump host workflows, making it useful for more complex infrastructure environments. Developers can pass environment variables, run scripts from files, capture command output, and add security checks such as host fingerprint verification. -
3
Toolbx Linux
Tool for interactive command line environments on Linux
...This is particularly useful on OSTree-based operating systems like Fedora CoreOS and Silverblue. The intention of these systems is to discourage installation of software on the host, and instead install software as (or in) containers — they mostly don't even have package managers like DNF or YUM. This makes it difficult to set up a development environment or troubleshoot the operating system in the usual way. -
4
Symfony Security Bundle
Integration of the Security component into the Symfony framework
Symfony Security Bundle is a powerful tool for adding authentication and authorization to Symfony applications. It provides mechanisms for managing user roles, password encryption, and access control. The bundle supports various authentication methods, including form login, HTTP basic auth, OAuth, and more. It also integrates with Symfony’s firewall and access control systems for secure application development. -
Train ML Models With SQL You Already KnowBuild and deploy ML models using familiar SQL. Automate data prep with built-in Gemini. Query 1 TB and store 10 GB free monthly.
-
5
Micro App
A simple, efficient and powerful micro front-end framework
Micro-app is a web component-based micro-frontend framework from JD Retail. It enables sandboxed embedding of independent micro-apps into host pages, with automatic JS/style isolation, element segregation, preloading, and inter-app communication—all independent of framework. Provides plugin architecture and works across any frontend tech stack. -
6
agentOS
A portable open-source operating system for agents. ~6 ms coldstarts
agentOS is a portable, open-source runtime environment designed specifically for executing AI agents efficiently, acting as a lightweight operating system tailored for agent-based workloads. It is built using WebAssembly and V8 isolates to provide secure, sandboxed execution without the overhead of traditional containers or virtual machines. The system is optimized for extremely fast startup times, with near-instant cold starts that allow agents to be created and executed in milliseconds. AgentOS is designed to run directly within an application process, enabling agents to interact with host functions and resources without network overhead or complex orchestration layers. ... -
7
macOS (Dockur)
macOS inside a Docker container
dockur/macos packages a macOS virtual machine inside a Docker container using QEMU/KVM, making it easy to spin up a macOS environment on a Linux host. It provides sensible defaults for firmware, disk, and devices, plus a browser-accessible VNC console so you can complete installation and interact with the desktop remotely. Typical inputs—like environment variables and mounted volumes—control edition choice, storage persistence, and resource sizing, which makes runs repeatable and disposable.... -
8
Kevux Firewall
Provide basic firewall program for Kevux using FLL.
The Kevux Firewall program is one of the oldest Featureless Linux Library (FLL) programs. This project now exists outside of the FLL as its own distinct project and repository. -
9
IntelliJ Community Edition
IntelliJ IDEA & IntelliJ Platform
...From this base, JetBrains builds full editions (Ultimate) by layering proprietary features for enterprise frameworks and integrations. IntelliJ Community supports multiple JVM-based languages (Java, Kotlin, Scala, Groovy) and serves as a host for plugin ecosystems that add support for web, database, and cloud tooling. The project emphasizes performance, modularity, and a responsive user experience, maintaining a codebase that balances long-term maintainability with cutting-edge developer features. -
Build Agents and Models on One PlatformGemini Enterprise Agent Platform is Google Cloud's comprehensive platform for developers to build, scale, govern, and optimize agents and models. Choose from Google's most advanced models and third-party models like Anthropic's Claude Model Family.
-
10
workerd
The JavaScript / Wasm runtime that powers Cloudflare Workers
workerd is the server runtime that powers Cloudflare Workers — a modern, standards-aligned JavaScript and WebAssembly execution environment that can be run outside of Cloudflare’s global edge network as a standalone server or proxy. Designed to host serverless applications written to the Workers platform API (including fetch() and Web standard libraries), workerd enables developers to self-host edge-style workloads in local data centers or development environments, or to test Workers code offline before deploying to the cloud. It emphasizes performance, predictable deployment semantics, and secure isolation, and it uses a capability-based configuration model to bind external resources and services into worker applications in a composable way. ... -
11
Wasm3
A fast WebAssembly interpreter and the most universal WASM runtime
...The project emphasizes universality, meaning it can run consistently across architectures without requiring platform-specific optimizations or dependencies. Wasm3 also integrates cleanly into host applications, allowing developers to embed WebAssembly execution into their systems with minimal overhead. -
12
edgetunnel
edgetunnel 2.0 VLESS/Trojan
edgetunnel is a modified version of a serverless tunnelling solution designed to run on platforms like Cloudflare Workers and Pages, enabling protocols such as VLESS and Trojan to be exposed through edge-functions rather than traditional servers. The project’s fork by cmliu emphasizes conversion of protocol configuration (especially VLESS) into subscription links, so that users can deploy and then generate “Clash” or “Sing-box” compatible subscription content easily. It provides a... -
13
Wasmi
Efficient and versatile WebAssembly interpreter for embedded systems
wasmi is a lightweight WebAssembly interpreter written in Rust that is designed to execute Wasm binaries efficiently in constrained or embedded environments. Unlike JIT-based runtimes, wasmi focuses on interpretation, prioritizing portability, determinism, and low resource usage over maximum raw performance. It is particularly well-suited for blockchain systems, embedded devices, and other contexts where predictable execution and minimal dependencies are critical. The runtime implements the WebAssembly specification and provides a safe execution environment with strict sandboxing, ensuring that untrusted code cannot access host resources without explicit permission. wasmi also emphasizes modularity and embeddability, allowing developers to integrate it into their applications with fine-grained control over execution behavior. ... -
14
SpaceWasm
A flight-compliant WebAssembly interpreter
SpaceWasm is a NASA JPL WebAssembly interpreter designed for resource-constrained spacecraft systems. It implements a constrained form of the WebAssembly 1.0 specification for executing portable onboard programs. A streaming decoder reads modules in chunks, validates them in one pass, and converts instructions into an interpretation-focused intermediate representation. Its custom memory model uses fixed-size pages to provide deterministic allocation behavior and avoid panic on allocation... -
15
Sensu Go
Simple. Scalable. Multi-cloud monitoring
...The shift from static to dynamic infrastructure requires a change in approach to monitoring, from host-based to functional role-based. Connectivity moves from remote polling to publish-subscribe, the control plane moves from point-and-click interfaces to infrastructure as code workflows and self-service developer APIs. -
16
Symfony Security Core
Symfony Security Component - Core Library
Part of the Symfony framework, the Security Core component provides the foundational tools for managing authentication, authorization, and access control in PHP applications. It’s framework-agnostic and can be used independently in any PHP project. -
17
ECMAScript
Status, process, and documents for ECMA-262
The most accurate and up-to-date ECMAScript specification. It contains the content of the most recent yearly snapshot plus any finished proposals (those that have reached Stage 4 in the proposal process and thus are implemented in several implementations and will be in the next practical revision) since that snapshot was taken. This Ecma Standard defines the ECMAScript 2022 Language. It is the twelfth edition of the ECMAScript Language Specification. Since publication of the first edition in... -
18
JupyterLite
Wasm powered Jupyter running in the browser
JupyterLite is a browser-based distribution of the Jupyter ecosystem that enables interactive computing entirely within a web browser without requiring a backend server. Built using JupyterLab components and powered by WebAssembly technologies, it allows users to run Python and other language kernels directly in the browser through tools like Pyodide or Xeus. -
19
cuda-oxide
cuda-oxide is an experimental Rust-to-CUDA compiler
...The project compiles standard Rust code directly to PTX, avoiding DSLs, source-to-source translation, or foreign-language bindings. It supports a single-source programming style where host and device code can live together and be built through Cargo-oriented tooling. cuda-oxide is still experimental, so it is best suited for research, early exploration, and developers interested in Rust-based GPU programming. Its main value is giving Rust developers a more direct path into NVIDIA GPU kernels while preserving familiar Rust syntax and tooling concepts. -
20
Gramine
A library OS for Linux multi-process applications
Gramine is a lightweight library-operating system (Library OS) designed to run unmodified Linux applications with minimal dependencies on the host OS, and to offer enhanced isolation and portability. It was formerly known as Graphene, but the project renamed to Gramine to avoid naming conflicts and to reflect its broader ambition beyond the original research prototype. The idea is that instead of running a full guest OS in a VM, you embed your application inside Gramine, which handles the... -
21
HestiaCP
Hestia Control Panel | A lightweight and powerful control panel
HestiaCP is an open-source web hosting control panel designed to manage web servers efficiently. It provides a simple and intuitive graphical interface to manage domains, web hosting, databases, email accounts, and other server-related tasks. HestiaCP is lightweight and based on the Vesta Control Panel but offers more modern features and improved security. It supports popular web servers like Nginx and Apache, making it suitable for personal and small business hosting environments. -
22
gVisor
Application Kernel for Containers
gVisor is an application kernel developed by Google that provides a strong layer of isolation between applications and the host operating system. Written in Go, it implements a Linux-compatible system call interface that runs entirely in user space, creating a secure sandboxed environment for containers. Unlike traditional virtual machines or lightweight syscall filters, gVisor follows a third approach that offers many of the security benefits of virtualization while maintaining the speed,... -
23
Sysbox
Open-source, next-generation "runc" that empowers rootless containers
An open-source, next-generation "runc" that empowers rootless containers to run workloads such as Systemd, Docker, and Kubernetes, just like VMs. Think of it as a "container supercharger": it enables your existing container managers/orchestrators (e.g., Docker, Kubernetes, etc.) to deploy containers that have hardened isolation and can run almost any workload that runs in VMs. Sysbox does this by making the container resemble a VM-like environment as much as possible, using advanced OS... -
24
GopherLua
GopherLua: VM and compiler for Lua in Go
...GopherLua has the same goal as Lua: To be a scripting language with extensible semantics. It provides Go APIs that allow you to easily embed a scripting language to your Go host programs. The stack-based API like the one used in the original Lua implementation will cause a performance improvement in GopherLua (It will reduce memory allocations and concrete type <-> interface conversions). GopherLua API is not a stack-based API. GopherLua gives preference to user-friendliness over performance. GopherLua APIs perform in much the same way as Lua, but the stack is used only for passing arguments and receiving returned values. -
25
AndroidLibXrayLite
Lightweight Android library that bundles the Xray networking core
...By exposing the core as an AAR with per-ABI artifacts, it keeps application footprints small while supporting common CPU architectures. The library abstracts process management and log streaming so host apps can control lifecycles and capture diagnostics. It’s particularly useful for developers who want to integrate secure, rule-based proxying into their own Android apps without re-implementing the native glue. With a focus on stability and easy updates, it shortens the path from concept to a working in-app networking stack.
