Search Results for "host based firewall"
Sort By:
Showing 533 open source projects for "host based firewall"
View related business solutions-
Build Agents and Models on One PlatformGemini Enterprise Agent Platform is Google Cloud's comprehensive platform for developers to build, scale, govern, and optimize agents and models. Choose from Google's most advanced models and third-party models like Anthropic's Claude Model Family.
-
Save Up to 91% on Cloud Compute With Spot VMsRun batch jobs at 60-91% off with Spot VMs. Long-running workloads get automatic discounts with sustained use.
-
1
OpenSnitch
OpenSnitch is a GNU/Linux port of the Little Snitch firewall
OpenSnitch is a GNU/Linux port of the Little Snitch firewall. You can launch the GUI from the icon or from the system menu. The daemon will start intercepting connections, prompting you to allow or deny them. If you don't apply an action, after 15 seconds (configurable) it'll apply the default action configured. When you open the GUI, you'll see all the connections and processes that the daemon has intercepted. -
2
SafeLine
Serve as a reverse proxy to protect your web services from attacks
SafeLine is a self-hosted WAF(Web Application Firewall) to protect your web apps from attacks and exploits. A web application firewall helps protect web apps by filtering and monitoring HTTP traffic between a web application and the Internet. It typically protects web apps from attacks such as SQL injection, XSS, code injection, os command injection, CRLF injection, LDAP injection, XPath injection, RCE, XXE, SSRF, path traversal, backdoor, brute force, HTTP-flood, bot abuse, among others. By... -
3
NetBird
Connect your devices into a secure WireGuard-based overlay network
NetBird is an open-source solution that builds a WireGuard®-based overlay network enabling seamless, encrypted peer-to-peer connectivity without the complexity of firewall rules, port forwarding, or centralized VPN gateways. It integrates access control features such as SSO and MFA for secure, policy-driven networking. Every machine in the network runs NetBird Agent (or Client) that manages WireGuard. -
4
CrowdSec
Firewall able to analyze visitor behavior & provide adapted response
CrowdSec - an open-source massively multiplayer firewall able to analyze visitor behavior & provide an adapted response to all kinds of attacks. It also leverages the crowd power to generate a global IP reputation database to protect the user network. Crowdsec shouldn't, and didn't crash any production so far we know, but some features might be missing or undergo evolutions. IP Blocklists are limited to very-safe-to-ban IPs only (~5% of the global database so far, will grow soon). ... -
Train ML Models With SQL You Already KnowBuild and deploy ML models using familiar SQL. Automate data prep with built-in Gemini. Query 1 TB and store 10 GB free monthly.
-
5
xxh
Bring your favorite shell wherever you go through the ssh
You stuffed the command shell with aliases, tools and colors but you lose it all when using ssh. The mission of xxh is to bring your favorite shell wherever you go through ssh without root access and system installations. Preparing portable shells and plugins occurs locally and then xxh uploads the result to the host. No installations or root access on the host is required. Security and host environment are a prime focus. No blindfold copying config files from local to the remote host.... -
6
ClusterSSH (cssh)
Cluster SSH - Cluster Admin Via SSH
ClusterSSH is a tool to manage simultaneous interactive sessions across multiple SSH-accessible hosts. It opens one master terminal and many child terminal windows (or tabs), sending the same keystrokes to all clients while allowing isolated input per host. This is useful when orchestrating repetitive tasks—such as rolling updates or diagnosing distributed systems—without copying and pasting into each window. The interface supports splitting windows, delayed input modes, and host groupings to make clusters more manageable. It also includes features like per-host prompt prefixing or context awareness to avoid confusion in mixed environments. ... -
7
frp
A Fast Reverse Proxy
frp stands for exactly what it is: a fast reverse proxy. It helps you expose a local server behind a NAT or firewall to the Internet. It is currently under development, but already supports TCP and UDP, as well as HTTP and HTTPS protocols where requests can be forwarded to internal services by domain name. It also has a P2P connect mode and many other nifty features. These include configuration files, environment variables, a dashboard that shows you frp's status and proxies' statistics... -
8
Web-based Firewall Log Analyzer
Firewall log analyzer
Flexible web-based firewall log analyzer, supporting netfilter and ipfilter, ipfw, ipchains, cisco routers and Windows XP system logs, and mysql or postgresql database logs using the iptables ULOG or NFLOG target of netfilter others mapped to the ulogd format with a view. Fully supports IPv6 for database logs, and netfilter and ipfilter system file logs. -
9
Netdeep Secure Firewall
Next Generation Open Source Firewall
Netdeep Secure is a Linux distribution with focus on network security. Is a Next Generation Open Source Firewall, which provides virtually all perimeter security features that your company may need. It offers Web content filters, ensuring better performance of the network, allowing users to use the service efficiently and securely, providing a deep control of the use of the Web access service, blocking access to unwanted websites, Virus, Spam, Applications and intrusion attempts. Its... -
Veeam Data Platform v13.1 - Get Your Free TrialTry Veeam Data Platform today. Experience the unified platform that's secure by design, portable by default, and proven to recover clean, fast, and anywhere.
-
10
ThreatMapper
Open source cloud native security observability platform
...It continues to monitor running applications against emerging software vulnerabilities and monitors the host and cloud configuration against industry-expert benchmarks. -
11
PatchMon
Linux Patch Monitoring Automation Platform
PatchMon is a centralized patch monitoring and management platform aimed at simplifying how administrators observe and manage package updates across diverse Linux server environments. It centralizes patch status information from many hosts into a single dashboard where users can view inventories of outdated packages, track repositories per host, and organize machines into logical groups for easier oversight. Agents installed on each server make outbound-only connections to the PatchMon server, improving security by avoiding open inbound ports, while the server side provides role-based access control, user management, and a REST API for integrations. PatchMon also supports a customizable dashboard, detailed per-host metrics, and one-line installers for quick self-hosted deployment, making it suitable for both small clusters and larger fleets. -
12
DOSBox Staging
DOSBox Staging is a modern continuation of DOSBox
DOSBox Staging is a modern continuation of DOSBox, your existing configurations will continue to work, and you will have access to many advanced features. DOSBox Staging picks the best shader based on the emulated video mode and your host resolution, from 720p to 4K. -
13
Kevux Firewall
Provide basic firewall program for Kevux using FLL.
The Kevux Firewall program is one of the oldest Featureless Linux Library (FLL) programs. This project now exists outside of the FLL as its own distinct project and repository. -
14
OSX-KVM
Run macOS on QEMU/KVM
OSX-KVM is a collection of scripts, firmware files, and documentation for running macOS virtual machines on Linux with QEMU and KVM. It uses OpenCore and OVMF components to create a Virtual Hackintosh without requiring a Mac host. The project can fetch installers for multiple macOS generations, prepare installation media, and guide users through the complete virtual machine setup. It supports Intel VT-x and AMD SVM hosts, although newer macOS releases impose additional CPU instruction... -
15
Nipe
An engine to make Tor network your default gateway
Nipe is a Perl-based engine whose primary aim is to make the Tor network act as the default gateway for outgoing traffic. In practice, it configures system firewall rules (iptables) and network routing so that almost all IPv4 traffic is redirected through Tor. The tool provides commands such as install, start, stop, restart, and status to manage its behavior. -
16
go-libp2p
libp2p implementation in Go
go-libp2p is the official Go implementation of the libp2p networking stack, a modular and extensible framework for peer-to-peer communication. Used in systems like IPFS and Filecoin, go-libp2p abstracts away the complexity of building decentralized networks by handling discovery, transport, security, and multiplexing layers. Its modular architecture allows developers to customize network behavior while maintaining interoperability with other libp2p implementations. It empowers developers to... -
17
Mox
modern full-featured open source secure mail server
Mox is a modern email server written in Go that aims to be simple, secure, and standards-compliant. It includes SMTP, IMAP, DMARC, SPF, DKIM, and other protocols required to host email services. Designed for self-hosters and developers who want better control over their email stack, Mox focuses on code clarity, privacy, and correctness, offering a complete mail server solution that is easy to set up and maintain. -
18
Bottlerocket OS
An operating system designed for hosting containers
Bottlerocket is a free and open-source Linux-based operating system meant for hosting containers. Bottlerocket focuses on security and maintainability, providing a reliable, consistent, and safe platform for container-based workloads. This is a reflection of what we've learned building operating systems and services at Amazon. The base operating system has just what you need to run containers reliably, and is built with standard open-source components. -
19
V2Ray
Shell script that aims to make installing and managing V2Ray
This repository offers an interactive, one-command script that installs and manages a V2Ray-based proxy service on common Linux distributions. It automates routine but error-prone steps such as fetching the latest binaries, generating credentials (for example, UUIDs), writing JSON config files, opening firewall ports, and setting up a systemd service for automatic start. The script includes a menu-driven manager to modify ports, protocols, and users, restart the service, or view logs without hand-editing configuration files. ... -
20
Zipkin
Distributed tracing system to gather timing data
Zipkin is a distributed tracing system. It helps gather timing data needed to troubleshoot latency problems in service architectures. Features include both the collection and lookup of this data. If you have a trace ID in a log file, you can jump directly to it. Otherwise, you can query based on attributes such as service, operation name, tags and duration. Some interesting data will be summarized for you, such as the percentage of time spent in a service, and whether or not operations... -
21
SCP for GitHub Actions
GitHub Action that copy files and artifacts via SSH
SCP for GitHub Actions is a GitHub Action for copying files and build artifacts to remote servers over SSH. It is useful for deployment workflows that need to move compiled assets, configuration files, static sites, or release packages after a build. The action supports both password-based access and SSH key authentication, making it adaptable to different server setups. It can upload to one server or multiple servers, and it includes options for proxies, timeouts, path handling, and target... -
22
Kraken
P2P Docker registry capable of distributing TBs of data in seconds
Kraken is a P2P-powered Docker registry that focuses on scalability and availability. It is designed for Docker image management, replication, and distribution in a hybrid cloud environment. With pluggable backend support, Kraken can easily integrate into existing Docker registry setups as the distribution layer. Kraken has been in production at Uber since early 2018. In our busiest cluster, Kraken distributes more than 1 million blobs per day, including 100k 1G+ blobs. At its peak... -
23
WGCLOUD
Visibility into servers, applications, and infrastructure
...Built on a Spring Boot microservices foundation with an agent-server model, the system emphasizes rapid deployment, minimal configuration overhead, and automated operation for large-scale environments. It collects extensive host metrics such as CPU usage, temperature, memory utilization, disk performance, network throughput, and hardware health while also supporting monitoring of processes, containers, ports, and databases. The platform includes advanced operational capabilities such as web-based SSH access, batch command execution, and visual topology generation, making it more than a passive monitoring tool. wgcloud is intended for private, self-hosted deployments where organizations want full control over monitoring data without relying on external cloud services. -
24
Dirty Frag
Universal Linux LPE
Dirty Frag is a low-level networking and packet manipulation project focused on fragmentation-based techniques for bypassing filters, firewalls, or DPI systems during network communication. The project explores how fragmented packets can be crafted and transmitted to alter how traffic is interpreted by inspection systems or network devices. It is primarily aimed at networking enthusiasts, security researchers, and developers experimenting with packet-level behavior and protocol edge cases.... -
25
dockprom
Docker hosts and containers monitoring with Prometheus, Grafana, etc.
A monitoring solution for Docker hosts and containers with Prometheus, Grafana, cAdvisor, NodeExporter and alerting with AlertManager. You can change the credentials in the compose file or by supplying the ADMIN_USER and ADMIN_PASSWORD environment variables on compose up. Grafana is preconfigured with dashboards and Prometheus as the default data source. The Docker Host Dashboard shows key metrics for monitoring the resource usage of your server. Server uptime, CPU idle percent, number of...
