Search Results for "firewalls"
Sort By:
Showing 251 open source projects for "firewalls"
View related business solutions-
$300 Free Credits to Build on Google CloudPut your $300 in credit toward real workloads, then keep building with free monthly usage for 20+ products. No commitment and no charge until you upgrade.
-
MongoDB Atlas runs apps anywhereMongoDB Atlas gives you the freedom to build and run modern applications anywhere—across AWS, Azure, and Google Cloud. With global availability in over 115 regions, Atlas lets you deploy close to your users, meet compliance needs, and scale with confidence across any geography.
-
1
ModSecurity
Cross platform web application firewall (WAF) engine for Apache
ModSecurity is an open-source, cross-platform web application firewall (WAF) engine for Apache, IIS and Nginx that is developed by Trustwave's SpiderLabs. It has a robust event-based programming language that provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analysis. Libmodsecurity is one component of the ModSecurity v3 project. The library codebase serves as an interface to ModSecurity Connectors taking in web... -
2
Dirty Frag
Universal Linux LPE
Dirty Frag is a low-level networking and packet manipulation project focused on fragmentation-based techniques for bypassing filters, firewalls, or DPI systems during network communication. The project explores how fragmented packets can be crafted and transmitted to alter how traffic is interpreted by inspection systems or network devices. It is primarily aimed at networking enthusiasts, security researchers, and developers experimenting with packet-level behavior and protocol edge cases. dirtyfrag emphasizes lightweight execution and direct control over fragmentation workflows rather than providing a full networking suite. ... -
3
ngx_waf
Handy, High performance, ModSecurity compatible Nginx firewall module
Handy, High-performance Nginx firewall module. Such as black and white list of IPs or IP range, uri black and white list, and request body black list, etc. Directives and rules are easy to write and readable. The IP detection is a constant-time operation. Most of the remaining inspections use caching to improve performance. Compatible with ModSecurity's rules, you can use OWASP ModSecurity Core Rule Set. Supports verifying Google, Bing, Baidu and Yandex crawlers and allowing them... -
4
Serverless Appsync Plugin
Serverless plugin for appsync
Deploy AppSync API's in minutes using this Serverless plugin. This plugin exports some handy variables that you can use in your yml files to reference some values generated by CloudFormation. This plugin adds some useful CLI commands. AppSync is currently using an older version of the Graphql Specs. This plugin intends to use modern schemas for future-proofing. Incompatibilities will either be dropped or attempted to be fixed. Old-style descriptions (using #) are supported by AppSync but... -
Paessler: Easy to Use With Enterprise Power. Free TrialYou shouldn't have to choose between a monitoring tool that's easy to use and one that's powerful enough for a complex environment. PRTG's low-code interface lets any admin build dashboards, set alerts and monitor devices without scripting, while custom sensors and full API access are there when your team needs deeper control. One platform, no compromise. Download a free 30-day trial now.
-
5
WAFW00F
WAFW00F allows one to identify and fingerprint Web App Firewall
The Web Application Firewall Fingerprinting Tool. Sends a normal HTTP request and analyses the response; this identifies a number of WAF solutions. If that is not successful, it sends a number of (potentially malicious) HTTP requests and uses simple logic to deduce which WAF it is. If that is also not successful, it analyses the responses previously returned and uses another simple algorithm to guess if a WAF or security solution is actively responding to our attacks. For further details,... -
6
Open Source API Firewall by Wallarm
Fast and light-weight API proxy firewall for request and response
API Firewall is a high-performance proxy with API request and response validation based on OpenAPI/Swagger schema. It is designed to protect REST API endpoints in cloud-native environments. API Firewall provides API hardening with the use of a positive security model allowing calls that match a predefined API specification for requests and responses, while rejecting everything else. -
7
Netmaker
Netmaker makes networks with WireGuard
...Netmaker is better, faster, and more secure. Netmaker automates a secure superhighway between devices, clouds, virtual machines, and servers using WireGuard. It blows past any NAT’s, firewalls, or subnets that stand between them. Devices are scattered across data centers, offices, clouds, clusters, and more. Distinct networks separate them, each with different management rules. Connecting machines across environments means setting up gateways, firewalls, and tunnels, often manually. -
8
WAF package for Laravel
Web Application Firewall (WAF) package for Laravel
This package intends to protect your Laravel app from different type of attacks such as XSS, SQLi, RFI, LFI, User Agent, and a lot more. It will also block repeated attacks and send notifications via email and/or slack when an attack is detected. Furthermore, it will log failed logins and block the IP after a number of attempts. Some middleware classes (i.e. Xss) are empty as the Middleware abstract class that they extend does all of the job, dynamically. In short, they all work. -
9
Tailscale
The easiest, most secure way to use WireGuard and 2FA
Tailscale is an open-source zero-configuration VPN and networking solution that makes it simple to create secure, private networks across devices by leveraging WireGuard under the hood. It lets users connect computers, servers, mobile devices, and cloud instances together with peer-to-peer encrypted tunnels without dealing with complex firewalls, NAT rules, or key distribution headaches. Instead of traditional VPN server infrastructure, Tailscale uses a coordination service to authenticate devices and exchange connection information, enabling automatic NAT traversal and minimal manual setup. The project includes a daemon (tailscaled) and a CLI tool that run on major operating systems, and it also forms the basis for the official clients on platforms like iOS and Android, though those have GUI wrappers not fully in this repository. -
Custom VMs From 1 to 96 vCPUs With 99.95% UptimeLive migration and automatic failover keep workloads online through maintenance. One free e2-micro VM every month.
-
10
Lantern
Tool to access videos, messaging, and other popular apps
Can't access your favorite apps? Download Lantern to easily access videos, messaging, and other popular apps while at school or work. Lantern is an application that allows you to bypass firewalls to use your favorite applications and access your favorite websites. Lantern does not cooperate with any law enforcement in any country. Lantern encrypts all of your traffic to blocked sites and services to protect your data and privacy. Lantern passed multiple third party white box security audits to ensure security of our code. ... -
11
Pangolin
Identity-Aware Tunneled Reverse Proxy Server with Dashboard UI
Pangolin is an open-source, self-hosted tunneled reverse proxy server that brings identity-aware access control and dashboard management to exposing private services securely. It allows you to connect applications and resources behind firewalls or NATs to a central hub, using encrypted tunnels rather than opening public ports or relying entirely on VPNs. With Pangolin you can route traffic from across distributed networks, enforce contextual access rules (such as SSO, geolocation, time of day, IP restrictions), and manage all of your exposed resources in one dashboard. ... -
12
Tempesta FW
All-in-one solution for high performance web content delivery
Tempesta FW is an all-in-one open-source solution for high performance web content delivery and advanced protection against DDoS and web attacks. This is a drop-in-replacement for the whole web server frontend infrastructure: an HTTPS load balancer, a web accelerator, a DDoS mitigation system, and a web application firewall (WAF). Tempesta FW is the first and only hybrid of a Web accelerator and a multi-layer firewall. This unique architecture provides seamless integration with the Linux... -
13
MasterHttpRelayVPN
Domain-fronted HTTP/SOCKS5 proxy tunneling traffic through Google Apps
MasterHttpRelayVPN is a networking tool designed to route traffic through HTTP-based relay systems, enabling VPN-like functionality over standard web protocols. It focuses on bypassing network restrictions by tunneling data through HTTP requests, making it effective in constrained or filtered environments. The system supports secure communication and can be configured to relay traffic across multiple endpoints. It is particularly useful for users who need to access restricted networks or... -
14
Coraza
OWASP Coraza WAF is a golang modsecurity compatible firewall library
Coraza is an open-source, enterprise-grade, high-performance Web Application Firewall (WAF) ready to protect your beloved applications. It is written in Go, supports ModSecurity SecLang rulesets and is 100% compatible with the OWASP Core Rule Set. Coraza is a drop-in alternative to replace the soon-to-be abandoned Trustwave ModSecurity Engine and supports industry-standard SecLang rule sets. Coraza runs the OWASP Core Rule Set (CRS) to protect your web applications from a wide range of... -
15
GO Simple Tunnel
A simple tunnel written in golang
GOST, or GO Simple Tunnel, is a flexible tunneling and proxy tool written in Go for building secure traffic forwarding chains. It supports proxying, port forwarding, reverse proxying, and tunnel-based access to services behind NAT or firewalls. The project is designed around protocol composition, allowing users to combine multiple protocols into multi-level forwarding chains. It can handle TCP and UDP forwarding, transparent proxying, DNS proxying, TUN/TAP workflows, and tun2socks scenarios. GOST also includes operational features such as load balancing, routing control, admission control, rate limiting, dynamic configuration, Prometheus metrics, and a Web API. ... -
16
Wstunnel
Tunnel all your traffic over Websocket or HTTP2
...It is designed to help users reach resources through networks where direct traffic may be blocked, filtered, or difficult to route. Because WebSocket is compatible with regular HTTP infrastructure, wstunnel can work through many reverse proxies, firewalls, and web-oriented network paths. The tool supports client and server modes, static binaries, Docker deployment, reverse tunneling, SOCKS5, HTTP proxying, and multiple transport options. It is useful for developers, administrators, and advanced users who need flexible tunneling for SSH, databases, internal web services, or other authorized network access. ... -
17
DreamFactory
DreamFactory API Management Platform
...Secure every API endpoint behind Active Directory, OAuth2, Okta, OpenID Connect, and more. Restrict capabilities using role-Based Access Controls. Easily manage API keys. Deploy behind firewalls and in air-gapped environments. Integrate legacy technology into cutting-edge applications, extending technology lifecycles and derisking legacy system replacements. -
18
GeoIP
This project automatically generates GeoIP files in multiple formats
GeoIP is a community-maintained project that generates and publishes enhanced GeoIP/Geo-database and IP-location/routing data in multiple formats (e.g. V2Ray .dat, MaxMind .mmdb, and others) to support proxy, VPN, or routing tools requiring IP-to-country/region resolution. Rather than depending solely on the official GeoLite2 data, geoip augments and merges data sources (especially for certain regions) to improve coverage or tailor by use-case (e.g. proxy-specific rules, private networks, or... -
19
paqctl
Unified proxy manager for bypassing firewalls
paqctl is a unified command-line manager for deploying and controlling bypass proxy setups across client and server machines. It is designed for users who run a server component on a VPS and a local client on Windows, macOS, or Linux. The tool supports two different approaches: Paqet, which uses KCP over raw sockets for simpler cases, and GFW-Knocker, which combines TCP and QUIC tunneling for heavier censorship scenarios. It provides guided installation, configuration, service management,... -
20
socket.io
Realtime application framework (Node.JS server)
socket.io is a JavaScript library that allows for realtime, bi-directional communication between web clients and servers. It is composed of two parts: a Node.js server and a JavaScript client library that runs in the browser. socket.io is focused on both reliability and speed, delivering an immensely powerful, fast and yet easy to use realtime engine that’s used by just about everyone: from Microsoft Office and Zendesk to hackathon winners and small startups. It’s considered one of the... -
21
Websoft9
Applications self-hosting and DevOps platform
...The platform provides a graphical interface for installing, managing, and operating more than 200 application templates. It combines application deployment with server administration tools, so users can manage files, containers, users, proxies, SSL, logs, storage, firewalls, and system services from one place. Websoft9 uses familiar technologies such as Docker, Docker Compose, Nginx, Cockpit, Kubernetes, and Swarm rather than introducing a completely new stack. It is useful for individuals, teams, and organizations that want lightweight self-hosting with DevOps-style controls and less manual configuration. -
22
FireHOL
A firewall for humans.
FireHOL is a language (and a program to run it) that builds secure, stateful firewalls from easy-to-understand, human-readable configurations. The configurations stay readable even for very complex setups. FireQOS is a program that sets up traffic shaping from an easy-to-understand and flexible configuration file. Both programs abstract away the differences between IPv4 and IPv6. so you can concentrate on the rules you want. -
23
cunicu
A zeroconf peer-to-peer mesh VPN using Wireguard
...Hence, it adopts the design goals of the WireGuard project, to be simple and easy to use. Thanks to Interactive Connectivity Establishment (ICE), cunīcu is capable of establishing direct connections between peers that are located behind NAT firewalls such as home routers. In situations where ICE fails, or direct UDP connectivity is not available, cunīcu falls back to using TURN relays to reroute traffic over an intermediate hop or encapsulate the WireGuard traffic via TURN-TCP. -
24
hakoriginfinder
Tool for discovering the origin host behind a reverse proxy
hakoriginfinder is an open-source Go utility that identifies possible origin servers behind reverse proxies and web application firewalls. It helps security researchers investigate whether publicly accessible servers expose the infrastructure supporting a protected website. The software sends a request to a reference website and records its HTTP response. It then tests candidate IP addresses using the original hostname in the HTTP Host header. Responses are compared using Levenshtein distance to identify servers returning similar content. ... -
25
Google IPs
Public IP address ranges associated with Google infrastructure
Google-IPs aggregates public IP address ranges that are associated with Google’s infrastructure, collecting them in machine-readable formats useful for routing and firewall rules. The list is helpful for administrators who need to whitelist Google endpoints, analyze traffic, or tune proxies and CDN configurations. By centralizing ranges that are otherwise spread across announcements and registries, it saves time and reduces misconfiguration risk. The repository typically includes CIDR blocks...
