Repository Index

🏔 Love Freedom - ❌ Block Mass Surveillance

• application-firewall
• dns
• firewall
• go

Make your infrastructure invisible to attackers. OpenNHP implements the Network-infrastructure Hiding Protocol (NHP): authenticate before connection, cryptographically. IETF draft.

• cybersecurity
• zero-trust
• zero-trust-network-access
• zero-trust-security

Cloud native networking and network security

• cni
• cni-plugin
• ebpf
• k8s

OWASP Coraza WAF is a golang modsecurity compatible web application firewall library

• coraza
• waf
• coraza-waf
• owasp-crs

Database security suite. Database proxy with field-level encryption, search through encrypted data, SQL injections prevention, intrusion detection, honeypots. Supports client-side and proxy-side ("transparent") encryption. SQL, NoSQL.

• encryption-server
• encryption
• crypto
• cryptography

Open-source, auditable network gateway for homelabs, NAS and servers: DDNS, STUN traversal, port forwarding with SNI routing, reverse proxy and web server, ACME certificates, WAF, Tailscale, frp, Cloudflare Tunnel, Docker and web terminal in one binary. Runs on Docker, fnOS, OpenWrt, Linux, macOS and Windows.

• acme
• ddns
• frp
• golang

teler-waf is a Go HTTP middleware that protects local web services from OWASP Top 10 threats, known vulnerabilities, malicious actors, botnets, unwanted crawlers, and brute force attacks.

• ids
• teler
• waf
• teler-ids

A rest application to update firewalld rules on a linux server

• firewalld
• firewalld-configuration
• golang
• rest-api

CetusGuard is a tool that protects the Docker daemon socket by filtering calls to its API endpoints.

• docker
• security
• container
• daemon

⛓️ CLI tool to easily manage IPTables forwards

A GraphQL executable document fingerprint hasher and API proxy to compare queries without formatting diffs, comments, variables and input values.

• graphql
• hasher
• proxy-server
• go