nftables

UPnP IGD implementation

🔥以社会主义核心价值观为指导思想，实现 Linux 和 MacOS 设备的全局智能分流

nftables load balancer

A simple, lightweight socks5 transparent proxy for Linux. (TCP/UDP over TCP/IPv4/IPv6)

Structured system configuration (I moved from NixOS to GuixSD)

Provisioning tool for systemd in initramfs (systemd-tool)

Allow/deny traffic in nftables using country specific IP blocks

A Bash script to create nftables sets of country specific IP address ranges for use with firewall rulesets.

QoS over Nftables (This packages is merged upstream, please visit openwrt/packages and openwrt/luci for more detail)

Public collection of firewall dumps.

Python package to generate country-specific IP network ranges consumable by both iptables/ipset and nftables.

Python script that generates nft maps of ip address blocks and corresponding geolocation. This data is taken from db-ip.com, so yo don't have to worry about accepting any EULA.

A good addition to your conntrack-tools package. Conntracker acts like a firewall sniffer, it analysis, realtime, with very low overhead, all iptables (or nf_tables) existing flows and inform you, at the very end of its execution, all flows in a sorted and consumable way.

nftables based proxy for kubernetes

RedisPushIptables is used to update firewall rules to reject the IP addresses for a specified amount of time or forever reject.

Block countries using iptables + ipset + ipdeny.com

Script to apply a Transparent proxy through Tor with nftables or iptables and can optionally forge a random MAC, localtime, ip, hostname.

A kubernetes controller running on bare-metal firewalls, creating nftables rules, configures suricata, collects network metrics

Ansible role to manage nftables.

CNI Plugins compatible with nftables

A playground ruleset to get to know nftables syntax

nftfw - nftables firewall builder for Debian

A Collection of useful nftables rules for all applications (From simple 'open port x' over vpn with NAT to ssdp/upnp)

Puppet Module to manage nftables firewall rules.

Using nfqueue to accept or drop flows destinated towards SNI domainnames

web application to use iptables-translate

parse a tor microdescriptor consensus file and generate an ipset or nftables variable

Vim highlighter and syntax checker for NFTABLES

Dormitory Network Management Suite

Prometheus exporter for nftables counters