Skip to content

sigeryang/yafw

Repository files navigation

yafw

Yet Another Firewall

Features

  • Based on state-of-the-art APIs from Linux nftables
  • Easy-to-manage Security policies
  • NAT Support
  • Web UI
  • Zone-based security models

Demo

Usage

make -B build

Tests

Some unit tests are finished and can be launched through make test_docker.

An example topology test is shown below.

Topology

Servers are all running a simple PHP service. Correctness of the rules can be checked through ping, traceroute, curl etc. on some machines.