May 25, 2021

dog: An open source distributed firewall management system (iptables)


[https://relaypro-open.github.io/dog](https://relaypro-open.github.io/dog)

## What is dog?

dog is a distributed firewall management system designed to manage hundreds+ of per-server firewalls. Currently iptables on Linux supported, but others could be added.

dog is your network guard dog.

## Why dog?

* Need consistent network access rules across hundreds+ of servers in multiple regions on multiple providers?
* Need defense-in-depth, beyond gateway firewalls?
* Need block lists with thousands of addresses distributed across many servers updated constantly?
* Need to limit number of connections and/or bandwidth usage?
* Sick of error-prone manual updates of per-server iptables rules?

## Features

* Centrally manage hundreds+ of per-server iptables firewalls.
* Works across clouds, regions, and on-premise infrastructure.
* Adapts to dynamic address changes.
* Large block/allow lists can be used and will be updated across all servers in seconds.
* Rules scale to tens of thousands of addresses (using [ipsets](https://ipset.netfilter.org/)).
* Alerts if servers fail to communicate or if their firewalls are modified outside of dog control.
* Reactive web interface.
* API for external integrations.
* Tested in production with hundreds of servers.
* Multiple dog_trainers can be federated together to allow sharing of addresses, while allowing each dog_trainer to have its own security rules.
* Integration with [Flan Scan](https://github.com/cloudflare/flan), a network vulnerability scanner.
* Agents support Linux 2.6+ iptables firewalls, others can be added.
* Supports cloud public IP addresses (currently only EC2).

Leave a Reply

Your email address will not be published. Required fields are marked *

Note: By filling this form and submitting your commen, you acknowledge, agree and comply with our terms of service. In addition you acknowledge that you are willingly sharing your email address with AiOWikis and you might receive notification emails from AiOWikis for comment notifications. AiOWiksi guarantees that your email address WILL NOT be used for advertisement or email marketting purposes.

This site uses Akismet to reduce spam. Learn how your comment data is processed.