A Go-based firewall management tool that syncs rules from an endpoint, applies them to nftables, and validates ingress and egress behavior through a containerized test environment.
This project centers on building a command-line tool for loading firewall rules from a remote endpoint and applying them locally through nftables. It demonstrates lower-level systems work, containerized debugging, and practical validation of network-policy behavior.
Pulls firewall definitions from a JSON endpoint and applies them locally.
Works directly with Linux firewall rules instead of abstracting the system away.
Uses multiple containers to simulate cross-container traffic and validate policies.
Surfaces human-readable status output for currently applied firewall rules.