Go bindings for iptables, ebtables and arptables, which provide numerous features, extensions and more.

A simple Linux TCP client-server proxy able to redirect all data from one address to another by preserving source IP address.

Tiray-egw(Tiray External Gateway) run on dpdk. EGW is used for Layer-4/7 load balancer and NATGW and VPC cloud network.

Multiple CCNA Labs

Self-hosted Web UI for managing a WireGuard + nftables DNAT gateway. Expose home/backend services through a VPS with low-latency kernel-only data plane.

A DNAT management tool

Azure Load Balancer Floating IP to On-Premises (or AVS) backend

Make a Docker Compose project look like a real server on your LAN — one IP, real client source IPs, no port-mapping gymnastics. For Mailcow, Nextcloud, Matrix, anything self-hosted.

Hub-spoke topology with Azure Firewall.

An nftables-based port-forwarding and NAT control layer for Linux hosts. It is built for a common self-hosting and homelab layout: public traffic reaches the host directly, then needs to be forwarded to a VM, container, or internal machine.

A lightweight iptables-based NAT router for Proxmox VE with MASQUERADE, DNAT port forwarding, and persistent firewall rules.