AI · alternatives · 2026
24 alternatives to CargoWall – eBPF Firewall for GitHub Actions
We just open-sourced CargoWall - a lightweight eBPF firewall for GitHub Actions. We originally built it to stop LLM agents from connecting to untrusted domains. After recent GitHub Actions supply chain compromises like the Trivy attack, we realized it'd work well for blocking untrusted connections from CI runners too. It uses iptables DNAT to redirect all outbound port 53 traffic to a local DNS proxy, which checks each query against a hostname allowlist before forwarding. Resolved IPs from allowed responses are inserted into eBPF LPM trie maps, and a TC egress classifier attached to the…
CargoWall is a lightweight eBPF firewall designed for GitHub Actions that restricts outbound network connections from CI runners and LLM agents. It works by intercepting DNS queries against a hostname allowlist, then… Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes.
- 1
To power the firewalling for our agents so that they couldn't contact arbitrary services, I build netfence. It's like Envoy but for eBPF filters. It allows you to define different DNS-based rules that are resolved in a local daemon to IPs, then pushed to the eBPF filter to allow traffic. By doing it this way, we can still allow DNS-defined rules, but prevent contacting random IPs. There's also no network performance penalty, since it's just DNS lookups and eBPF filters referencing memory. It also means you don't have to tamper with the base image, which the agent could potentially manipulate…
Jan 2026 · github.com · its alternatives →
- 2
🛡️ Open-source and cloud-native Web Application Firewall (WAF) - bunkerity/bunkerweb
2024 · github.com · its alternatives →
- 3
Documentation of BunkerWeb, the open source and next generation WAF.
2025 · docs.bunkerweb.io · its alternatives →
- 4
Credentials Dumper for Linux using eBPF. Contribute to citronneur/pamspy development by creating an account on GitHub.
2022 · github.com · its alternatives →
- 5
Hi HN! Fence wraps any command in a sandbox that blocks network by default and restricts filesystem writes. Useful for running semi-trusted code (package installs, build scripts, unfamiliar repos) with controlled side effects, or even just blocking tools that phone home. > fence curl https://example.com # -> blocked > fence -t code -- npm install # -> template with registries allowed > fence -m -- npm install # -> monitor mode: see what gets blocked One use-case is to use it with AI coding agents to reduce the risk of running agents with fewer interactive permission prompts: >…
Jan 2026 · github.com · its alternatives →
- 6
A rest application to update firewalld rules on a linux server - GitHub - prashantgupta24/firewalld-rest: A rest application to update firewalld rules on a linux server
2020 · github.com · its alternatives →
- 7
At Deno we've been using OpenClaw and other agents increasingly for addressing production problems in Deno Deploy - when a PagerDuty alert fires, the agent starts researching the cause and making fixes. In order to do this, the agent needs access to real production systems - postgres, kubernetes, gcp, clickhouse, github, etc. But this is dangerous to say the least - we want destructive actions to be reviewed by other LLMs, approved by humans, and logged appropriately. Claw Patrol terminates TCP connections over WireGuard or Tailscale, then parses application protocols (eg http, postgres,…
Jun 2026 · github.com · its alternatives →
- 8
Hey, we built an open-source CLI in Go purposed to help you answer security questions across your cloud, code and runtime. It connects to your GitHub, GitLab, AWS, GCP, Azure & K8s using the credentials that are already in your shell, while limiting itself to read-only. The core innovation here is the trust boundary - our agent has a built-in code execution sandbox with no host or network access; it is exposed to an internal tool which we call an “action gate” that performs read-only HTTP requests to your own infrastructure. Since the cloud providers constantly expand actions and services,…
Jul 2026 · github.com · its alternatives →
- 9PA
PFELK is a pfSense/OPNsense firewall traffic visualization solution based on ELK stack. It is a highly customizable tool that let’s you have extensive insight into your network traffic. Key points: - pfSense/OPNsense support - openVPN support - pfSense/Suricata/Snort dashboards with interactive Maps support (MaxMind GeoIp fields, src -> dest locations, Heatmap, etc.) - deploy with ansible-playbook, docker or script. https://github.com/3ilson/pfelk
2020 · its alternatives →
- 10
Remote shell into ephemeral environments 🐚 🦀. Contribute to TimeToogo/tunshell development by creating an account on GitHub.
2020 · github.com · its alternatives →
- 11
The backstory about this GitHub Action: I discussed with an open-source maintainer why they publish npm packages from their local machine and do not use CI/CD pipelines. They said publishing should require human intervention and want to continue using multi-factor authentication to publish to the npm registry. This led to building the wait-for-secrets GitHub Action. It prints a URL in the build log and waits for secrets to be entered using a browser. Once entered, the workflow continues, and secrets can be used in future steps. The latest release of "eslint-plugin-react" to the npm…
2022 · github.com · its alternatives →
- 12
A GitHub Action that runs a command in a gVisor sandbox - geomys/sandboxed-step
Oct 2025 · github.com · its alternatives →
- 13
Greywall▲10Prefix any AI coding agent with `greywall --` for a live feed of every read, write, and connection. Allow by default; ask mode and deny rules opt-in via config. Linux and macOS.
Mar 2026 · greywall.io · its alternatives →
- 14
- 15
Fool attackers and protect your web services with BunkerWeb, the open-source and next-gen Web Application Firewall (WAF).
Jan 2026 · bunkerweb.io · its alternatives →
- 16
This is a project to develop an ebpf program that uses ebpf tc to redirect ingress ipv4 udp/tcp flows toward specific dynamically created sockets and acts as a stateful firewall. - GitHub - r-caamano/ebpf-tproxy-splicer: This is a project to develop an ebpf program that uses ebpf tc to redirect ingr
2022 · github.com · its alternatives →
- 17
The Rust Monorepo Engine. Contribute to loadingalias/cargo-rail development by creating an account on GitHub.
Dec 2025 · github.com · its alternatives →
- 18
This is a small PoC Python project for web server access logs analyzing to classify and dynamically block bad bots, such as L7 (application-level) DDoS bots, web scrappers and so on. We'll be happy to gather initial feedback on usability and features, especialy from people having good or bad experience wit bots. *Requirements* The analyzer relies on 3 Tempesta FW specific features which you still can get with other HTTP servers or accelerators: 1. JA5 client fingerprinting (https://tempesta-tech.com/knowledge-base/Traffic-Filtering-b...). This is a HTTP and TLS layers…
2025 · github.com · its alternatives →
- 19
kubectl port-forward manager and reverse tunnel (ngrok-like) for exposing local services publicly, with TLS termination, HTTP traffic inspection, UDP forwarding, multi-hop proxy routing through k8s clusters, stateful config via filesystem or git - GUI and TUI available - hcavarsan/kftray
2024 · github.com · its alternatives →
- 20
A single-binary, lightweight, zero-configuration, real-time terminal UI (TUI) network and DNS egress inspector for Docker containers powered by modern Linux eBPF. - infomaniac777/dsnitch
Sep 2026 · github.com · its alternatives →
- 21
Facebook's Katran looked too scary (and I don't do C++), so I thought I would investigate using XDP/eBPF to redirect packets at high speed and Go to do the control plane work of health-checking backed servers and managing configuration. With luck the resulting binary should be easy to deploy by non-developers. It's still not mature, but seems to work. Code was written in a very exploratory manner, and I'm not a developer so it is quite shocking at the moment, but I aim to improve it. It is intended to be horizontally scalable with ECMP and has been tested on service providing…
2022 · github.com · its alternatives →
- 22
eBPF/XDP packet filtering for Linux. Contribute to boratanrikulu/durdur development by creating an account on GitHub.
2022 · github.com · its alternatives →
- 23
Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on those runners, detecting threats in real-time. - step-security/harden-runner
2022 · github.com · its alternatives →
- 24
Hello HN, my name is Varun, and I am the co-founder of StepSecurity. Here is the backstory about Harden-Runner. We thoroughly researched past software supply chain security incidents. The devastating breaches of SolarWinds, Codecov, and others, have one thing in common – they attacked the CI/ CD pipeline or the build server. These incidents made it clear that a purpose-built security agent was needed for CI/ CD. While there are numerous agents available for desktops and servers, such as from CrowdStrike and Lacework, none have been tailored specifically to address the unique risks…
2023 · github.com · its alternatives →
Also compare
- Netfence – Like Envoy for eBPF Filters alternatives
- BunkerWeb – The Open-Source Web Application Firewall (WAF) alternatives
- BunkerWeb – the open-source and cloud-native WAF alternatives
- Credentials dumper for Linux using eBPF alternatives
- Fence – Sandbox CLI commands with network/filesystem restrictions alternatives
- A proactive way of securing your Linux server alternatives
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →