Dev tools · alternatives · 2026
24 alternatives to DigitalOcean Cloud Firewalls
Block all traffic that isn't expressly permitted by a rule
Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes. DigitalOcean Cloud Firewalls launched in 2017; newer entries below may have overtaken it.
- 1
- 2
- 3EB
2017 · github.com · its alternatives →
- 4
- 5
- 6NI
2019 · nextdns.io · its alternatives →
- 7
FireWally▲156A free Mac firewall powered by Apple Intelligence
Dec 2025 · apps.apple.com · its alternatives →
- 8
Radio Silence▲259Monitor & block apps that make unwanted network connections.
2016 · its alternatives →
- 9
- 10
- 11
Encrypted, secure, private web connection for safe browsing
2020 · its alternatives →
- 12
DigitalOcean▲84The easiest way for developers to deploy an SSD cloud server
2014 · its alternatives →
- 13MU
2011 · radiosilenceapp.com · its alternatives →
- 14RE
2016 · radiosilenceapp.com · its alternatives →
- 15
To power the firewalling for our agents so that they couldn't contact arbitrary services, I build netfence. It's like Envoy but for eBPF filters. It allows you to define different DNS-based rules that are resolved in a local daemon to IPs, then pushed to the eBPF filter to allow traffic. By doing it this way, we can still allow DNS-defined rules, but prevent contacting random IPs. There's also no network performance penalty, since it's just DNS lookups and eBPF filters referencing memory. It also means you don't have to tamper with the base image, which the agent could potentially manipulate…
Jan 2026 · github.com · its alternatives →
- 16HC
2017 · github.com · its alternatives →
- 17
- 18SD
Most site blockers work by blacklisting distractions. That never worked for me, the internet is too big, and there’s always something new to waste time on. I wanted the opposite: allowlist‑only browsing. Block everything by default, and explicitly allow only what I need. So I built Sinkzone: a local DNS forwarder with two modes: Monitor mode: lets all traffic through, but logs every domain so you can decide what to allow. Focus mode: only allowlisted domains resolve; everything else is blocked (NXDOMAIN). It’s open source, written in Go, and runs locally on macOS, Linux, and Windows. Works a…
2025 · github.com · its alternatives →
- 19
- 20
We just open-sourced CargoWall - a lightweight eBPF firewall for GitHub Actions. We originally built it to stop LLM agents from connecting to untrusted domains. After recent GitHub Actions supply chain compromises like the Trivy attack, we realized it'd work well for blocking untrusted connections from CI runners too. It uses iptables DNAT to redirect all outbound port 53 traffic to a local DNS proxy, which checks each query against a hostname allowlist before forwarding. Resolved IPs from allowed responses are inserted into eBPF LPM trie maps, and a TC egress classifier attached to the…
Mar 2026 · github.com · its alternatives →
- 21
- 22
Greywall▲10Local agent sandbox with real-time network control dashboard
Mar 2026 · greywall.io · its alternatives →
- 23
- 24
Also compare
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →