把 Kubernetes Pod 访问外部目标的 TCP 流量经单个节点用 iptables 绕行出去，内置四元组授权矩阵与中英双语 WebUI —— A directed egress proxy for Kubernetes external services with a 4-tuple allowlist, zero app changes and a built-in bilingual WebUI
Hands-on FortiGate Next-Generation Firewall (NGFW) infrastructure and security topologies engineered inside GNS3. Showcases active-passive High Availability (HA) clustering, Central NAT, OSPF dynamic routing, Layer 2 MAC filtering, and secure Site-to-Site IPsec VPN tunnels alongside deep Wireshark packet analysis workflows.
A focused iptables router for a dedicated Proxmox node with one public bridge and one private guest bridge.
Make a Docker Compose project look like a real server on your LAN — one IP, real client source IPs, no port-mapping gymnastics. For Mailcow, Nextcloud, Matrix, anything self-hosted.
Self-hosted Web UI for managing a WireGuard + nftables DNAT gateway. Expose home/backend services through a VPS with low-latency kernel-only data plane.
An nftables-based port-forwarding and NAT control layer for Linux hosts. It is built for a common self-hosting and homelab layout: public traffic reaches the host directly, then needs to be forwarded to a VM, container, or internal machine.
Multiple CCNA Labs
Hub-spoke topology with Azure Firewall.
Azure Load Balancer Floating IP to On-Premises (or AVS) backend
To associate your repository with the dnat topic, visit your repo's landing page and select "manage topics."