nDPI
core
| nDPI | core | |
|---|---|---|
| 3 | 241 | |
| 3,611 | 2,971 | |
| 0.6% | 1.7% | |
| 9.7 | 9.9 | |
| about 7 hours ago | 5 days ago | |
| C | PHP | |
| GNU Lesser General Public License v3.0 only | BSD 2-clause "Simplified" License |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
nDPI
-
The catch with the free version of ProtonVPN?
The free Proton VPN servers use deep package inspection (nDPI) to block BitTorrent traffic which negatively affects their performance. Other than that, they keep no logs which keeps the privacy and security aspects intact.
-
FOSS Deep Packet Inspection Options
nDPI for ntopng - https://github.com/ntop/nDPI
-
Tools to monitor network traffic for local network
You can try Netify or ntopng / nDPI. I have no experience with them. See also this article.
core
-
Dnsmasq wins the first BlueHats Prize
dnsmasq can be used for wildcard domain aliases in OPNsense firewall, https://github.com/opnsense/core/issues/4145#issuecomment-12...
- OPNsense Wildcard Support in Firewall Host Alias (2022)
-
How to bypass public IP and NAT
Firmware's like Asuswrt-Merlin or OpenWRT can support dynamic-dns, or you can do like I do and run something like OPNsense in an x86 VM with a NIC passed through, or buy an inexpensive firewall appliance (up to 500mbps/1gbps/10gbps).
-
Stop ISP from getting into my Router
The easiest solution is to buy your own router, set it up, disable the router functionality on the Fritzbox 7590 and plug your router into it. It'll be cheaper and easier than a Cisco Firewall, but if you want to go the dedicated firewall route then I would recommenced OPNsense
-
Near Constant PTR lookups from localhost
Much searching lead me to a possible patch Unbound.inc for how it was handling aliases for 23.7 -> https://github.com/opnsense/core/pull/5925
-
The world in which IPv6 was a good design
[2]: https://github.com/opnsense/core/issues/2544
-
OpenBSD Innovations
BSDs may not have a significant presence on desktops, but they're well known in the networking world for their reliability. They also were the foundation used to build OSes for specific applications. OpnSense and XigmaNAS, for example, are two excellent FreeBSD based applications aimed at firewalling/security and NAS/services.
https://opnsense.org/
https://xigmanas.com/xnaswp/
- Root user access denied when adding new users?
- OPNsense: Open-source security platform
What are some alternatives?
nfstream - NFStream: a Flexible Network Data Analysis Framework.
docker-pihole-unbound - Run Pi-Hole + Unbound on Docker
pmacct - pmacct is a small set of multi-purpose passive network monitoring tools [NetFlow IPFIX sFlow libpcap BGP BMP RPKI IGP Streaming Telemetry].
openwrt - Linux distribution for embedded devices
zapret - Обход DPI в linux
openNDS - openNDS (open Network Demarcation Service) is a high performance, small footprint, Captive Portal. It provides a border control gateway between a public local area network and the Internet.
GreenTunnel - GreenTunnel is an anti-censorship utility designed to bypass the DPI system that is put in place by various ISPs to block access to certain websites.
asuswrt-merlin.ng - Third party firmware for Asus routers (newer codebase)
securityonion - Security Onion is a free and open platform for threat hunting, enterprise security monitoring, and log management. It includes our own interfaces for alerting, dashboards, hunting, PCAP, and case management. It also includes other tools such as Playbook, osquery, CyberChef, Elasticsearch, Logstash, Kibana, Suricata, and Zeek.
UTMFW - UTM Firewall on OpenBSD
GoodbyeDPI - GoodbyeDPI — Deep Packet Inspection circumvention utility (for Windows)
unifios-utilities - A collection of enhancements for UnifiOS based devices