Top 23 Go Firewall Projects

Firewall

• Add a project

1. frp

   1 123 107,127 9.0 Go

   A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.

   

   Project mention: Best Ngrok Alternatives in 2025 | dev.to | 2025-08-29

   frp is an advanced, feature-rich reverse proxy that supports a variety of protocols and can be self-hosted.

2. SaaSHub

   www.saashub.com featured

   SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

   

3. nps

   2 1 34,065 0.0 Go

   一款轻量级、高性能、功能强大的内网穿透代理服务器。支持tcp、udp、socks5、http等几乎所有流量转发，可用来访问内网网站、本地支付接口调试、ssh访问、远程桌面，内网dns解析、内网socks5代理等等……，并带有功能强大的web管理端。a lightweight, high-performance, powerful intranet penetration proxy server, with a powerful web management terminal. (by ehang-io)

   

4. SafeLine

   3 206 21,460 8.1 Go

   SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.

   

   Project mention: SafeLine WAF running on Rootless Docker | dev.to | 2026-04-08

   In today’s post we’ll get going at getting SafeLine excellent WAF (Web Application Firewall) to agree at running on Rootless Docker setup.

5. Gravitational Teleport

   4 66 20,463 10.0 Go

   The easiest, and most secure way to access and protect all of your infrastructure.

   

6. portmaster

   5 208 12,956 9.1 Go

   🏔 Love Freedom - ❌ Block Mass Surveillance

   

   Project mention: LittleSnitch for Linux | news.ycombinator.com | 2026-04-08

7. WindowsSpyBlocker

   6 43 5,109 3.4 Go

   Block spying and tracking on Windows

   

8. zoro

   7 3 1,551 4.0 Go

   zoro can help you expose local server to external network. Support both TCP/UDP, of course support HTTP. Zero-Configuration.

   

9. wag

   8 8 716 9.0 Go

   Simple Wireguard 2FA

   

10. aaWAF

    9 2 708 8.7 Go

    aawaf 是一款基于语义分析的Web应用防火墙

    

11. api-firewall

    10 15 650 4.9 Go

    Fast and light-weight API proxy firewall for request and response validation by OpenAPI specs.

    

12. WireGuard-Guide

    11 5 614 5.1 Go

    WireGuard Guide. Learn all about WireGuard for Networking and in the Cloud (Microsoft Azure, AWS, and Google Cloud).

    

13. ice

    12 2 580 8.9 Go

    A Go implementation of ICE (by pion)

    

14. connet

    13 8 525 9.4 Go

    A p2p reverse proxy with NAT traversal. Inspired by frp, rathole and ngrok

    

    Project mention: Netbird a German Tailscale alternative (P2P WireGuard-based overlay network) | news.ycombinator.com | 2026-02-01

    I've been working for a while on https://github.com/connet-dev/connet. It gives a different twist at the same problem - instead of an overlay network at L4 (wireguard, etc) or publicly accessible endpoint at L7 (like ngrok) it "projects" a remote endpoint locally (e.g. as if you are running the service on your computer). Of course "locally" can always be a VPS that has caddy in front to give you ngrok-like experience.

    The reason connet exists is that nothing (at the time I started, including netbird, tailscale/headscale, frp, rathole, etc) gave the same easy to understand, FOSS, self-hosted, direct peer-to-peer way of remote access to your resources. I believe it does accomplish this and it is self-hosted. And while a cloud deployment at https://connet.dev exists, it is nothing more then repackaging the FOSS project with user/token management.

15. whalewall

    14 7 345 3.9 Go

    Automate management of firewall rules for Docker containers

    

16. ufw-docker-automated

    15 6 242 3.2 Go

    Manage UFW (Uncomplicated Firewall) rules for Docker containers.

    

17. Werbot

    16 1 169 5.5 Go

    🔑 Team Access Sharing - a self-hosted solution with single sign-on for secure, easy shared access to servers, databases, and applications.

    

18. firestack

    17 2 162 9.9 Go

    Userspace wireguard and network monitor

    

19. gt

    18 1 142 6.6 Go

    Fast WebSocket(s)/HTTP(s)/TCP relay proxy for making tunnels to localhost. (by ao-space)

    

20. bgpipe

    19 1 128 7.5 Go

    BGP pipeline processor

    

    Project mention: Show HN: Bgpipe – pipe live BGP sessions through Python, add RPKI, etc. | news.ycombinator.com | 2026-02-10

    The exec stage lets you process BGP in any language - bgpipe sends JSON to your script's stdin and reads JSON back. The grep stage has a small filter DSL (prefix operators, AS_PATH matching, community checks, RPKI tags, etc.).

    Single static binary, pure Go, no deps. MIT license.

    https://github.com/bgpfix/bgpipe

21. durdur

    20 4 89 7.3 Go

    eBPF-based packet filtering firewall for Linux.

    

22. packiffer

    21 1 82 1.1 Go

    lightweight cross-platform networking toolkit

    

23. pango

    22 1 64 5.1 Go

    pango is the underlying library for the Palo Alto Networks Terraform provider

    

24. wafme0w

    23 3 64 0.0 Go

    Fast and lightweight Web Application Firewall Fingerprinting tool

    

Go Firewall related posts

• SafeLine WAF running on Rootless Docker

  1 project | dev.to | 8 Apr 2026

• Show HN: Cardea, SSH bastion with per-key ACLs, TPM keys and session recording

  1 project | news.ycombinator.com | 17 Mar 2026

• Why You Need a WAF with an Intelligent Semantic Analysis Engine

  1 project | dev.to | 6 Jan 2026

• How SafeLine WAF Protected a Growing Business from Advanced Cybersecurity Threats

  1 project | dev.to | 28 Dec 2025

• SafeLine: Advanced Open-Source WAF for Modern Web Applications

  1 project | dev.to | 28 Dec 2025

• SafeLine WAF Log Analysis in Action: 3 Key Techniques to Uncover Business Issues

  1 project | dev.to | 21 Dec 2025

• Guarding My Git Forge Against AI Scrapers

  3 projects | news.ycombinator.com | 14 Dec 2025
• A note from our sponsor - SaaSHub
  www.saashub.com | 8 Jun 2026

  SaaSHub helps you find the best software and product alternatives Learn more →

Index

Sponsored

SaaSHub - Software Alternatives and Reviews

SaaSHub helps you find the best software and product alternatives

www.saashub.com

Do not miss the trending Go projects with our weekly report!