nflux

Network monitoring and firewall using EBPF, XDP and TC. Powered by Aya-rs

Built with ❤ in Rust

Table of Contents generated with mtoc

• Nflux architecture
• Features
• Running nflux
• Local development
• Contribution
• License

Nflux architecture

Look at what level it works XDP:

Powerful, right? Same for traffic control (TC).

Note

nflux uses XDP for incoming packet processing (only works with physical interfaces).

Features

Pending to add...

Running nflux

Warning

In Fedora, where selinux is enforced by default, I'm having some problems. Quick fix (not secure): sudo setenforce 0

ip link show # get the name of your PHYSICAL interface
# edit nflux.toml and set your physical interface

Monitoring for VPN interfaces like wireguard, not working properly yet

By the moment, run nflux locally (see next local-dev)

Local development

For local development, I don't use containers since the build process is slow. Visit this custom page for local development.

Contribution

Any improvement is welcome! If you want to help me improve in Rust and eBPF, I'd be delighted!

License

nflux is distributed under the terms of the AGPL3 license.