Netfilter Conntrack Stats Exporter

conntrack event fanout logger with GEO location 🌐

Conntrack entry removal daemon

Meds — Intelligent firewall in Go

Infrastructure-level per-user QoS for Xray/VPN nodes using conntrack marks, nftables and tc/ifb (HTB), with systemd automation.

c-binding free API for golang to communicate with the conntrack subsystem

Pure-Go Conntrack implementation; for humans.

Advanced kernel-native security framework to disrupt and prevent DNS-based breaches including C2 channels and tunneling with zero data loss. Combines TC, Netfilter, raw socket interception, BPF maps, and ring buffers, runs entirely on eBPF in the Linux kernel. Integrates with deep learning for advanced intelligent EDR

CAKE-ConnMark is a traffic classification script for Asuswrt-Merlin routers using CAKE QoS. It marks active connections based on a user-defined config and maps those marks to DSCP values via iptables, enabling CAKE to prioritize traffic types like gaming or streaming—even for established flows.

Go bindings for iptables, ebtables and arptables, which provide numerous features, extensions and more.

conntrack command in Rust

Layer 4 Single Packet Authentication utilizing Netfilter Queue and libnetfilter.

Turn `conntrack -L` output into a CSV

Prometheus exporter for tracking network connections

Icinga2 plugins and command definitions

Expose conntrack metrics to prometheus

Visualize conntrack connections geographically and organizationally

Ansible role that provides journald logging for conntrack entries

Zabita is an easy method for handling packet filtering with help of iptables and tun-tap interfaces.

Metrics for Conntrack