Free, open-source application firewall for Windows and Linux that monitors and controls each app's network traffic, with built-in secure DNS and tracker blocking.
ysuito/RabbitWall
A web console for a Linux gateway that shows traffic from an AI network and lets you switch its Internet access on or off.
- Stars
- 67
- Forks
- 9
- Open issues
- 0
- Last commit
- 2 days ago
What is it?
RabbitWall sits between an existing LAN and an AI network as a Linux gateway, with a web console for watching where the AI network's connections go. The console shows sessions on a world map, in a route list, and in session history, along with node availability, inferred domains, estimated countries, newly observed domains, and traffic rankings over the last hour or 24 hours.
The main control is a gate that can close Internet access for the AI network, including established connections and DNS answers, so you can cut off outbound traffic in one step. DNS forwarding runs through Unbound, and a separate dnstap observer supplies the inferred domain data. Management access is limited by source-IP filtering and Caddy client-certificate authentication (mTLS).
The machine needs two wired interfaces and targets Debian 13 or later or Ubuntu 24.04 with systemd and NetworkManager. A single JSON file holds the network, DNS, and map settings, and a demo mode runs the console with simulated data on macOS or Linux without changing system settings.
Key features
- 01Shows connection sessions on a world map, in a route list, and in session history.
- 02Ranks traffic volume over the last hour or 24 hours.
- 03Closes Internet access for the AI network, including established connections and DNS.
- 04Restricts management to one PC with source-IP filtering and mTLS client certificates.
- 05Configures network, DNS, and map settings from a single JSON file.
- 06Includes a demo mode that runs without changing system settings.
Use cases
- Monitoring which domains and countries an AI server cluster contacts from a private network.
- Quickly cutting off outbound Internet access for GPU servers or AI hosts.
- Gating AI hosts' DNS and egress traffic through a dedicated Linux gateway.
Quick start
- 1
Run the demo with Python 3.11 or later
python3 setup.py demo - 2
Open the demo console in your browser at http://127.0.0.1:8766
Things to know
- Built for Linux gateways: it needs Debian 13 or later or Ubuntu 24.04, with systemd, NetworkManager, and two wired network interfaces.
- Installing on a general-purpose workstation or Docker host is not supported.
- Installation changes the machine's firewall and network interfaces, so it requires careful setup.
Topics
FAQ
- What is RabbitWall?
- A web console for a Linux gateway that shows traffic from an AI network and lets you switch its Internet access on or off. RabbitWall sits between an existing LAN and an AI network as a Linux gateway, with a web console for watching where the AI network's connections go. The console shows sessions on a world map, in a route list, and in session history, along with node availability, inferred domains, estimated countries, newly observed domains, and traffic rankings over the last hour or 24 hours.
- Is RabbitWall free to use? What license does it have?
- RabbitWall is open source under the MIT license. Check the license terms before using it in commercial products.
- Is RabbitWall still maintained?
- Actively maintained. The last commit to RabbitWall was on Nov 6, 2026.
- What can I use RabbitWall for?
- Monitoring which domains and countries an AI server cluster contacts from a private network. Quickly cutting off outbound Internet access for GPU servers or AI hosts. Gating AI hosts' DNS and egress traffic through a dedicated Linux gateway.
- How do I install RabbitWall?
- Run the demo with Python 3.11 or later: python3 setup.py demo Open the demo console in your browser at http://127.0.0.1:8766
- Where can I get RabbitWall?
- The source code and installation instructions are on GitHub: https://github.com/ysuito/RabbitWall
Summary generated by AI from the project's README. GitHub stats refresh daily.
Related projects
An interactive application firewall for GNU/Linux that asks you to allow or block each outbound connection, inspired by Little Snitch.
An experimental Linux transparent-proxy engine in Rust that follows dae's eBPF design and dae config syntax, with sing-box-style outbound groups.
Open-source zero-trust networking platform that makes services invisible to unauthorized users, with identity-based access and end-to-end encryption.
Interactive Bash script that installs Realm and manages port-forwarding and relay rules from a terminal menu on Linux VPS servers.
A macOS gateway app that turns a Mac into a Surge-style transparent proxy with per-device routing, DHCP/DNS via dnsmasq, and mihomo as the proxy engine.