firewalld-rest
A REST API to proactively manage SSH access by dynamically adding/removing IP addresses in firewalld rules.
What is firewalld-rest?
Firewalld-rest is a REST application that dynamically updates firewalld rules on Linux servers to provide secure, on-demand SSH access. It implements a proactive security model by default-deny SSH for all IPs and only allows access for authorized IPs via authenticated API calls, preventing brute-force attacks before they happen. It integrates with firewalld using firewall-cmd to programmatically add or remove rich rules for specific IPv4 addresses.
System administrators and DevOps engineers managing Linux servers who need to secure SSH access against brute-force attacks, particularly those using firewalld and seeking a proactive alternative to reactive tools like fail2ban. It is also suitable for teams operating in Kubernetes clusters who require centralized SSH access control across multiple nodes.
Developers choose Firewalld-rest for its proactive security approach, which prevents unauthorized SSH attempts entirely rather than reacting after detection. Its unique selling point is the combination of JWT-secured REST API for manual IP authorization, persistent IP tracking, and seamless integration with firewalld, offering granular control and auditability over SSH access.
Overview
A rest application to update firewalld rules on a linux server
Use Cases
Best For
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
