stateful-firewall

Software-defined NAT/PAT implemented in the P4 data-plane language, driven by a Python P4Runtime controller with a Flask REST API. Features dynamic port translation, runtime-configurable port forwarding, and a stateful firewall that rejects unsolicited inbound connections with TCP RSTs. Programmable Networks coursework, Lancaster University.

Hands on tutorials for data plane switches using P4

Hermit-unikernel L3/L4 stateful firewall with FQDN-aware rules, SNAT/DNAT, and SLSA-signed build-time rule compilation. Architecture-docs-first.

Implemented and tested Linux iptables firewall rules including stateless filtering, stateful packet inspection, connection tracking, rate limiting, and load balancing using NAT and packet distribution techniques. Based on hands-on network security experiments in a containerized lab environment.