Quick Deployment：Uranus

Best firewalld UI

If you think the project fits your usage scenario, please give me a 🌟🌟🌟!!!

Uranus Gateway

The mission of Uranus is to transform iptables into a tool with similar security group of aliyun.

Uranus Gateway It is a web UI and openAPI for distributed management of iptables rules on linux machines. is based-firewalld, which converts all dbus API translate to rest api , essentially for unified management of all machines in the The iptables rules of enterprise hosts, make the manipulation unified and standardized, no longer have to worry about operational errors, no longer have to worry about difficult management.

Project Show

Architecture

Instantly view firewall status and rollback restart operations

You can also add all firewalld rules on Uranus

It also supports the NAT function of iptables, which can be turned on and off with one click

And supports rich rules, such as traffic speed limit, network auditing, etc.

auto discovery

template management

Of course, the most important thing is not the function of the firewalld base itself

Special feature

• Support for delayed tasks：For example, if the Internet is banned during the Golden Week holiday(China biggest holiday), then the effective period of the rule is 10-1 0:0:00 ~ 10-8 0:0:00, and there is no need to operate on October 1. You can set it to take effect on October 1 before leaving get off work can
• Support automatic discovery：Similar to zabbix host automatic discovery function
• No need to deploy additional agent side：Because firewalld is a function provided by common Linux distributions, such as centos 7 8 9, debian 10 11, ubuntu20 22 and other distributions can be installed with one click, then this system does not need to install any additional agent
• zone is converted to a template： firewalld has the concept of zone, here I abstract the zone into a template, that is, by applying the template, a group of templates can be generated and applied in batches for a large number of hosts, so as to realize the dynamic switching of the firewall
• SSO/UUAP： Support openldap as the backend, providing one-click authentication for enterprises
• Timing takes effect： Both iptables and firewalld bases provide rules to take effect at regular intervals, so you can use this rule to complete scheduled tasks
• docker/kubernetes deployment： Can be quickly deployed on any end for management
• declarative task： Can support a large number of rules issued, provided that your host is online
• Modular start： You can choose the function you want to start
• asynchronous task： Declarative API that supports a large number of asynchronous operations

Let’s explore more functions quickly. In essence, Uranus does not recommend UI processing, because the functions are relatively simple, so using API can be better embedded in your management system

For more deployment problems, you can directly raise issue

future

Do you hope to manage in a distributed mode or a single node mode to support more security policies in the future? For example ban ip, anti-ddos and the like