goalkeeper

DoS and DDoS protection library.

Features

• Rate limiting
• Connection limiting
• Bandwidth limiting
• Optional TCP_KEEPALIVE and TCP_NODELAY helper function for tokio::net::TcpStream
• Optional axum and axum_server support
• Logging
• nftables firewall configuration
• OS network stack hardening

Status

Gradually migrating related functionality from other projects.

License

Licensed under either of

• Apache License, Version 2.0 (LICENSE-APACHE or http://www.apache.org/licenses/LICENSE-2.0)
• MIT license (LICENSE-MIT or http://opensource.org/licenses/MIT)

at your option.

Contribution

Unless you explicitly state otherwise, any contribution intentionally submitted for inclusion in the work by you, as defined in the Apache-2.0 license, shall be dual licensed as above, without any additional terms or conditions.