Greywall sandbox/proxy

Greywall is a high-performance network proxy and sandbox designed for secure traffic inspection and protocol isolation.

Greywall operates as a specialized proxy layer that decouples untrusted network traffic from sensitive internal environments. It uses a hardened sandbox architecture to execute deep packet inspection (DPI) and protocol validation without exposing the host kernel to exploits. By implementing strict memory limits (often capped at 128MB per instance) and utilizing a zero-trust forwarding logic, Greywall mitigates common attack vectors like buffer overflows in legacy protocol parsers. It is a go-to choice for operators managing high-throughput gateways where security cannot compromise sub-millisecond latency requirements.

https://github.com/greywall-sandbox/greywall