🔥 Enterprise-Grade Firewall Management Platform - Modern Infrastructure Security
A comprehensive, open-source firewall management solution that provides declarative configuration, real-time monitoring, and enterprise-grade security for modern network infrastructures. Built with a cutting-edge tech stack and designed for scalability, observability, and ease of use.
🚀 Quick Start • 📋 Features • 🏗️ Architecture • 📊 Status • 🛠️ Tech Stack • 📁 Structure • 🤝 Contributing
Aether Shield is a comprehensive firewall management platform that combines modern web technologies with enterprise-grade network security features. It provides an intuitive web interface for managing complex firewall configurations, monitoring network traffic, and administering VPN services through a unified, declarative approach.
- 🛡️ Enterprise Security - Complete firewall management with advanced rule engines
- 📊 Real-time Monitoring - Live dashboards and network diagnostics
- 🔐 Multi-Protocol Support - OpenVPN, WireGuard, and IPsec integration
- 🏗️ Modern Architecture - Type-safe full stack with container-first design
- 🌐 Declarative Configuration - Infrastructure as code for network security
- 🔧 Developer-Friendly - Extensible platform with comprehensive APIs
- 🐳 Cloud-Native - Docker and Kubernetes ready deployment
- 📈 Observable - Built-in monitoring, logging, and metrics
- ✅ Rule Engine - Advanced filtering with support for complex rule sets
- ✅ NAT Configuration - One-to-one NAT, outbound NAT, port forwarding, NPTv6
- ✅ Traffic Shaping - Queue management, pipes, and bandwidth control
- ✅ Aliases & Groups - Organize network objects and reusable components
- ✅ Automation - Filter automation and source NAT automation
- ✅ Categories - Application and content filtering categories
- ✅ Interface Configuration - WAN, LAN, wireless, and virtual IP management
- ✅ Advanced Devices - GIF, GRE, LAGG, VLAN, VXLAN, loopback, bridge support
- ✅ Diagnostics Tools - Ping, traceroute, packet capture, ARP tables, DNS lookup
- ✅ Neighbor Discovery - Network neighbor monitoring and management
- ✅ Gateway Management - Multiple gateway support with failover
- ✅ OpenVPN - Instance management, client overwrites, export capabilities
- ✅ WireGuard - Instance and peer management with configuration generator
- ✅ IPsec - Connection management, sessions, key pairs, and VTI support
- ✅ VPN Monitoring - Real-time status and connection tracking
- ✅ User Management - Groups, privileges, servers, and user administration
- ✅ Configuration Management - Backup, restore, configuration history
- ✅ Firmware Management - Package management, plugins, updates, changelog
- ✅ High Availability - HA settings and status monitoring
- ✅ Certificate Management - Trust authorities, certificates, and revocation
- ✅ Real-time Dashboard - System metrics, CPU, memory, disk, interface statistics
- ✅ Traffic Analysis - Netflow data and comprehensive traffic monitoring
- ✅ Service Monitoring - DHCP, DNS, IDS, and network service health
- ✅ Health Reports - System health insights and diagnostic reports
- ✅ Log Management - Centralized logging with search and filtering
✅ Production-Ready Frontend: Complete Next.js application with all UI components implemented.
- ✅ Complete Next.js 16 App - All pages and routing implemented
- ✅ Component Library - Comprehensive UI components with Radix UI
- ✅ Dashboard Interface - Real-time monitoring and system metrics
- ✅ Authentication System - JWT-based auth with login forms
- ✅ Navigation System - Multi-level sidebar with collapsible sections
- ✅ Responsive Design - Mobile-friendly interface with Tailwind CSS
- ✅ Monorepo Structure - pnpm workspaces with shared tooling
- ✅ Docker Infrastructure - Multi-architecture container support
- ✅ API Architecture - Complete RESTful API structure defined
- ✅ Database Schema - Prisma setup with PostgreSQL integration
- ✅ Type Safety - TypeScript strict mode throughout
- ✅ Multi-Language Packages - Go, Node.js, Python, Rust, and more
- ✅ Distribution Ready - Snap, Docker, and package manager support
- ✅ CLI Tools - Command-line interface for system management
- Go Backend Implementation - API endpoints and business logic
- Database Models - Complete Prisma schema and migrations
- Real-time Features - WebSocket integration for live updates
- API Documentation - Comprehensive OpenAPI/Swagger docs
- Testing Suite - Unit and integration tests
- Advanced Security - IDS/IPS integration, threat intelligence
- Network Automation - Configuration templates and deployment
- Mobile Application - React Native companion app
- API Rate Limiting - Advanced throttling and protection
- Multi-Tenant Support - Organization and tenant management
- Go 1.21.0 or higher (for backend)
- Node.js 18.0.0 or higher (for frontend)
- pnpm 9.0.0 or higher (recommended package manager)
- PostgreSQL 14.0 or higher (for database)
- Docker (optional, for container deployment)
- Make (for command shortcuts - included with most systems)
-
Clone the repository
git clone https://github.com/skygenesisenterprise/aether-shield.git cd aether-shield -
Quick start (recommended)
# One-command setup and start make quick-start -
Manual setup
# Install dependencies make install # Environment setup make env-dev # Database initialization make db-migrate # Start development servers make dev
Once running, you can access:
- Frontend: http://localhost:3000
- API Server: http://localhost:8080
- Health Check: http://localhost:8080/health
- Database Studio: http://localhost:5555 (Prisma Studio)
# 🚀 Quick Start & Development
make quick-start # Install, migrate, and start dev servers
make dev # Start all services (frontend + backend)
make dev-frontend # Frontend only (port 3000)
make dev-backend # Backend only (port 8080)
# 🔧 Go Backend Commands
make go-server # Start Go server directly
make go-build # Build Go binary
make go-test # Run Go tests
# 🏗️ Building & Production
make build # Build all packages
make start # Start production servers
# 🗄️ Database
make db-studio # Open Prisma Studio
make db-migrate # Run migrations
make db-seed # Seed development data
# 🔧 Code Quality & Testing
make lint # Lint all packages
make typecheck # Type check all packages
make format # Format code with Prettier
# 🛠️ Utilities
make help # Show all available commands
make status # Show project status
make health # Check service health💡 Tip: Run
make helpto see all available commands organized by category.
Next.js 16 + React 19.2.1 + TypeScript 5
├── 🎨 Tailwind CSS v4 + Radix UI (Styling & Components)
├── 🔐 JWT Authentication (Complete Implementation)
├── 🛣️ Next.js App Router (Routing)
├── 📝 TypeScript Strict Mode (Type Safety)
├── 🔄 React Context (State Management)
└── 🔧 ESLint + Prettier (Code Quality)
Go 1.21+ + Gin Framework
├── 🗄️ GORM + PostgreSQL (Database Layer)
├── 🔐 JWT Authentication (Complete Implementation)
├── 🛡️ Middleware (Security, CORS, Logging)
├── 🌐 HTTP Router (Gin Router)
├── 📦 JSON Serialization (Native Go)
└── 📊 Structured Logging (Zerolog)
Docker + Kubernetes + Monitoring
├── 🏗️ Multi-Architecture (AMD64, ARM64, RISC-V)
├── 📊 Prometheus + Grafana (Monitoring)
├── 📝 Loki + Promtail (Logging)
├── 🗄️ PostgreSQL + Redis (Data Layer)
└── 🔒 Security Hardening (Non-root, Scanning)
Multi-Language Distribution
├── 🐹 Go SDK (Native Go Client)
├── 📦 Node.js SDK (TypeScript)
├── 🐍 Python SDK (Python 3)
├── 🦀 Rust SDK (Rust)
├── 📦 Snap Package (Linux)
├── 🐳 Docker Image (Container)
└── ⚙️ VS Code Extension (IDE)
aether-shield/
├── app/ # Next.js 16 Frontend Application
│ ├── components/ # React components with Radix UI
│ │ ├── ui/ # UI component library
│ │ ├── DashboardLayout.tsx # Main layout
│ │ ├── Sidebar.tsx # Navigation components
│ │ └── login-form.tsx # Authentication forms
│ ├── context/ # React contexts
│ │ └── JwtAuthContext.tsx # Authentication state
│ ├── app/ # Next.js App Router pages
│ │ ├── firewall/ # Firewall management pages
│ │ ├── interfaces/ # Network interface pages
│ │ ├── vpn/ # VPN service pages
│ │ ├── system/ # System administration pages
│ │ └── report/ # Monitoring and reports
│ ├── lib/ # Utility functions
│ └── styles/ # Tailwind CSS styling
├── server/ # Go Backend Server
│ ├── src/
│ │ ├── controllers/ # HTTP request handlers
│ │ ├── models/ # Data models and structs
│ │ ├── services/ # Business logic
│ │ ├── middleware/ # Gin middleware
│ │ └── config/ # Configuration
│ ├── main.go # Main server entry point
│ └── go.mod # Go modules file
├── docker/ # Docker Configuration
│ ├── manifests/ # Kubernetes manifests
│ ├── config/ # Container configuration
│ └── scripts/ # Build and deployment scripts
├── infrastructure/ # Infrastructure Components
│ ├── monitoring/ # Prometheus, Grafana, Loki
│ ├── redis/ # Redis configuration
│ └── web/ # Nginx configuration
├── package/ # Distribution Packages
│ ├── golang/ # Go SDK and CLI
│ ├── node/ # Node.js SDK
│ ├── python/ # Python SDK
│ ├── rust/ # Rust SDK
│ ├── snap/ # Snap package
│ └── vscode/ # VS Code extension
├── prisma/ # Database Schema & Migrations
├── public/ # Static Assets
├── docs/ # Documentation
└── tools/ # Development Utilities
┌─────────────────┐ ┌──────────────────┐ ┌─────────────────┐
│ Next.js App │ │ Go API │ │ PostgreSQL │
│ (Frontend) │◄──►│ (Backend) │◄──►│ (Database) │
│ Port 3000 │ │ Port 8080 │ │ Port 5432 │
│ TypeScript │ │ Go │ │ │
└─────────────────┘ └──────────────────┘ └─────────────────┘
│ │ │
▼ ▼ ▼
JWT Tokens API Endpoints Firewall Rules
React Context Authentication Network Config
Radix UI Components Business Logic System Metrics
│ │
▼ ▼
┌─────────────────┐ ┌──────────────────┐
│ Real-time │ │ Package │
│ Monitoring │ │ Ecosystem │
│ WebSocket │ │ Multi-Language │
│ Live Updates │ │ SDKs & Tools │
└─────────────────┘ └──────────────────┘
- ✅ Frontend Application - Complete Next.js app with all pages
- ✅ UI Component Library - Radix UI components with custom styling
- ✅ Authentication System - JWT-based authentication with forms
- ✅ Navigation System - Multi-level sidebar with routing
- ✅ Dashboard Interface - Real-time monitoring components
- ✅ Monorepo Structure - pnpm workspaces with shared tooling
- 🔄 Go API Endpoints - Complete RESTful API implementation
- 🔄 Database Models - Prisma schema with migrations
- 🔄 Authentication Service - JWT token management
- 🔄 Business Logic - Firewall rule processing
- 🔄 Real-time Features - WebSocket integration
- 🔄 API Documentation - OpenAPI/Swagger specs
- 📋 End-to-End Testing - Complete test suite
- 📋 Performance Optimization - Caching and optimization
- 📋 Security Hardening - Advanced security features
- 📋 Monitoring Integration - Prometheus metrics
- 📋 Documentation - Comprehensive guides
- 📋 CI/CD Pipeline - Automated build and deployment
- 📋 Advanced Security - IDS/IPS integration
- 📋 Network Automation - Configuration templates
- 📋 Multi-Tenant Support - Organization management
- 📋 Mobile Application - React Native app
- 📋 Advanced Analytics - Traffic analysis and insights
- 📋 Plugin Architecture - Extensibility framework
# New developer setup
make quick-start
# Daily development
make dev # Start working (Go + TypeScript)
make lint-fix # Fix code issues
make typecheck # Verify types
make test # Run tests
# Go-specific development
cd server
go run main.go # Start Go server
go test ./... # Run Go tests
go fmt ./... # Format Go code
go mod tidy # Clean dependencies
# TypeScript-specific development
make dev-frontend # Frontend only
make lint # Check code quality
make typecheck # Verify types
# Before committing
make format # Format code
make lint # Check code quality
make typecheck # Verify types
# Database changes
make db-migrate # Apply migrations
make db-studio # Browse database
# Production deployment
make build # Build everything
make docker-build # Create Docker image
make docker-run # Deploy- TypeScript Strict Mode - All frontend code must pass strict type checking
- Go Best Practices - Follow Go conventions for backend code
- Component Structure - Follow established patterns for React components
- API Design - RESTful endpoints with proper HTTP methods
- Error Handling - Comprehensive error handling and logging
- Security First - Validate all inputs and implement proper authentication
- Testing - Write tests for all new features and components
We're looking for contributors to help build this comprehensive firewall management platform! Whether you're experienced with Go, TypeScript, network security, web development, or infrastructure, there's a place for you.
- Fork the repository and create a feature branch
- Check the issues for tasks that need help
- Join discussions about architecture and features
- Start small - Documentation, tests, or minor features
- Follow our code standards and commit guidelines
- Go Backend Development - API endpoints, business logic, security
- TypeScript Frontend Development - React components, UI/UX design
- Network Security Experts - Firewall rules, VPN protocols, security
- Database Design - Schema development, migrations, optimization
- DevOps Engineers - Docker, Kubernetes, CI/CD
- Security Specialists - Authentication, encryption, monitoring
- Documentation - API docs, user guides, tutorials
- Testing - Unit tests, integration tests, E2E testing
- Choose an area - Frontend, backend, or infrastructure
- Read the guidelines - Understand our coding standards
- Create a branch with a descriptive name
- Implement your changes following our guidelines
- Test thoroughly in all relevant environments
- Submit a pull request with clear description and testing
- Address feedback from maintainers and community
- 📖 Documentation - Comprehensive guides and API docs
- 🐛 GitHub Issues - Bug reports and feature requests
- 💡 GitHub Discussions - General questions and ideas
- 📧 Email - support@skygenesisenterprise.com
When reporting bugs, please include:
- Clear description of the problem
- Steps to reproduce
- Environment information (Go version, Node.js version, OS, etc.)
- Error logs or screenshots
- Expected vs actual behavior
| Component | Status | Technology | Notes |
|---|---|---|---|
| Frontend Application | ✅ Working | Next.js 16 + React 19.2.1 | Complete implementation |
| UI Component Library | ✅ Working | Radix UI + Tailwind CSS | Comprehensive component set |
| Authentication System | ✅ Working | JWT (React/Go) | Complete implementation |
| Navigation System | ✅ Working | Next.js App Router | Multi-level sidebar |
| Dashboard Interface | ✅ Working | React + TypeScript | Real-time monitoring components |
| Go Backend API | 🔄 In Progress | Go + Gin | Structure defined, implementation |
| Database Layer | 🔄 In Progress | PostgreSQL + Prisma | Schema setup, migrations pending |
| Docker Infrastructure | ✅ Working | Multi-Stage | Multi-architecture support |
| Package Ecosystem | ✅ Working | Multi-Language | Distribution packages ready |
| API Documentation | 📋 Planned | OpenAPI/Swagger | Comprehensive API docs |
| Testing Suite | 📋 Planned | Go/TS | Unit and integration tests |
| Monitoring Stack | ✅ Working | Prometheus + Grafana | Infrastructure monitoring |
Development led by Sky Genesis Enterprise
We're looking for sponsors and partners to help accelerate development of this open-source firewall management platform.
This project is licensed under the MIT License - see the LICENSE file for details.
MIT License
Copyright (c) 2025 Sky Genesis Enterprise
Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal
in the Software without restriction, including without limitation the rights
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
copies of the Software, and to permit persons to whom the Software is
furnished to do so, subject to the following conditions:
The above copyright notice and this permission notice shall be included in all
copies or substantial portions of the Software.
- Sky Genesis Enterprise - Project leadership and development
- Go Community - High-performance programming language and ecosystem
- Gin Framework - Lightweight HTTP web framework
- Next.js Team - Excellent React framework
- React Team - Modern UI library
- Radix UI - Accessible component primitives
- Tailwind CSS - Utility-first CSS framework
- Prisma Team - Modern database toolkit
- Docker Team - Container platform and tools
- Open Source Community - Tools, libraries, and inspiration
⭐ Star This Repo • 🐛 Report Issues • 💡 Start a Discussion
🔧 Enterprise-Grade Firewall Management with Modern Web Technologies!
Made with ❤️ by the Sky Genesis Enterprise team
Building an open-source alternative to commercial firewall management solutions
