Network Decode Firewall Beta · Linux host protection

See the connection. Understand the rule. Control the block.

See local connection metadata, review the reason for a block, and apply bounded exact-source XDP ingress controls through the HoneyMesh agent. Standalone Firewall is $5 per Linux node each month. It is included for licensed Node Pro and Infrastructure Pro hosts.

Buy Firewall Beta Review test evidence

Standalone Firewall Beta

$5 per Linux node / month

One monthly unit covers one supported Linux host. Node Pro and Infrastructure Pro customers retain Firewall inclusion for their licensed hosts. Tax is calculated at checkout where applicable.

Visibility

Investigate connections

Inspect local socket metadata, interface counters, and recent connection trends. The console does not capture packet payloads.

Control

Review and release blocks

See grant ownership and expiration, request a bounded source block, and release a grant through authenticated local controls.

Host authority

Enforce through XDP

The paired HoneyMesh agent decides whether an exact-source ingress rule is authorized on a selected Linux interface.

Beta disclosure

Know the limits before you buy

This is an early Linux host beta for experienced operators on noncritical Ubuntu 24.04 AMD64 systems. It is not a general-purpose or production-qualified firewall. Keep your existing firewall and a separate recovery route.

01Supported scope. Exact-source IPv4 and IPv6 ingress controls on selected interfaces; no stateful egress policy or full port-rule editor.
02Operator responsibility. Start in TEST mode, confirm the interface and management path, and practice release and rollback before ENFORCE.
03Access and billing. A paid standalone unit licenses one host. The signed license follows a paid invoice; the matching package requires billing-email verification. The subscription renews monthly until canceled.

Read the beta terms and privacy policy before subscribing.

See the host

The local console reads TCP and UDP socket snapshots, Linux socket UID and queue data, and interface counters from its network namespace. Ten-minute in-memory graphs show established sockets and interface byte rates. It does not capture payloads or attribute processes.

Explain each block

HoneyMesh's Unified Enforcement Engine tracks independent grants and expiration. Operators can inspect why a source is blocked before releasing a grant.

Enforce at ingress

Controlled Ubuntu 24.04 tests demonstrated exact-source IPv4 and IPv6 XDP blocking, independent control traffic, expiration, recovery, and operator release.

Current operator model

Defined controls through a private agent

HoneyMesh's authenticated agent owns mode changes, interface selection, enforcement grants, release, and rollback. Its browser interface must request defined actions from the agent; it does not gain arbitrary shell access or receive kernel credentials.

What the console shows

Validated exact-source ingress XDP enforcement in controlled VM tests.
Authenticated connection snapshots with server-side filters, socket UID and queue details, and a per-source grant lookup.
Recent established-socket and interface-throughput graphs, separate from HoneyMesh XDP drop totals.
HoneyMesh mode, health, grant ownership, and a link to the installed SOC dashboard.

Scoped host writes stay closed unless an operator enables them and the signed agent supports the required contract. Full firewall policy editing, egress filtering, and general production qualification remain future work.

Start with the tested host profile

The guided beta focuses on noncritical Ubuntu 24.04 AMD64 hosts, initial TEST mode, operator-approved ENFORCE, and documented rollback. Distributed defense, egress filtering, and full firewall policy editing are outside this pilot.

Read the setup guide Compare eligible plans View the product demo

Loading HoneyMesh...