GuardianTUI is an ultra-high performance L7 Reverse Proxy & Intrusion Prevention System (IPS) written in Go. It provides real-time threat detection, automated blocking, and a high-performance v2.0 Terminal Dashboard for mission-critical monitoring.
For a detailed dive into how GuardianTUI works, please refer to our documentation:
- 🏛️ Architecture & Internals: Sharding, Atomic Pointer Swapping, and PoW logic.
- 📡 Security Shields: CSAM, Metasploit, Reverse Shell, DLP, and Offensive Tooling shields.
- ⚙️ Configuration Guide: Full guide for
config.yaml,ai.json, and IP Blocklists. - 📊 Dashboard & TUI Guide: Deep dive into the v2.0 metrics and controls.
git clone https://github.com/lilsheepyy/GuardianTUI.git
cd GuardianTUI
go build -o guardiantui main.goProtect a local application running on port 3000:
./guardiantui -target http://localhost:3000Your application is now filtered and accessible via http://localhost:8080.
- High-Performance Sharding: 64-way memory sharding for IP tracking and probing detection.
- Lock-Free Snapshots: Atomic pointer swapping for zero-latency security updates.
- Multi-Layered Honeypots: Active deception with 60+ hardcoded and user-definable bait paths (e.g.,
/.env,/wp-admin). - 404 Spike Detection: Intelligent bot detection that auto-blocks IPs performing high-frequency directory brute-forcing.
- SQLmap & Tooling Shield: Deep signature matching for 30+ offensive tools (SQLmap, Burp Suite, Nikto, Shodan, etc.).
- Deep Packet Inspection: Recursive normalization (Base64, Hex, URL, HTML) of payloads.
- Advanced AI Shield: Heuristic scoring specifically optimized for LLM/AI endpoints.
- Enterprise Logging: Persistent JSON logging with automatic 10MB file rotation in the
logs/folder. - Network Hardening: Integrated Cloudflare (
CF-Connecting-IP) support and a strict Unauthorized Proxy Shield. - DLP Engine: Inbound file protection and outbound secret redaction.
- v2.0 Dashboard: Modern, responsive TUI with traffic heatmaps and threat distribution charts.
- Dynamic Operational Modes: Switch between
IPS(Active),IDS(Passive/Logging), andStrictmodes via configuration or TUI. - Custom TUI Themes: Multiple visual styles (Cyber, Forest, Dracula, Monochrome) selectable via configuration or TUI command.
- Production Mode (SSL):
sudo ./guardiantui -target http://localhost:3000 -domain example.com - Local Secure Mode:
./guardiantui -target http://localhost:3000 -https - Headless Mode:
./guardiantui -target http://localhost:3000 -headless
Distributed under the MIT License. Created by sheep.