Hello everyone,
I’d like to share a project I’ve recently open-sourced: Tangent Networks UTM.
It’s a BSD 3-Clause licensed Unified Threat Management platform built on OpenBSD, integrating PF, Snort IDS/IPS, SSLproxy, e2guardian, Unbound, ClamAV, pmacct, spamd, and related services behind a browser-based management interface.
The project follows a privilege-separated design, with the WebUI running inside the OpenBSD httpd/slowcgi chroot and administrative operations handled through audited backend runners.
Alongside the core networking components, it includes service orchestration, monitoring and reporting (TNWatch), file integrity monitoring (TNAudit), recovery tooling, and a fully automated installer.
Although the target platform is OpenBSD, much of the development and testing took place on openSUSE using QEMU/KVM and libvirt, so I wanted to share it here and thank the openSUSE community for providing such a solid development environment.
Project repository:
Documentation and screenshots:
https://tangentnet.top
Feedback, bug reports, and technical critiques are always welcome.
Regards,
David Peter
Tangent Networks