DNA News

Brief, mostly facts

Innerwall previews what a network policy would block before enforcing it

An Apache-2.0 microsegmentation tool that simulates label-based policy against real flows. It is useful for testing rules before they break traffic.

Read the source at innerwall.dev

What the research found

Innerwall is an Apache-2.0 microsegmentation tool where per-host agents observe connections and program nftables, letting teams simulate a label-based policy against real flows and see would-block results before enforcing.

Claims and how well the evidence supports them

  1. Innerwall is Apache-2.0 licensed 98%
  2. Innerwall agents observe connections and program the host native firewall using nftables on Linux 99%
  3. Innerwall shows would-block flows in a simulate step before enforcement, changing nothing on the host 99%

Evidence

Actionability rated medium.