elastic firewall

Firewall rules as code

Define, version, and deploy network policies across clouds. One config, every environment. Scales from 10 to 10,000 nodes.

See How It Works

# efw.yaml — block + allow in one file
rules:
  - name: allow-https
    action: allow
    port: 443
    protocol: tcp
  - name: block-ssh-public
    action: deny
    port: 22
    source: 0.0.0.0/0

Why EFW

Firewalls should be as agile as your deployments.

Policy as Code

YAML configs, version controlled, peer-reviewed. No clicking through cloud consoles. Declarative rules that apply everywhere.

Zero-Trust Ready

Default-deny with explicit allow rules. Microsegmentation at the workload level. Every connection is verified, every time.

Real-Time Visibility

See every connection, every blocked packet, every rule match — live. Export to Prometheus, Datadog, or any SIEM.

Multi-Cloud

One set of rules across AWS, GCP, Azure, and bare metal. EFW translates to native security groups, iptables, or nftables automatically.

Sub-ms Latency

eBPF-powered packet filtering runs in the kernel. No userspace hops, no proxy overhead. Wire-speed enforcement.

Team-Friendly

Git-based workflows. PR reviews for rule changes. Audit log for every mutation. SOC 2 and compliance built in.