A Virtual Machine for processing packets that integrates with netfilter. Programs can be assembled or written in a (albeit undesigned at this point in time) higher level language.

FeaturesStack based VM Multiple vm programs can be inserted at each netfilter hook location. VMs can manipulate packets in many ways and set their status in the normal netfilter fashion VM code is specialised for packet processing, e.g instructions will exist to modify common header fields, etc. VM has a shared memory area that is shared between other VMs of the same type and a memory area that is shared with userspace that can be used for configuration data (for example; a routing table, a list of IP to block, etc.) Userland tools to insert, remove, list and manipulate the VMs. Assembler and Compiler written in Scheme