Best practices for segmentation of the corporate network of any company
-
Updated
Feb 2, 2026
Best practices for segmentation of the corporate network of any company
🔒 Jail your AI agents — sandboxed Docker environments with network isolation for Opencode agents
Bind apps to specific network interfaces using Linux namespaces and routing.
Network Isolated AKS
Secure Docker wrapper for AI coding agents with filesystem, privilege, and network isolation
Hardened Docker sandbox for OpenAI Codex CLI with workspace-only mounts, per-project auth, and allowlisted network egress
A tool isolates network traffic to only the current terminal shell and its children by dropping everything else with nftables and cgroup v2
🌐 macOS NAT Manager - True Network Address Translation with TUI/CLI. Unlike Internet Sharing (bridge mode), provides actual NAT with network isolation. Homebrew ready with automated DHCP, DNS, and pfctl integration.
A Windows malware detection and containment app written in .NET. It uses real‑time monitoring, signatures, heuristics and safe remediation to detect threats and protect systems without aggressive deletion.
Secure OpenClaw deployment for enterprise: air-gap, kill switch, compliance logging, tool policy profiles, audit trail
Cloudflare WARP SOCKS5 proxy for Linux VPS & AI apps. Alternative datacenter egress, per-app routing, fail-closed protection & automatic recovery. 为机房服务器提供可控 WARP 出口,支持 AI API 应用,默认保留宿主机路由;服务可用性需实测。
Docker sandbox for running the pi coding agent with a Squid proxy and HTTPS egress allowlisting.
Independent Windows Codex academic-network launcher: direct mode, campus preflight, MSIX activation and reversible shared environment
Multi-layer network isolation for unmanaged networks — enforce device separation without VLANs or managed switches. Optional privacy-preserving device verification on the Midnight blockchain.
Educational PoC demonstrating network isolation for Node.js apps using Docker internal networks and nginx as an egress proxy gateway.
Isolated Windows 11 Wi-Fi hotspot with WFP network segmentation, encrypted SMB sharing, and local traffic metadata.
Python-based network isolation research demonstrating packet interception and traffic blocking using NetfilterQueue in a controlled Linux environment.
EDR is powerful tool combines IDS (Intrusion Detection System) and IPS (Intrusion Prevention System) capabilities into a single, efficient package. Leveraging PowerShell scripts, it continuously monitors network activity, isolates compromised machines.......
Three-tier Docker Compose board application with Nginx, Flask/Gunicorn, PostgreSQL, health checks, network isolation, secrets, and least-privilege container controls.
To associate your repository with the network-isolation topic, visit your repo's landing page and select "manage topics."