How starsmash29/fr_os-pblk works
FR_OS is a local firewall-router operating system. Its main management workflow runs from an operator using the WebUI, through the unprivileged application and validated helper socket, to privileged configuration application and kernel/service enforcement. The graph also preserves documented security, monitoring, discovery, and network capabilities. Some branches are connected only where the README or SOURCE INDEX supports the relationship; unsampled implementations are represented by their existing paths.
Main entry points: server.py Apply helper · app.py WebUI app · builder.py nftables rules · routes WebUI routes
Components 21
Management plane
- WebUI app
src/frfw/webui/app.py - WebUI routes
src/frfw/webui/routes - Config loader
src/frfw/config/loader.py - WebUI helper client
src/frfw/webui/helper_client.py
Privileged control
- Socket client
src/frfw/helper/client.py - Apply helper
src/frfw/helper/server.py - Config apply
src/frfw/apply.py
Network enforcement
- nftables rules
src/frfw/nft/builder.py - XDP SNI filter
bpf/xdp_sni_filter.c - DNS filtering
src/frfw/adblock/dns_service.py - WireGuard VPN
src/frfw/wireguard.py
Security services
- ZTNA access
src/frfw/ztna.py - Local AI IDS
src/frfw/ai_ids/engine.py - TLS fingerprinting
src/frfw/tlsfp/daemon.py - Accounts and MFA
src/frfw/admin_account.py - Audit log
src/frfw/webui/audit.py
Network operations
- IoT discovery
src/frfw/iot/scanner.py - Metrics exporter
src/frfw/metrics.py - Attack surface
src/frfw/surface.py - App identification
src/frfw/appid/daemon.py
Other components
- Router operator
Connections 24
- Router operator → WebUI app: manages router
README.md - WebUI app → WebUI routes: registers routes
src/frfw/webui/app.py - WebUI routes → WebUI helper client: requests privileged actions
src/frfw/webui/routes/apps.py - WebUI helper client → Socket client: delegates socket calls
src/frfw/webui/helper_client.py - Socket client → Apply helper: sends JSON requests
README.md - Apply helper → Config loader: validates saved config
src/frfw/helper/server.py - Apply helper → Config apply: invokes apply
src/frfw/helper/server.py - Config apply → Config loader: validates configuration
src/frfw/apply.py - Config apply → nftables rules: builds ruleset
src/frfw/apply.py - Apply helper → nftables rules: configures enforcement
README.md - Apply helper → DNS filtering: controls DNS service
src/frfw/helper/server.py - Apply helper → XDP SNI filter: controls XDP filtering
- Apply helper → ZTNA access: authorizes clients
src/frfw/helper/server.py - nftables rules → ZTNA access: enforces timed access
- Apply helper → WireGuard VPN: handles VPN actions
README.md - WebUI app → Accounts and MFA: authenticates accounts
src/frfw/webui/app.py - WebUI app → Audit log: records changes
src/frfw/webui/app.py - Local AI IDS → nftables rules: quarantines sources
README.md - TLS fingerprinting → XDP SNI filter: receives ClientHello
README.md - IoT discovery → nftables rules: isolates devices
README.md - App identification → DNS filtering: observes DNS names
src/frfw/appid/daemon.py - WebUI app → Metrics exporter: exports metrics
- WebUI app → Attack surface: presents exposure view
- WebUI routes → App identification: displays app usage
src/frfw/webui/routes/apps.py