single-packet-authorization

OpenSPA - An open and extensible Single Packet Authorization (SPA) protocol

Securing the Software-Defined Perimeter framework with automated security configuration deployment systems

Layer 4 Single Packet Authentication utilizing Netfilter Queue and libnetfilter.

Open your firewall with a single encrypted packet. Nothing else is ever visible.

SPK is a single-packet authorization (SPA) port knocking tool that uses post-quantum key encapsulation to protect servers by acting as a cryptographic whitelist layer.

Single Packet Authorization example with fwknop

nfqueue/ipset-based port knocking using JWT (JSON Web Token) as SPA (Single Packet Authorization)

Simple Software-Defined Perimeter (SDP) implementation for Zero Trust network access

Modern, responsive web console for the fwknop Single Packet Authorization (SPA) client — knock to open ports, manage per-host favorites & history, with a precise wire-level packet spec.

Unofficial OpenSPA Dockerfiles

Layered DDoS-filtering PoC: de Bruijn locator + slot-bound HMAC tag with stateless knock verification. Research prototype, pre-production.

Secure ZTNA implementation featuring encrypted Single Packet Authorization (SPA), WireGuard VPN integration, and dynamic IP/protocol-based access control.

Single Packet Authorization Port-Knocking in Python

Single packet authorization gate: guarded ports stay closed until one authenticated UDP knock opens them for a short lease