Control D is a customizable DNS filtering and traffic redirection platform that leverages Secure DNS protocols like DNS-over-HTTPS, DNS-over-TLS and DNS-over-QUIC, with support for Legacy DNS.
With Control D you can: block malicious threats, block unwanted types of content network wide (ads & trackers, IoT telemetry, adult content, socials, and more), redirect traffic using transparent proxies and gain visibility on network events and usage patterns, with client level granularity.
Think of it as your personal Authoritative DNS resolver for the entire Internet that gives you granular control over what domains get resolved, redirected or blocked.
Learn more
Cloudflare is the foundation of your infrastructure, applications, teams, and software. Cloudflare protects and ensures the reliability and security of your external-facing resources like websites, APIs, applications, and other web services. It protects your internal resources, such as behind-the firewall applications, teams, devices, and devices. It is also your platform to develop globally scalable applications. Your website, APIs, applications, and other channels are key to doing business with customers and suppliers. It is essential that these resources are reliable, secure, and performant as the world shifts online. Cloudflare for Infrastructure provides a complete solution that enables this for everything connected to the Internet. Your internal teams can rely on behind-the-firewall apps and devices to support their work. Remote work is increasing rapidly and is putting a strain on many organizations' VPNs and other hardware solutions.
Learn more
CacheGuard
CacheGuard-OS is an open-source Linux-based UTM gateway appliance OS that has been in active development since 2002. It is designed to run on commodity x86 hardware and act as the default route between an internal network and the internet, replacing the ISP-provided router as the traffic checkpoint.
The stack integrates: Squid (web cache and proxy), ClamAV (web antivirus), ModSecurity (WAF), StrongSwan (IPsec/IKEv2 VPN), IPRoute2 (QoS and WAN load balancing), NetFilter (stateful firewall), SSL inspection, and URL filtering. All components are configured through a web-based admin interface rather than directly, making the platform accessible to operators without deep Linux expertise while remaining auditable by those who want to inspect the underlying configuration.
The OS has been open-source since its first release — source ships on every installed appliance. It was recently published publicly on GitHub to make the codebase easier to browse and audit.
Target deployments are small to medium networks — SMBs, schools, and branch offices — where a commercial UTM appliance is overkill on budget but the threat surface is the same. Runs on bare metal or common hypervisors (VMware, VirtualBox, KVM, Hyper-V). No vendor lock-in, no subscription, no licence cost.
GitHub: cacheguard/CacheGuard-OS
Learn more
Barracuda Content Shield
Ensure your business's web browsing is secure, as there are approximately 18.5 million compromised websites at any moment. Safeguard your employees and business from harmful links, sites, and downloads to maintain a secure working environment. It's essential to shield both local and remote users from accessing dangerous online content. With 40% of internet usage often straying from work-related activities, implementing detailed access policies can help curb unproductive or inappropriate browsing. You can easily initiate this process within minutes without the need for client software installations. Barracuda Content Shield Plus is a cloud-centric solution that melds effective content filtering, file protection, precise policy enforcement, in-depth reporting, straightforward centralized management, and real-time threat intelligence, all designed to safeguard your users, organization, and brand. Its architecture, designed without a proxy requirement, ensures that latency remains low. Meanwhile, Barracuda Content Shield offers superior web protection but comes with a more streamlined set of features. It incorporates cutting-edge DNS and URL filtering that is perpetually updated, alongside agent-based filtering to enhance security. By utilizing these tools, organizations can create a safer online environment for all users.
Learn more