Build a Firewall (Packet Filter)

Build an iptables-style firewall: stateless and stateful packet filtering, connection tracking, NAT/SNAT/DNAT, port forwarding, rate limiting (token bucket), routing/forwarding, logging/monitoring, and the design behind Linux netfilter, BSD pf, and cloud security groups.