Fail2zig. A single-binary fail2ban replacement written in Zig
Details
- External ID
- 49732015
- Source
- HN
- Company
- —
- Product
- Fail2zig. A single-binary fail2ban replacement written in Zig
- Website domain
- fail2zig.com
- Launched
- Sept. 16, 2026
- Cohort
- —
- Upvotes
- 6
- Upvotes percentile
- 0.32854864433811803
- Tags
- —
- Fetched at
- Sept. 20, 2026, 5:44 p.m.
- Updated at
- Sept. 20, 2026, 5:44 p.m.
Description
Built fail2zig because I like fail2ban's log-to-ban model but wanted a smaller runtime with explicit limits on the work attacker controlled input can cause.fail2zig is a single static binary with bounded parsers instead of a regex engine, SQLite-backed durable state, and nftables enforcement directly through netlink. Also has the ability to inspect and migrate existing fail2ban configurations.I just release 0.4.0 today which is the point where I'm more comfortable putting it in front of more people.Source: https://github.com/ul0gic/fail2zigWouldn't mind feedback from people running fail2ban today, including reasons you would not switch.
Enrichment
- Theme
- proxy, dns, and networking tools
- Vertical
- Security
- Function
- Dev tools
- Audience
- Developer
- AI stance
- Not AI
- Project type
- Hobby / open-source project
- Normalized one-liner
- fail2ban replacement in zig for intrusion prevention
- Manually corrected
- False
Could you build this?
No Writing a zero-dependency, crash-safe systems daemon in Zig that interfaces directly with Linux netfilter/nftables via netlink sockets and implements bounded memory parsers requires deep systems programming expertise.
What it would actually take: Requires low-level systems programming in Zig or C, implementing custom non-backtracking log parsers to prevent ReDoS, direct Linux kernel netlink socket communication (libnftnl/netfilter) without invoking external subshells, and handling POSIX signals, daemonization, and SQLite transactions with strict crash-recovery guarantees.
Discussion
No comments on this launch.
Competitors
Other products that read as similar to this one — 44 launches clear the similarity bar, closest 8 shown.
Attention rank: #31 of 45 (itself plus its competitors, highest first — normalized so YC and Product Hunt are compared fairly).
Launched 309 days after the earliest competitor.
- go-binsync · hn · 2026-08-27 · 5 upvotes · similarity 0.40
- CodeDiff · hn · 2026-09-29 · 6 upvotes · similarity 0.38
- Zroar · hn · 2026-08-21 · 6 upvotes · similarity 0.35
- Binary Code Translator · ph · 2026-09-13 · 1 upvotes · similarity 0.35
- Diffing Binary Files · hn · 2026-08-05 · 19 upvotes · similarity 0.35
- Zig parser in ~70 lines of JavaScript · hn · 2026-01-17 · 10 upvotes · similarity 0.34
- Arxid · hn · 2026-08-05 · 8 upvotes · similarity 0.34
- AuditBadger · hn · 2026-08-05 · 9 upvotes · similarity 0.34
Other launches for this product
- No other launches for this product.
Same idea, different domain
Nobody's really built a dev tools tool for Sales yet.