Httpjail
lastmod 2025-09-25created 2025-09-251 edits
A process-level network isolation tool that filters HTTP(S) requests
About
- A transparent proxy tool that isolates the network per application and can intercept and control all HTTP/HTTPS traffic
- Blocks all requests by default (deny all); allow decisions can be configured through fast, safe JavaScript rule-based filtering on the V8 engine, or through external scripts
- Can monitor every request by intercepting HTTP/HTTPS traffic and injecting TLS certificates
- DNS exfiltration prevention blocks data leaks through DNS queries
- Monitors all HTTP/HTTPS requests and writes log records in the format <timestamp> <+/-> <METHOD> <URL>
- Supports Linux and macOS; simple commands can allow only specific domains, log requests to a file, or isolate the network when running Docker containers
- Use cases
- Security auditing: see which network resources an application accesses
- Compliance: enforce communication only with approved endpoints
- Dev and test environment control: verify application behavior in a restricted network environment
- CI/CD pipeline network access management: control and log external requests during build/test
- Privacy protection: prevent app telemetry and phoning home