STATEFUL.
IMPERVIOUS.
Protect your infrastructure with engineering-grade network filters. Nubis Cloud Firewalls provide stateful packet inspection at the edge, blocking unauthorized traffic before it ever touches your compute instances.
Stateful Layer 4
Rules look beyond individual packets, tracking the state of network connections (SYN, ACK, Established) for total flow control.
- TCP/UDP stream tracking
- Bi-directional flow analysis
- ICMP state awareness
Edge Enforcement
Firewall logic is executed at our network boundary on dedicated hardware. Zero performance impact on your instances.
- < 1µs Rule processing
- Kernel-bypass pathing
- Hardware offload (eBPF)
Dynamic rule engine
Instantly apply rule changes across entire fleets using tags and dynamic groups. No need to update individual VMs.
- Tag-based targeting
- Auto-propagation
- Bulk rule orchestration
Telemetry & Logs
Real-time streaming of accepted and dropped packets. Integrated with our monitoring stack for deep forensic analysis.
- Netflow v9 support
- Dropped packet alerts
- API-driven log export
Rule Orchestration
Deterministic rule processing. Incoming packets are evaluated top-to-bottom with immediate enforcement at the packet level.
Next-Gen Protection
Nubis Cloud Firewalls act as an impenetrable boundary for your applications, mitigating DDoS attacks and unauthorized access attempts at the network edge.
Zero-Latency Filtering
Our firewall rules are enforced at the network interface layer. Sub-microsecond processing overhead.
VPC-Wide Policies
Apply security groups across entire virtual private clouds or target specific resource types using tags.
Stateful Inspection
The firewall automatically allows return traffic for outbound requests without needing explicit inbound rules.
Protocol Support
Full filtering control for TCP, UDP, ICMP, and GRE protocols across IPv4 and IPv6 stacks.
Terraform & API
Manage complex rule sets programmatically or using Infrastructure as Code (IaC) tools.
Detailed Flow Logs
Stream network logs to external SIEM or storage for compliance auditing and threat hunting.