Fail2Zig

Fail2Zig is a fail2ban alternative written in Zig, designed for security-conscious deployments. It adopts fail2ban's log-to-ban model but replaces regex engines with bounded parsers to prevent attacker-controlled input from consuming excessive resources. The tool uses SQLite for durable state management and enforces rules directly through netlink and nftables.

The project includes utilities to inspect and migrate existing fail2ban configurations. Version 0.4.0 marks the first release considered stable enough for production use.