networkshard
← projectsLive

/projects/shardflow

ShardFlow

Layer-2 LAN workbench: ARP, drop, throttle, pcap any device.

GitHub ↗

About

Layer-2 LAN workbench for authorized lab use. Discovers every device on the wire (ARP, mDNS, SSDP, OUI) and applies per-target drop, throttle, or silent pcap policies via nftables, tc/IFB, and AF_PACKET ARP poisoning. TUI + JSON-RPC CLI.

Features

  1. 01Device discovery via ARP sweep, mDNS, SSDP, OUI vendor lookup
  2. 02Drop, throttle (tc HTB + IFB), and silent pcap to .pcapng
  3. 03Tunable ARP cadence down to 50ms for hardened mobile devices
  4. 04Lab sandbox: spin up 16 fake netns hosts for safe testing
  5. 05JSON-RPC CLI for scripting automated network policies
  6. 06TUI dashboard with live traffic metrics per target

Stack

  • Go
  • Linux
  • nftables
  • libpcap
  • AF_PACKET
  • JSON-RPC

Policy Modes

Drop

Complete network isolation via nftables rules — target loses all connectivity

Throttle

Bandwidth shaping via tc HTB + IFB — configurable rate limits per target

Pcap

Silent packet capture to .pcapng — passive monitoring with zero target disruption