fail2zig

fail2zig is a high-performance, single-binary security daemon designed to replace fail2ban on Linux systems. It actively reads system logs to detect repeated authentication failures and other hostile input, subsequently banning offending IP addresses. Built for durability and predictable behavior, fail2zig offers a smaller runtime, explicit resource limits, and native SQLite persistence, ensuring robust server protection. It integrates with kernel-level enforcement mechanisms like nftables or iptables, and supports easy migration from existing fail2ban configurations, making it an ideal choice for system administrators seeking an efficient and secure solution.