RuleForge 0.1.0 — free edition

Superseded — do not use this build. The binary in this release writes the network address onto interfaces instead of the interface's own address (198.51.100.2 255.255.255.240 becomes 198.51.100.0/28), which makes generated configurations undeployable. Fixed in v0.1.2 — v0.1.1 fixed only the parser side and is superseded too. Re-generate anything produced with this version.

First public release of the RuleForge free edition — multivendor firewall migration, any of five vendors to any other (20 directions), self-hosted and fully offline.

Parsers (source): Cisco ASA (incl. multi-context auto-split), Cisco FTD, Palo Alto PAN-OS set format (incl. Panorama device-groups/vsys), FortiGate (incl. VDOMs, VIP/ippool/central-SNAT), Check Point (Gaia clish + mgmt_cli JSON exports).

Generators (target): ASA CLI · FMC REST JSON bundle + interface worksheet · PAN-OS set commands + Panorama variant · FortiOS CLI (central NAT) · Check Point mgmt_cli + Gaia scripts.

Pipeline: Deep Analysis → editable Full Mapping (approval-gated) → Convert → Review with per-element outcomes. Nothing is ever silently dropped — VPN/certificate/dynamic-routing features are captured with their source lines and reported for manual rebuild. Every job produces a self-contained HTML Conversion Process Report. Honesty invariants are tested: golden configs convert in all 20 directions with per-element accounting.

Free edition limits: full deep analysis for all five vendors; conversion up to 50 rules/job, single-tenant, 1 stored job. The paid edition (unlimited rules, multi-context/Panorama/VDOM conversion, Final Migration Report, round-trip verification) is at whop.com/nizar-tuanku/ruleforge

Install: download the tarball below, verify with SHA256SUMS, tar xzf and run ./ruleforge — dashboard on http://127.0.0.1:8428. Or build from source: go build ./cmd/ruleforge