throughline

Throughline is a Linux utility providing visibility into network activity and control over traffic routing. Built in Rust, it emphasizes auditability and security. The tool has two interfaces: a visualization screen and a policy editor. The visualization screen displays a real-time map of network connections on the host, attributing each connection to the specific process, service, or container that opened it. The policy editor is a drag-and-drop interface allowing users to change where traffic goes by defining routing policies. No changes are applied automatically; users must explicitly confirm the action, triggering a countdown timer that reverts changes if not confirmed. Throughline relies on system files to determine process ownership and connection directions, deriving facts dynamically from the host's state. It includes safety checks to prevent lockouts or routing errors and runs locally on the loopback interface only.