DiscrimiNAT Firewall

“The domain based rules in AWS firewall are pretty much a joke as it is based only on tls.sni that you can easily spoof, that doesn't really meet our standards.”

“The rollback capability gave us confidence to deploy in Production. We could always fall back to the Managed NAT gateway if needed.”

“It's really fast and performant. We deploy it with the Terraform module and it's maintenance-free for us. Price is also good.”

“No TLS decryption means no privacy concerns, no certificate management, and no performance overhead. Perfect for compliance.”

“The zero false positives claim from Wormhole DNS verification turned out to be accurate. Our SOC stopped chasing phantom alerts.”

“We really like the speed and simplicity of deployment using Terraform with the vendor-supplied modules, no need for console access.”