Vajra: Next-Generation Firewall

Vajra is two systems that talk to each other. The detection engine is a C++ and Python pipeline that captures traffic through DPDK kernel bypass, inspects it, scores it with ML models, and responds by pushing firewall rules. The command center is a Flutter desktop app that launches the engine, subscribes to its live event stream over WebSocket, and renders threats and flows in real time.

The engine runs headless; the app is the operator's window into it. Team Sudarshana built it for Smart India Hackathon 2025 and won at the national level against a field of more than 50,000 participants.

• High-throughput TCP/IP packet pipeline in C++ over DPDK with vfio-pci: capture moved into user space, zero-copy I/O, inline feature extraction and entropy calculation.
• Suricata running on DPDK alongside it for line-rate deep packet inspection, protocol decoding and signature matching.
• Encrypted-traffic analysis that flags exfiltration, port scanning and C2 patterns on TLS sessions without decrypting them, plus a UBA engine for insider-threat signals.
• SOAR layer that generates iptables and nftables rules at runtime in response to detections, with every action recorded through a unified logger.
• Live WebSocket event stream into a cross-platform Flutter command center showing threats, flows and analytics as they happen.