PF-based service router?

[williamdosa 5]

I've been thinking about using jails for service isolation, using non-routeable IPs tied to my loopback interface for the jails, and using PF to redirect incoming traffic to the appropriate jail as needed. This is easy enough to do manually, but I got to wondering if there's an existing project that handles doing this via an API. This would make it easier to fail services over between jails, which would be handy for doing rolling upgrades and whatnot. https://www.minimilitia.mobi/ https://www.applock.ooo/ https://www.7zip.vip/

Edited October 16, 2018 by williamdosa