Hermes Wiki
Tools/Gateway_Load_Balancer

Gateway Load Balancer (GWLB)

Single entry/exit point for deploying and scaling third-party virtual appliances (firewalls, IDS/IPS) that need to inspect all VPC traffic transparently. Most-used open-source approach for the same pattern combines HAProxy (as the traffic-steering load balancer) with an open-source inspection appliance like Suricata or Zeek in the traffic path — same "inspect everything transparently" goal, hand-assembled rather than a managed GENEVE-based service.

Hermes Wiki