It's a pity that the Sandstorm project got acquired. After decades of research and development in operating systems, security, and UI we still can't make an easy to use Firewall solution and instead have to rely on external services like Argo tunnel and DigitalOcean's firewall to reliably lock down a network. This is a failure of software engineering and open source. For all the the obsession with software freedom, we are still locked in to proprietary systems when it comes to critical stuff.