This is interesting, but I'd rather prefer something like Ript (a Ruby DSL for Iptables) than a very specific implementation along with its assumptions. https:

This is interesting, but I'd rather prefer something like Ript (a Ruby DSL for Iptables) than a very specific implementation along with its assumptions. https://github.com/bulletproofnetworks/ript https://github.com/bulletproofnetworks/ript So long as you can write Ruby, this works in Chef, Puppet, or whatever.