NeuSentra is a cutting-edge, self-hosted home network security and management system built around Raspberry Pi.
It empowers you to take full control of your smart home network with advanced features like DHCP, firewall, ad-blocking, and parental controls — all accessible via an intuitive web-based dashboard.
Inspired by Pi-hole but crafted for full network sovereignty, NeuSentra delivers enterprise-grade security and control — yet remains accessible to home users of all skill levels.
-
Dynamic MAC-Based Device Groups
Organize personal, IoT, kids’ devices into groups to apply customized network and access policies. -
Flexible Firewall & Parental Controls
IPv4/IPv6 firewall rules per device/group, time-based access restrictions, and granular website filtering. -
Reliable DHCP Server
Dynamic IP leasing with reserved assignments for known devices. -
Network-Wide Ad and Tracker Blocking
Block malicious domains and unwanted ads, configurable on a per-group basis. -
Real-Time Network Monitoring
Watch connected devices and blocked traffic live via Server-Sent Events (SSE). -
Secure PostgreSQL Storage & Credential Encryption
Database credentials are generated dynamically and encrypted on-device ensuring top-tier security. -
Modular, Secure System Scripts
Backend-triggered scripts written in Bash and Python manage DHCP, firewall, and ad-block workflows. -
One-Command Installer Script
Easily deploy NeuSentra with a single, automated Bash script that sets up dependencies, builds source code, and configures services.
[ISP Modem] → eth0 → [Raspberry Pi + NeuSentra]
│
eth1 → [Existing Router (AP Mode)] → Connected Devices
- Frontend: React + Vite + TypeScript for a modern and reactive UI
- Backend: NestJS with REST API and SSE for backend logic and real-time updates
- Database: PostgreSQL (native on Pi, encrypted credentials)
- Communication: REST + SSE
- Authentication: JWT or OAuth2, configurable via the UI
- Scripts: Bash/Python for managing network subsystems (DHCP, firewall, DNS)
All critical network and security settings — including IP subnets, firewall rules, and device groups — are configurable exclusively via the web dashboard.
NeuSentra/
├── frontend/ # React + Vite web dashboard UI
├── backend/ # NestJS backend API server
├── scripts/ # Bash/Python system automation scripts
├── init.sh # One-liner installer script
└── README.md # Project documentation and usage guide
- PostgreSQL credentials are automatically generated during install and encrypted for maximum protection.
- Only the NeuSentra backend can decrypt credentials, stored with strict file permissions.
- Scripts and system interactions are sandboxed for security and auditability.
- Dashboard: Manage your entire home network through a unified web UI.
- Live Updates: Real-time monitoring of devices and network activity with SSE.
- Automated Scripts: Backend securely triggers network management scripts for DHCP, firewall, and ad-block updates.
- Full VLAN support, including tagged VLANs for device segmentation (when router hardware supports).
- VPN server integration for secure remote network access.
- Granular parental controls with schedules and alert notifications.
- Backup and restore system configuration.
- Dockerized deployment option for advanced users.
- Prepare Raspberry Pi with PostgreSQL and Redis installed.
- Run installer script to bootstrap system.
- Optionally configure reverse proxy and HTTPS with Nginx for secure access.
NeuSentra is open-source and MIT licensed. See LICENSE file for terms.