Container-based secure home gateway

In a society where Internet has become a fundamental means of communication, the devices that enable the access to this immense network have assumed a fundamental role. Gateways allowing connection to the Internet are usually supplied by Internet service providers and offer a limited range of services. From a security point of view, these devices, along with other low-cost products on the market, often have configuration shortcomings that make them vulnerable to network attacks. They also do not provide users with the possibility to configure or implement other desired Internet services. This document proposes the development of an application that integrates a router, a switch, an access point, a firewall, an intrusion detection system (IDS) and a secure web browser. The application offers a high level of customization of services as well as the possibility of adding new functionalities. Software development is based on the popular container technology, allowing the isolation of individual services and increasing the level of security and portability on different devices. Container management is realized through the Docker container engine. The thesis deals with security issues in the container environment, analyzing the vulnerabilities and risks of this technology and suggesting solutions and practices to mitigate them. This overview is followed by the development of the application, starting with the explanation and containerization of the individual services and ending with their integration in a single network in the final product.