tangentsoft/iperf3 repository overview

This is a single statically-linked binary of ESNet's iperf3 tool, set to start as a server.

It's tiny because there is only one executable inside this container; there isn't an "OS," not even a shell. This makes the container as secure as possible, having no greater attack surface than the service binary itself. If anyone ever does work out a way to exploit iperf3, running it this way leaves the attacker without any additional tools to extend their reach.

Full details about the project are here⁠, including the Containerfile and Makefile used to build the images, plus instructions on getting it running under RouterOS 7, the initial testing target. It's since been tested under Docker and Podman, but given the bare-bones nature of the RouterOS container runner, it should work on any other sane OCI runner.