http://tservice.net.ru/~s0mbre/old/?section=projects&item=unetstack

it’s faster than standard in-kenrel implementation, but has limited featutures.