Readme written with an LLM but replaced the em dashes with two dashes. Also the ASCII table is off and incorrect. I fail to care at this point

Would love to see a screenshot of the dashboard.

> Deep L7 inspection -- Optional TLS SNI and DNS query extraction for domain-level visibility into encrypted traffic.

Nice feature. Would be useful to add active traffic management block/drop in the future, in addition to the existing passive analysis.