Gypsum takes a YAML document as input and produces a shell script full of iptables commands as output.