#Ebpf
Showing 60 of 123 repositories tagged #ebpf, ranked by stars
eBPF-based Networking, Security, and Observability
The container platform tailored for Kubernetes multi-cloud, datacenter, and edge management ⎈ 🖥 ☁️
Capturing SSL/TLS plaintext without a CA certificate using eBPF. Supported on Linux/Android kernels for amd64/arm64.
eBPF-powered network observability for Kubernetes. Indexes L4/L7 traffic with full K8s context, decrypts TLS without keys. Queryable by AI agents via MCP and humans via dashboard.
Cloud Native Runtime Security
Web-based Traffic and Security Network Traffic Monitoring
ebpf-go is a pure-Go library to read, modify and load eBPF programs and attach them to various hooks in the Linux kernel.
Coroot is an open-source observability and APM tool with AI-powered Root Cause Analysis. It combines metrics, logs, traces, continuous profiling, and SLO-based alerting with predefined dashboards and inspections.
Cloud native networking and network security
Instant Kubernetes-Native Application Observability
eBPF-based Linux high-performance transparent proxy solution.
Continuous profiling for analysis of CPU and memory usage, down to the line number and throughout time. Saving infrastructure cost, improving performance, and increasing reliability.
eBPF-based Security Observability and Runtime Enforcement
Aya is an eBPF library for the Rust programming language, built with a focus on developer experience and operability.
Per-process network monitoring for your terminal with deep packet inspection. Cross-platform, sandboxed.
Linux Runtime Security and Forensics using eBPF
Hubble - Network, Service & Security Observability for Kubernetes using eBPF
Distributed tracing without code changes. 🚀 Instantly monitor any application using OpenTelemetry and eBPF
eBPF distributed networking observability tool for Kubernetes
Inspektor Gadget is a set of tools and framework for data collection and system inspection on Kubernetes clusters and Linux hosts using eBPF
bpftop provides a dynamic real-time view of running eBPF programs. It displays the average runtime, events per second, and estimated total CPU % for each program.
Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (LSM-BPF, AppArmor).
🕵️♂️ TUI for sniffing network traffic using eBPF on Linux
Fast and Lightweight Observability Data Collector
Instant K8s service dependency map, right to your Grafana.
eBPF-based autoinstrumentation of web applications and network metrics
A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.
eBPF based cloud-native load-balancer for Kubernetes|Edge|Telco|IoT|XaaS.
Linux eBPF backdoor over TCP. Spawn reverse shells, RCE, on prior privileged access. Less Honkin, More Tonkin.
The goal is to make it easier to configure your favorite Linux distribution as a router. Built with Rust and eBPF.
Qtap: An eBPF agent that captures pre-encrypted network traffic, providing rich context about egress connections and their originating processes.
Process-aware, eBPF-based tcpdump
Library to work with eBPF programs from Go
k8spacket - collects TCP traffic and TLS connection metadata in the Kubernetes cluster using eBPF and visualizes in Grafana
eBPF-based Cloud Native Monitoring Tool
A modular and blazing fast runtime security tool for the IoT, powered by eBPF.
OpenTelemetry Auto Instrumentation using eBPF
Minimal and opinionated eBPF tooling for the Rust ecosystem
Collection of Linux eBPF slides/documents.
Monitor network traffic per executable
A Tool to make Build and Run eBPF programs easier
Curated List of Best DevOps Tools
A firewall that utilizes the Linux kernel's XDP hook. The XDP hook allows for very fast network processing on Linux systems. This is great for dropping malicious traffic from a (D)DoS attack. IPv6 is supported with this firewall! I hope this helps network engineers/programmers interested in utilizing XDP!
ebpfkit is a rootkit powered by eBPF
eBPF library for Go. Powered by libbpf.
eBPF-based lightweight debugger for Android with MCP support
Use eBPF to speed up your Service Mesh like crossing an Einstein-Rosen Bridge.
An eBPF Manager for Linux and Kubernetes
High Performance ServiceMesh Data Plane Based on eBPF and Programmable Kernel
eBPF based always-on CPU/GPU profiler auto-discovering targets in Kubernetes and systemd, zero code changes or restarts needed!
Alaz: Advanced eBPF Agent for Kubernetes Observability – Effortlessly monitor K8s service interactions and performance metrics in your K8s environment. Gain in-depth insights with service maps, metrics, and more, while staying alert to crucial system anomalies 🐝
Network monitoring & diagnosis suite for Kubernetes
CLI to install, manage & troubleshoot Kubernetes clusters running Cilium
eBPF/XDP-based software framework for fast network services running in the Linux kernel.
traffic control in pure go - it allows to read and alter queues, filters and classes
Observability & Troubleshooting for Kubernetes Services
System-level AI agent profling/tracing tool and skills in eBPF
Framework for running BPF programs with rules on Linux as a daemon. Container aware.
Layer 4 Kubernetes load-balancer
hBPF = eBPF in hardware