There are 55 repositories under bpf topic.
Capstone disassembly/disassembler framework for ARM, ARM64 (ARMv8), Alpha, BPF, Ethereum VM, HPPA, LoongArch, M68K, M680X, Mips, MOS65XX, PPC, RISC-V(rv32G/rv64G), SH, Sparc, SystemZ, TMS320C64X, TriCore, Webassembly, XCore and X86.
Kyanos is a networking analysis tool using eBPF. It can visualize the time packets spend in the kernel, capture requests/responses, makes troubleshooting more efficient.
A curated list of awesome projects related to eBPF.
Continuous profiling for analysis of CPU and memory usage, down to the line number and throughout time. Saving infrastructure cost, improving performance, and increasing reliability.
Linux Runtime Security and Forensics using eBPF
Aya is an eBPF library for the Rust programming language, built with a focus on developer experience and operability.
eBPF Developer Tutorial: Learning eBPF Step by Step with Examples
the TCPdump network dissector
the LIBpcap interface to various kernel packet capture mechanism
Inspektor Gadget is a set of tools and framework for data collection and system inspection on Kubernetes clusters and Linux hosts using eBPF
Prometheus exporter for custom eBPF metrics
Schedule bpftrace programs on your kubernetes cluster using the kubectl
Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (LSM-BPF, AppArmor).
Solidity Compiler for Solana, Polkadot and Stellar
A firewall that utilizes the Linux kernel's XDP hook. The XDP hook allows for very fast network processing on Linux systems. This is great for dropping malicious traffic from a (D)DoS attack. IPv6 is supported with this firewall! I hope this helps network engineers/programmers interested in utilizing XDP!
Alaz: Advanced eBPF Agent for Kubernetes Observability – Effortlessly monitor K8s service interactions and performance metrics in your K8s environment. Gain in-depth insights with service maps, metrics, and more, while staying alert to crucial system anomalies 🐝
HUATUO is a cloud-native operating system observability project open-sourced by DIDI and incubated under the CCF.
eBPF (extended Berkeley Packet Filter) Guide. Learn all about the eBPF Tools and Libraries for Security, Monitoring , and Networking.
Red-Team Linux kernel rootkit
Making eBPF programming easier via build env and examples