There are 223 repositories under ebpf topic.
APM, Application Performance Monitoring System
The container platform tailored for Kubernetes multi-cloud, datacenter, and edge management ⎈ 🖥 ☁️
Capturing SSL/TLS plaintext without a CA certificate using eBPF. Supported on Linux/Android kernels for amd64/arm64.
Cloud Native Runtime Security
ebpf-go is a pure-Go library to read, modify and load eBPF programs and attach them to various hooks in the Linux kernel.
Coroot is an open-source observability and APM tool with AI-powered Root Cause Analysis. It combines metrics, logs, traces, continuous profiling, and SLO-based alerting with predefined dashboards and inspections.
Cloud native networking and network security
Kyanos is a networking analysis tool using eBPF. It can visualize the time packets spend in the kernel, capture requests/responses, makes troubleshooting more efficient.
A curated list of awesome projects related to eBPF.
eBPF-based Linux high-performance transparent proxy solution.
Continuous profiling for analysis of CPU and memory usage, down to the line number and throughout time. Saving infrastructure cost, improving performance, and increasing reliability.
Linux Runtime Security and Forensics using eBPF
Aya is an eBPF library for the Rust programming language, built with a focus on developer experience and operability.
eBPF Developer Tutorial: Learning eBPF Step by Step with Examples
Distributed tracing without code changes. 🚀 Instantly monitor any application using OpenTelemetry and eBPF
Perforator is a cluster-wide continuous profiling tool designed for large data centers
PcapPlusPlus is a multiplatform C++ library for capturing, parsing and crafting of network packets. It is designed to be efficient, powerful and easy to use. It provides C++ wrappers for the most popular packet processing engines such as libpcap, Npcap, WinPcap, DPDK, AF_XDP and PF_RING.
The production-scale datacenter profiler (C/C++, Go, Rust, Python, Java, NodeJS, .NET, PHP, Ruby, Perl, ...)
An open source real-time network topology and protocols analyzer
Inspektor Gadget is a set of tools and framework for data collection and system inspection on Kubernetes clusters and Linux hosts using eBPF
Prometheus exporter for custom eBPF metrics
Schedule bpftrace programs on your kubernetes cluster using the kubectl
Fast and Lightweight Observability Data Collector
Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (LSM-BPF, AppArmor).
Instant K8s service dependency map, right to your Grafana.
A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.
一个深挖 Linux 内核的新功能特性,以 io_uring, cgroup, ebpf, llvm 为代表,包含开源项目,代码案例,文章,视频,架构脑图等