There are 13 repositories under ebpf-programs topic.
Continuous profiling for analysis of CPU and memory usage, down to the line number and throughout time. Saving infrastructure cost, improving performance, and increasing reliability.
Inspektor Gadget is a set of tools and framework for data collection and system inspection on Kubernetes clusters and Linux hosts using eBPF
Schedule bpftrace programs on your kubernetes cluster using the kubectl
k8spacket - collects TCP traffic and TLS connection metadata in the Kubernetes cluster using eBPF and visualizes in Grafana
Alaz: Advanced eBPF Agent for Kubernetes Observability – Effortlessly monitor K8s service interactions and performance metrics in your K8s environment. Gain in-depth insights with service maps, metrics, and more, while staying alert to crucial system anomalies 🐝
eBPF based always-on CPU/GPU profiler auto-discovering targets in Kubernetes and systemd, zero code changes or restarts needed!
eBPF (extended Berkeley Packet Filter) Guide. Learn all about the eBPF Tools and Libraries for Security, Monitoring , and Networking.
Making eBPF programming easier via build env and examples
🧑💻🔭 Digma helps you fix performance issues in your code by automatically profiling the code execution. Using APMs to identify code bottlenecks, query problems and scalability issues takes time and effort - Digma automates all of that. Digma is free for developers - get it here: https://digma.ai/get-digma/
Prototyping kernel development work outside mainline
Hades is a Host-Based Intrusion Detection System based on eBPF(mainly)
A stateless, high-performance NAT-like proxy that attaches to the XDP hook in the Linux kernel using (e)BPF for fast packet processing. This proxy forwards packets based on configurable rules and performs source-port mapping, similar to IPTables and NFTables.
LLVM (Low Level Virtual Machine) Guide. Learn all about the compiler infrastructure, which is designed for compile-time, link-time, run-time, and "idle-time" optimization of programs. Originally implemented for C/C++ , though, has a variety of front-ends, including Java, Python, etc.
FlowSentryX is an open-source XDP-based fast packet processing DOS and DDOS Mitigation Framework solution designed to protect your network infrastructure from Denial of Service (DOS) and Distributed Denial of Service (DDOS) attacks at Layer 3 & 4.
Sample project demonstrating how to use eBPF to encap/decap packets with an MPLS label.
Open Source runtime tool which help to detect malware code execution and run time mis-configuration change on a kubernetes cluster
eBPF sk_lookup program as a golang library
eBPF bytecode assembler and compiler
Flow feature extraction tool built in Rust using eBPF
X-Defender💥 is an advanced (D)DoS mitigation tool built with eBPF and XDP. It not only filters and limits malicious traffic in real-time but also takes a proactive and aggressive approach to neutralize threats before they impact your network.
A Proof-of-concept, low-overhead, sampling CPU profiler for Python implemented using eBPF.
A utility for dumping per-thread statistics for CPython GIL using eBPF
eBPF Tools - Tool for monitoring, performance benchmarking and tracing linux kernel
This repository contains a tool which traces syscalls in a fast way using eBPF linux kernel feature
OPENED Tool to extract specific eBPF functions from large monoliths (tested on Katran, Mizar, Cilium..)
Code-snippets for developing eBPF programs
Jibril: A performant and low impact Linux runtime security tool agent.
eBPF container escape detector prototype | Kernel 6.8+ | Early dev phase | Expect kernel panics ⚠️
This utility allows users to track changes in a specified file and prints a timestamp when modifications occur.