cilium / cilium
eBPF-based Networking, Security, and Observability
cilium / cilium
cilium / ebpf
ebpf-go is a pure-Go library to read, modify and load eBPF programs and attach them to various hooks in the Linux kernel.
daeuniverse / dae
eBPF-based Linux high-performance transparent proxy solution.
aquasecurity / tracee
Linux Runtime Security and Forensics using eBPF
deepflowio / deepflow
eBPF Observability - Distributed Tracing and Profiling
open-telemetry / opentelemetry-ebpf-profiler
The production-scale datacenter profiler (C/C++, Go, Rust, Python, Java, NodeJS, .NET, PHP, Ruby, Perl, ...)
isovalent / ebpf-docs
An effort to comprehensively document eBPF
florianl / go-tc
traffic control in pure go - it allows to read and alter queues, filters and classes
bytedance / vArmor
vArmor is a cloud-native container hardening system that leverages AppArmor/BPF/Seccomp and NetworkProxy technologies to enforce access control from system calls to application protocols — protecting workloads including AI Agents.
atoonk / wireblast
A fast, easy-to-use AF_XDP traffic generator for Linux
kubeshark / kubeshark
eBPF-powered network observability for Kubernetes. Indexes L4/L7 traffic with full K8s context, decrypts TLS without keys. Queryable by AI agents via MCP and humans via dashboard.
coroot / coroot
Coroot is an open-source observability and APM tool with AI-powered Root Cause Analysis. It combines metrics, logs, traces, continuous profiling, and SLO-based alerting with predefined dashboards and inspections.
projectcalico / calico
Cloud native networking and network security
odigos-io / odigos
Distributed tracing without code changes. 🚀 Instantly monitor any application using OpenTelemetry and eBPF
microsoft / retina
eBPF distributed networking observability tool for Kubernetes
cloudflare / ebpf_exporter
Prometheus exporter for custom eBPF metrics
kubearmor / KubeArmor
Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (LSM-BPF, AppArmor).
grafana / beyla
eBPF-based autoinstrumentation of web applications and network metrics
ccfos / huatuo
eBPF-based observability for Linux kernel & Agent sandbox 🚀🚀
aquasecurity / libbpfgo
eBPF library for Go. Powered by libbpf.
bpfman / bpfman
An eBPF Manager for Linux and Kubernetes
kmesh-net / kmesh
High Performance ServiceMesh Data Plane Based on eBPF and Programmable Kernel
parca-dev / parca-agent
eBPF based always-on CPU/GPU profiler auto-discovering targets in Kubernetes and systemd, zero code changes or restarts needed!
xxddpac / netra
One binary. Lightweight, high-performance. Observe your network with eBPF. Ask AI. Extend with MCP
alalfymansour / vinet
ViNet uses eBPF to collect network traffic, SQLite to store it locally, and a terminal interface to display usage by process and destination.
loxilb-io / loxilb
eBPF based cloud-native load-balancer for Kubernetes|Edge|Telco|IoT|XaaS.
alibaba / kubeskoop
Network monitoring & diagnosis suite for Kubernetes