All repos — GH Trending Explorer

eBPF-based Networking, Security, and Observability

APM, Application Performance Monitoring System

Capture SSL/TLS plaintext with eBPF—no MITM proxy or custom CA installation. Supports Linux and Android on x86_64 and arm64.

kubeshark / kubeshark

eBPF-powered network observability for Kubernetes. Indexes L4/L7 traffic with full K8s context, decrypts TLS without keys. Queryable by AI agents via MCP and humans via dashboard.

bpftrace / bpftrace

High-level tracing language for Linux

falcosecurity / falco

Cloud Native Runtime Security

ntop / ntopng

Web-based Traffic and Cybersecurity Network Traffic Monitoring

cilium / ebpf

ebpf-go is a pure-Go library to read, modify and load eBPF programs and attach them to various hooks in the Linux kernel.

coroot / coroot

Coroot is an open-source observability and APM tool with AI-powered Root Cause Analysis. It combines metrics, logs, traces, continuous profiling, and SLO-based alerting with predefined dashboards and inspections.

projectcalico / calico

Cloud native networking and network security

pixie-io / pixie

Instant Kubernetes-Native Application Observability

daeuniverse / dae

eBPF-based Linux high-performance transparent proxy solution.

domcyrus / rustnet

Per-process network monitoring for your terminal with deep packet inspection. Cross-platform, sandboxed.

cilium / tetragon

eBPF-based Security Observability and Runtime Enforcement

hengyoush / kyanos

Kyanos is a networking analysis tool using eBPF. It can visualize the time packets spend in the kernel, capture requests/responses, makes troubleshooting more efficient.

parca-dev / parca

Continuous profiling for analysis of CPU and memory usage, down to the line number and throughout time. Saving infrastructure cost, improving performance, and increasing reliability.

aya-rs / aya

Aya is an eBPF library for the Rust programming language, built with a focus on developer experience and operability.

aquasecurity / tracee

Linux Runtime Security and Forensics using eBPF

cilium / hubble

Hubble - Network, Service & Security Observability for Kubernetes using eBPF

eunomia-bpf / bpf-developer-tutorial

eBPF Developer Tutorial: Learning eBPF Step by Step with Examples

deepflowio / deepflow

eBPF Observability - Distributed Tracing and Profiling

cilium / pwru

Packet, where are you? -- eBPF-based Linux kernel networking debugger

odigos-io / odigos

Distributed tracing without code changes. 🚀 Instantly monitor any application using OpenTelemetry and eBPF

microsoft / ebpf-for-windows

eBPF implementation that runs on top of Windows

yandex / perforator

Perforator is a cluster-wide continuous profiling tool designed for large data centers

open-telemetry / opentelemetry-ebpf-profiler

The production-scale datacenter profiler (C/C++, Go, Rust, Python, Java, NodeJS, .NET, PHP, Ruby, Perl, ...)

microsoft / retina

eBPF distributed networking observability tool for Kubernetes

seladb / PcapPlusPlus

PcapPlusPlus is a multiplatform C++ library for capturing, parsing and crafting of network packets. It is designed to be efficient, powerful and easy to use. It provides C++ wrappers for the most popular packet processing engines such as libpcap, Npcap, WinPcap, DPDK, AF_XDP and PF_RING.

inspektor-gadget / inspektor-gadget

Inspektor Gadget is a set of tools and framework for data collection and system inspection on Kubernetes clusters and Linux hosts using eBPF

cloudflare / ebpf_exporter

Prometheus exporter for custom eBPF metrics

kubearmor / KubeArmor

Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (LSM-BPF, AppArmor).

pythops / oryx

🕵️‍♂️ TUI for sniffing network traffic using eBPF on Linux

alibaba / loongcollector

Fast and Lightweight Observability Data Collector

grafana / beyla

eBPF-based autoinstrumentation of web applications and network metrics

loxilb-io / loxilb

eBPF based cloud-native load-balancer for Kubernetes|Edge|Telco|IoT|XaaS.

eunomia-bpf / bpftime

Userspace eBPF runtime for Observability, Network, GPU & General Extensions Framework

ThisSeanZhang / landscape

The goal is to make it easier to configure your favorite Linux distribution as a router. Built with Rust and eBPF.

qpoint-io / qtap

Qtap: An eBPF agent that captures pre-encrypted network traffic, providing rich context about egress connections and their originating processes.

mozillazg / ptcpdump

Process-aware, eBPF-based tcpdump

ccfos / huatuo

eBPF-based observability for Linux kernel & Agent sandbox 🚀🚀

kunai-project / kunai

Threat-hunting tool for Linux

exein-io / pulsar

A modular and blazing fast runtime security tool for the IoT, powered by eBPF.

open-telemetry / opentelemetry-go-instrumentation

OpenTelemetry Auto Instrumentation using eBPF

libbpf / libbpf-rs

Minimal and opinionated eBPF tooling for the Rust ecosystem

elesiuta / picosnitch

Monitor network traffic per executable

carverauto / serviceradar

Open-Source Network Management, Monitoring, ITOM, and Security Analytics

aquasecurity / libbpfgo

eBPF library for Go. Powered by libbpf.

bpfman / bpfman

An eBPF Manager for Linux and Kubernetes

kmesh-net / kmesh

High Performance ServiceMesh Data Plane Based on eBPF and Programmable Kernel

eunomia-bpf / agentsight

lightweight system-level observability for AI Agents

parca-dev / parca-agent

eBPF based always-on CPU/GPU profiler auto-discovering targets in Kubernetes and systemd, zero code changes or restarts needed!

linuxkerneltravel / lmp

LMP provides an eBPF Supermarket for developers, including eBPF tools, open-source projects based on eBPF, eBPF learning materials, Linux kernel learning materials, and more.

libbpf / bpftool

Automated upstream mirror for bpftool stand-alone build.