Search awesome repositories

eBPF-based Networking, Security, and Observability

APM, Application Performance Monitoring System

The container platform tailored for Kubernetes multi-cloud, datacenter, and edge management ⎈ 🖥 ☁️

Capture SSL/TLS plaintext with eBPF—no MITM proxy or custom CA installation. Supports Linux and Android on x86_64 and arm64.

eBPF-powered network observability for Kubernetes. Indexes L4/L7 traffic with full K8s context, decrypts TLS without keys. Queryable by AI agents via MCP and humans via dashboard.

High-level tracing language for Linux

Cloud Native Runtime Security

Web-based Traffic and Cybersecurity Network Traffic Monitoring

Coroot is an open-source observability and APM tool with AI-powered Root Cause Analysis. It combines metrics, logs, traces, continuous profiling, and SLO-based alerting with predefined dashboards and inspections.

Cloud native networking and network security

Per-process network monitoring for your terminal with deep packet inspection. Cross-platform, sandboxed.

Linux Runtime Security and Forensics using eBPF

Hubble - Network, Service & Security Observability for Kubernetes using eBPF

eBPF Developer Tutorial: Learning eBPF Step by Step with Examples

Distributed tracing without code changes. 🚀 Instantly monitor any application using OpenTelemetry and eBPF

Fast and Lightweight Observability Data Collector

DataBuff is an AI-native APM built on Opentelemetry，with multi-agent troubleshooting out of the box.

Dump unix domain socket traffic with bpf

Data first monitoring agent using (e)BPF, built on RedBPF

DPI bypass tool - eBPF on Linux, TUN on macOS/Windows.

APO is a comprehensive observability platform combining OpenTelemetry with eBPF. Leveraging LLM to enable automated analysis and troubleshooting 🚀.

Writing eBPF in Zig

Making containers more secure with eBPF and Linux Security Modules (LSM)

Local safety layer for AI agents that use the terminal. Screens risky commands and MCP/tool calls, watches Linux activity with eBPF, blocks dangerous behavior, and keeps audit trails local. Open source, self-hosted, dry-run by default.

eBPF agent and MCP server for GPU causal observability

Create, Read, Update and Delete benchmarks at crude hardware speeds for embedded engines and database servers, the Rust successor to UCSB & YCSB

Wide NoSQL benchmark for RocksDB, LevelDB, Redis, WiredTiger and MongoDB extending the Yahoo Cloud Serving Benchmark

Detection of rootkit file hiding activities through analysis of shifts in kernel function execution times.

🛡️ RCE Shield — Remote Code Execution hardening toolkit for PC gamers. Scans game launchers, anti-cheat, mods, overlays, peripherals & network for vulnerabilities.