ebpf

bpftop provides a dynamic real-time view of running eBPF programs. It displays the average runtime, events per second, and estimated total CPU % for each program.

Prometheus exporter for custom eBPF metrics

Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (LSM-BPF, AppArmor).

🕵️‍♂️ TUI for sniffing network traffic using eBPF on Linux

Fast and Lightweight Observability Data Collector

Schedule bpftrace programs on your kubernetes cluster using the kubectl

eBPF-based autoinstrumentation of web applications and network metrics

Instant K8s service dependency map, right to your Grafana.

A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.

一个深挖 Linux 内核的新功能特性，以 io_uring, cgroup, ebpf, llvm 为代表，包含开源项目，代码案例，文章，视频，架构脑图等

bpftune uses BPF to auto-tune Linux systems

eBPF based cloud-native load-balancer for Kubernetes|Edge|Telco|IoT|XaaS.

0x.Tools: X-Ray vision for Linux systems

Learning eBPF, published by O'Reilly - out now! Here's where you'll find a VM config for the examples, and more

Userspace eBPF runtime for Observability, Network, GPU & General Extensions Framework

The goal is to make it easier to configure your favorite Linux distribution as a router. Built with Rust and eBPF.

Qtap: An eBPF agent that captures pre-encrypted network traffic, providing rich context about egress connections and their originating processes.

Process-aware, eBPF-based tcpdump

Library to work with eBPF programs from Go

Rust virtual machine and JIT compiler for eBPF programs

eBPF-based Linux kernel observability 🚀🚀

k8spacket - collects TCP traffic and TLS connection metadata in the Kubernetes cluster using eBPF and visualizes in Grafana

Threat-hunting tool for Linux

eBPF-based Cloud Native Monitoring Tool

A modular and blazing fast runtime security tool for the IoT, powered by eBPF.

OpenTelemetry Auto Instrumentation using eBPF

Minimal and opinionated eBPF tooling for the Rust ecosystem

Monitor network traffic per executable

A firewall that utilizes the Linux kernel's XDP hook. The XDP hook allows for very fast network processing on Linux systems. This is great for dropping malicious traffic from a (D)DoS attack. IPv6 is supported with this firewall! I hope this helps network engineers/programmers interested in utilizing XDP!

Open-Source Network Management, Monitoring, ITOM, and Security Analytics