eBPF-based Networking, Security, and Observability
Repository Index
47,133 repositories indexed
1–24 of 73 · Most stars
BCC - Tools for BPF-based Linux IO analysis, networking, monitoring, and more
Capture SSL/TLS plaintext with eBPF—no MITM proxy or custom CA installation. Supports Linux and Android on x86_64\arm64 and loong64.
eBPF-powered network observability for Kubernetes. Indexes L4/L7 traffic with full K8s context, decrypts TLS without keys. Queryable by AI agents via MCP and humans via dashboard.
- kubernetes
- golang
- rest
- grpc
High-level tracing language for Linux
ebpf-go is a pure-Go library to read, modify and load eBPF programs and attach them to various hooks in the Linux kernel.
The Universal Filesystem Abstraction for Go
- compression
- filesystem
- fs
- go
Instant Kubernetes-Native Application Observability
- golang
- kubernetes
- ebpf
- vega
eBPF-based Security Observability and Runtime Enforcement
Kyanos is a networking analysis tool using eBPF. It can visualize the time packets spend in the kernel, capture requests/responses, makes troubleshooting more efficient.
Aya is an eBPF library for the Rust programming language, built with a focus on developer experience and operability.
Linux Runtime Security and Forensics using eBPF
Hubble - Network, Service & Security Observability for Kubernetes using eBPF
eBPF Observability - Distributed Tracing and Profiling
A lightweight process isolation tool that utilizes Linux namespaces, cgroups, rlimits and seccomp-bpf syscall filters, leveraging the Kafel BPF language for enhanced security.
Packet, where are you? -- eBPF-based Linux kernel networking debugger
eBPF implementation that runs on top of Windows
High-speed packet processing framework
- pf-ring
- capture-packets
- high-speed
- 100gbit
ZapFast: a fast, native WhatsApp client in Rust and egui
- chat
- desktop-app
- egui
- linux
Automated upstream mirror for libbpf stand-alone build.
🕵️♂️ TUI for sniffing network traffic using eBPF on Linux
Instant K8s service dependency map, right to your Grafana.
A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.
Modules to help you handle persistent state on systems with ephemeral root storage [maintainer=@talyz]