eBPF-based Networking, Security, and Observability
Repository Index
47,133 repositories indexed
1–24 of 30 · Most stars
BCC - Tools for BPF-based Linux IO analysis, networking, monitoring, and more
Capture SSL/TLS plaintext with eBPF—no MITM proxy or custom CA installation. Supports Linux and Android on x86_64\arm64 and loong64.
eBPF-powered network observability for Kubernetes. Indexes L4/L7 traffic with full K8s context, decrypts TLS without keys. Queryable by AI agents via MCP and humans via dashboard.
- kubernetes
- golang
- rest
- grpc
High-level tracing language for Linux
ebpf-go is a pure-Go library to read, modify and load eBPF programs and attach them to various hooks in the Linux kernel.
Instant Kubernetes-Native Application Observability
- golang
- kubernetes
- ebpf
- vega
eBPF-based Security Observability and Runtime Enforcement
Kyanos is a networking analysis tool using eBPF. It can visualize the time packets spend in the kernel, capture requests/responses, makes troubleshooting more efficient.
Aya is an eBPF library for the Rust programming language, built with a focus on developer experience and operability.
Linux Runtime Security and Forensics using eBPF
Hubble - Network, Service & Security Observability for Kubernetes using eBPF
eBPF Observability - Distributed Tracing and Profiling
Packet, where are you? -- eBPF-based Linux kernel networking debugger
eBPF implementation that runs on top of Windows
Automated upstream mirror for libbpf stand-alone build.
🕵️♂️ TUI for sniffing network traffic using eBPF on Linux
sched_ext schedulers and tools
Instant K8s service dependency map, right to your Grafana.
A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.
Process-aware, eBPF-based tcpdump
- ebpf
- ebpf-tc
- tcpdump
- tcpdump-like
A Tool to make Build and Run eBPF programs easier
ebpfkit is a rootkit powered by eBPF
Use eBPF to speed up your Service Mesh like crossing an Einstein-Rosen Bridge.
- ebpf
- istio
- mesh
- linkerd2