eBPF is a technology that can run sandboxed programs in a privileged context such as the operating system kernel.
It is used to safely and efficiently extend the capabilities of the kernel at runtime without requiring to change kernel source code or load kernel modules.
APM, Application Performance Monitoring System
eBPF-based Networking, Security, and Observability
The container platform tailored for Kubernetes multi-cloud, datacenter, and edge management ⎈ 🖥 ☁️
Capturing SSL/TLS plaintext without a CA certificate using eBPF. Supported on Linux/Android kernels for amd64/arm64.
Cloud Native Runtime Security
Web-based Traffic and Security Network Traffic Monitoring
Cloud native networking and network security
Instant Kubernetes-Native Application Observability
Coroot is an open-source APM & Observability tool, a DataDog and NewRelic alternative 📊, 🖥️, 👉. Powered by eBPF for rapid insights into system performance. Monitor, analyze, and optimize your infrastructure effortlessly for peak reliability at any scale.
A curated list of awesome projects related to eBPF.
Continuous profiling for analysis of CPU and memory usage, down to the line number and throughout time. Saving infrastructure cost, improving performance, and increasing reliability.
eBPF-based Security Observability and Runtime Enforcement
Linux Runtime Security and Forensics using eBPF
Hubble - Network, Service & Security Observability for Kubernetes using eBPF
eBPF-based Linux high-performance transparent proxy solution.
Aya is an eBPF library for the Rust programming language, built with a focus on developer experience and operability.
Distributed tracing without code changes. 🚀 Instantly monitor any application using OpenTelemetry and eBPF
Kyanos is a networking analysis tool based on eBPF. It can visualize the time packets spend in the kernel, capture requests/responses, makes troubleshooting more efficient.