eBPF is a technology that can run sandboxed programs in a privileged context such as the operating system kernel.
It is used to safely and efficiently extend the capabilities of the kernel at runtime without requiring to change kernel source code or load kernel modules.
APM, Application Performance Monitoring System
eBPF-based Networking, Security, and Observability
The container platform tailored for Kubernetes multi-cloud, datacenter, and edge management ⎈ 🖥 ☁️
Capturing SSL/TLS plaintext without a CA certificate using eBPF. Supported on Linux/Android kernels for amd64/arm64.
Cloud Native Runtime Security
Web-based Traffic and Security Network Traffic Monitoring
Cloud native networking and network security
Instant Kubernetes-Native Application Observability
Coroot is an open-source APM & Observability tool, a DataDog and NewRelic alternative. Metrics, logs, traces, continuous profiling, and SLO-based alerting, supercharged with predefined dashboards and inspections.
A curated list of awesome projects related to eBPF.
Continuous profiling for analysis of CPU and memory usage, down to the line number and throughout time. Saving infrastructure cost, improving performance, and increasing reliability.
eBPF-based Linux high-performance transparent proxy solution.
Kyanos is a networking analysis tool using eBPF. It can visualize the time packets spend in the kernel, capture requests/responses, makes troubleshooting more efficient.
eBPF-based Security Observability and Runtime Enforcement
Linux Runtime Security and Forensics using eBPF
Hubble - Network, Service & Security Observability for Kubernetes using eBPF
Aya is an eBPF library for the Rust programming language, built with a focus on developer experience and operability.
Distributed tracing without code changes. 🚀 Instantly monitor any application using OpenTelemetry and eBPF