awesome-cloud-native

A curated list for awesome cloud native tools, software and tutorials.
https://github.com/rootsongjc/awesome-cloud-native

Last synced: 7 days ago
JSON representation

Networking & Connectivity
- cilium - API-aware Networking and Security using eBPF and XDP.
- cni - Container Network Interface - networking for Linux containers.
- cni-genie - CNI-Genie for choosing pod network of your choice during deployment time. Supported pod networks - Calico, Flannel, Romana, Weave.
- hubble - Hubble - Network, Service & Security Observability for Kubernetes.
- istio-cni - Istio CNI to setup kubernetes pod namespaces to redirect traffic to sidecar proxy.
- knitter - Kubernetes network solution.
- kube-ovn - Kube-OVN, a Kubernetes network fabric for enterprises that is rich in functions and easy in operations.
- kube-router - Kube-router, a turnkey solution for Kubernetes networking.
- kubecdn - Self-hosted CDN based on Kubernetes.
- kubeslice - KubeSlice enables Kubernetes pods and services to communicate seamlessly across clusters, clouds, edges, and data centers by creating logical application boundaries known as Slices.
- matchbox - Network boot and provision Container Linux clusters (e.g. etcd3, Kubernetes, more).
- multus - A CNI meta-plugin for multi-homed pods in Kubernetes.
- pingora - A library for building fast, reliable and evolvable network services.
- spiderpool - Underlay and RDMA network solution of the Kubernetes, for bare metal, VM and any public cloud.
- submariner - Connect all your Kubernetes clusters, no matter where they are in the world.
- weave - Simple, resilient multi-host Docker networking and more.
- ziti - The parent project for OpenZiti. Here you will find the executables for a fully zero trust, application embedded, programmable network.
- flannel - Flannel is a network fabric for containers, designed for Kubernetes.
Networking Utilities
- dragonfly2 - Dragonfly is an intelligent P2P based file distribution system.
- istio-pod-network-controller - Controller to manage Istio Pod Network.
- k8s-mirror - Creates a local mirror of a Kubernetes cluster in a docker container to support offline reviewing.
- kconmon - A Kubernetes node connectivity monitoring tool.
- kt-connect - Manage and Integration with your Kubernetes dev environment more efficient.
- netshoot - A Docker + Kubernetes network trouble-shooting swiss-army container.
- podtnl - A Powerful CLI that makes your pod available to online without exposing a Kubernetes service.
- tor-controller - Run Tor onion services on Kubernetes.
Observability & Monitoring
- konstellate - Free and Open Source GUI to Visualize Kubernetes Applications.
- cadvisor - Analyzes resource usage and performance characteristics of running containers.
- cortex - A multitenant, horizontally scalable Prometheus as a Service.
- docker-elk - The ELK stack powered by Docker and Compose.
- ebpftop - bpftop provides a dynamic real-time view of running eBPF programs. It displays the average runtime, events per second, and estimated total CPU % for each program.
- elasticsearch-hq - Monitoring and Management Web Application for ElasticSearch instances and clusters.
- envoy-ui - Dead simple server-side UI for Envoy proxy (like HAproxy stats).
- goldpinger - Debugging tool for Kubernetes which tests and displays connectivity between nodes in the cluster.
- grafana - The tool for beautiful monitoring and metric analytics & dashboards for Graphite, InfluxDB & Prometheus & More.
- hawkular-metrics - Time Series Metrics Engine based on Cassandra.
- highlight - The open source, full-stack monitoring platform. Error monitoring, session replay, logging and more.
- inspektor-gadget - The eBPF tool and systems inspection framework for Kubernetes, containers and Linux hosts.
- istio-ui - Istio config management backend.
- kelemetry - Global control plane tracing for Kubernetes.
- kepler - Kepler (Kubernetes-based Efficient Power Level Exporter) uses eBPF to probe performance counters and other system stats, use ML models to estimate workload energy consumption based on these stats, and exports them as Prometheus metrics.
- kiali - Kiali project to help istio service mesh observability.
- kibana - Kibana analytics and search dashboard for Elasticsearch.
- kube-ops-view - Kubernetes Operational View - read-only system dashboard for multiple K8s clusters.
- kube-state-metrics - Add-on agent to generate and expose cluster-level metrics.
- kubenurse - Kubernetes network monitoring.
- kubernetes-zabbix - Kubernetes Zabbix/Grafana cluster (bare metal, Google Computer Engine - GCE, Google Container Engine - GKE).
- kubeshark - The API traffic viewer for Kubernetes providing deep visibility into all API traffic and payloads going in, out and across containers and pods inside a Kubernetes cluster. Think TCPDump and Wireshark re-invented for Kubernetes.
- lake - Data lake for dev.
- monosi - Open source data observability platform.
- naftis - An excellent dashboard for Istio built with love.
- nexclipper - An open source software for monitoring Kubernetes and containers.
- octant - Highly extensible platform for developers to better understand the complexity of Kubernetes clusters.
- open-falcon - Enterprise Internet monitoring system from Xiaomi.
- opentelemetry-collector - Vendor-neutral telemetry pipelines for metrics, logs, and traces.
- owl - Distributed monitoring system from TalkingData.
- parca - Continuous profiling for analysis of CPU and memory usage, down to the line number and throughout time. Saving infrastructure cost, improving performance, and increasing reliability.
- perses - The CNCF candidate for observability visualisation.
- pixie - Instant Kubernetes-Native Application Observability.
- prometheus - The Prometheus monitoring system and time series database.
- scope - Monitoring, visualisation & management for Docker & Kubernetes.
- searchlight - Alerts for Kubernetes.
- sloop - Kubernetes History Visualization.
- sofa-lookout - Lookout can help you to measure and monitor the status of the target system with its multi-dimensional metrics.
- starship - Next-generation Observability platform built with eBPF+WASM.
- statsd - Daemon for easy but powerful stats aggregation.
- tetragon - eBPF-based Security Observability and Runtime Enforcement.
- tobs - tobs - The Observability Stack for Kubernetes. Easy install of a full observability stack into a k8s cluster with a CLI tool or Helm charts.
- victoriametrics - VictoriaMetrics: fast, cost-effective monitoring solution and time series database.
- vistio - Visualize your Istio mesh using Netflix's Vizceral.
- vizceral - WebGL visualization for displaying animated traffic graphs.
- kindling - eBPF-based CloudNative Monitor tool.
- deepflow - A highly automated observability platform.
- ingero - eBPF-based GPU causal observability agent. Traces CUDA APIs and host kernel events to explain GPU latency in cloud-native environments. Helm chart and DaemonSet included.
- middleware - Full-stack observability platform with SRE agent.
Reliability & Chaos Engineering
- chaos-mesh - A Chaos Engineering Platform for Kubernetes.
- chaosblade - An easy to use and powerful chaos engineering experiment toolkit（阿里巴巴开源的一款简单易用、功能强大的混沌实验注入工具）.
- chaosmonkey - Chaos Monkey is a resiliency tool that helps applications tolerate random instance failures.
- concurrency-limits - Java Library that implements and integrates concepts from TCP congestion control to auto-detect concurrency limits to achieve optimal throughput with optimal latency.
- hystrix - Hystrix is a latency and fault tolerance library designed to isolate points of access to remote systems, services and 3rd party libraries, stop cascading failure and enable resilience in complex distributed systems where failure is inevitable.
- krkn - Chaos and resiliency testing tool for Kubernetes with a focus on improving performance under failure conditions. A CNCF sandbox project.
- kubediag - Problem diagnosis and operation orchestration for Kubernetes.
- kubedoom - Kill Kubernetes pods by playing Id's DOOM!
- litmus - Litmus helps SREs and developers practice chaos engineering in a Cloud-native way.
- metersphere - MeterSphere is an End-to-End open source continuous testing platform. MeterSphere 是一站式开源持续测试平台，涵盖测试跟踪、接口测试、性能测试、团队协作等功能，全面兼容 JMeter、Postman、Swagger 等开源、主流标准。
- powerfulseal - A powerful testing tool for Kubernetes clusters.
- ratelimit - Go/gRPC service designed to enable generic rate limit scenarios from different types of applications.
- rider - SDK for Envoy Lua extensions.
- sentinel - A powerful flow control component enabling reliability, resilience and monitoring for microservices. (面向云原生微服务的高可用流控防护组件)
- testkube - Kubernetes-native framework for test definition and execution.
- toxiproxy - A TCP proxy to simulate network and system conditions for chaos and resiliency testing.
RPC Frameworks
- grpc - A high performance, open source, general-purpose RPC framework.
- rsocket - Streaming message protocol with Reactive Extension/Stream semantics.
- drpc - drpc is a lightweight, drop-in replacement for gRPC.
- finagle - A fault tolerant, protocol-agnostic RPC system.
- kitex - A high-performance and strong-extensibility Golang RPC framework that helps developers build microservices.
- proxygen - A collection of C++ HTTP libraries including an easy to use HTTP server.
- sofa-bolt - SOFABolt is a lightweight, easy to use and high performance remoting framework based on Netty.
- sofa-rpc - SOFARPC is a high-performance, high-extensibility, production-level Java RPC framework.
- tars - Tars is a high-performance RPC framework based on name service and Tars protocol, also integrated administration platform, and implemented hosting-service via flexible schedule.
- thrift - Apache thrift.
Runtimes & Platforms
- katacontainers - Kata Containers is a new open source project building extremely lightweight virtual machines that seamlessly plug into the containers ecosystem.
- agones - Dedicated Game Server Hosting and Scaling for Multiplayer Games on Kubernetes.
- containerd - An open and reliable container runtime.
- containerd-wasm-shims - Containerd shims for running WebAssembly workloads in Kubernetes.
- cri-o - Open Container Initiative-based implementation of Kubernetes Container Runtime Interface.
- crun - A fast and lightweight fully featured OCI runtime and C library for running containers.
- firecracker-containerd - firecracker-containerd enables containerd to manage containers as Firecracker microVMs.
- frakti - The hypervisor-based container runtime for Kubernetes.
- gvisor - Sandboxed Container Runtime.
- hyperd - HyperContainer Daemon.
- img - Standalone, daemon-less, unprivileged Dockerfile and OCI compatible container image builder.
- kuasar - An efficient container runtime that provides cloud-native, all-scenario multiple sandbox container solutions.
- kubernetes-lts - Kubernetes LTS(long term support).
- moby - Moby Project - a collaborative project for the container ecosystem to assemble container-based systems.
- podman - A tool for managing OCI containers and pods.
- railcar - RailCar: Rust implementation of the Open Containers Initiative oci-runtime.
- rkt - Rkt is a pod-native container engine for Linux. It is composable, secure, and built on standards.
- runwasi - Facilitates running Wasm/WASI workloads managed by containerd.
- spin - Spin is an open source framework for building and running fast, secure, and composable cloud microservices with WebAssembly.
- virtlet - Kubernetes CRI implementation for running VM workloads.
- wasm-micro-runtime - WebAssembly Micro Runtime (WAMR).
- wasmcloud - wasmCloud is a universal host runtime for actors built with WebAssembly and capability providers.
- wazero - The zero dependency WebAssembly runtime for Go developers.
- lima - Linux virtual machines, on macOS (aka "Linux-on-Mac", "macOS subsystem for Linux", "containerd for Mac", unofficially).
- den - Self-hosted sandbox runtime for AI agents with isolated Docker containers, cgroup v2 memory management, and dynamic pressure monitoring.
- mocker - Docker-compatible container CLI for macOS, built on Apple's Containerization framework.
- openchoreo - OpenChoreo is a developer platform for Kubernetes.
Security & Compliance
- apparmor - AppArmor is an effective and easy-to-use Linux application security system.
- k8guard - An auditing system for Kubernetes.
- authenticator - A tool for using AWS IAM credentials to authenticate to a Kubernetes cluster.
- awacs - Next-gen behavior analysis server (think Mixpanel, Google Analytics) with built-in encryption.
- cedar - Core implementation of the Cedar language.
- checkov - A static analysis tool for infrastructure as code - to prevent misconfigs at build time.
- clair - Vulnerability Static Analysis for Containers.
- coraza - OWASP Coraza WAF is a golang modsecurity compatible web application firewall library.
- cosign - Container signing, verification, and provenance powered by Sigstore.
- curiefense - Adds a broad set of automated web security tools to Envoy.
- dex - OpenID Connect Identity (OIDC) and OAuth 2.0 Provider with Pluggable Connectors.
- docker-bench-security - The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production.
- dockscan - Dockscan is security vulnerability and audit scanner for Docker installations.
- drydock - Drydock provides a flexible way of assessing the security of your Docker daemon configuration and containers using editable audit templates.
- external-secrets - Sync secrets from external stores like AWS Secrets Manager or Vault into Kubernetes.
- falco - Behavioral Activity Monitoring With Container Support.
- firezone - VPN server and Linux firewall built on WireGuard®. Supports SSO, MFA, and user-scoped access rules.
- galadriel - SPIFFE Federation the easy way.
- goldfish - A HashiCorp Vault UI panel written with VueJS and Vault native Go API.
- grafeas - Cloud artifact metadata CRUD API and resource specifications.
- grype - A vulnerability scanner for container images and filesystems.
- in-toto - in-toto is a framework to protect supply chain integrity.
- infra - Infra provides authentication and access management to servers and Kubernetes clusters.
- kamus - An open source, git-ops, zero-trust secret encryption and decryption solution for Kubernetes applications.
- keycloak - Open Source Identity and Access Management For Modern Applications and Services.
- kratos - Next-gen identity server (think Auth0, Okta, Firebase) with Ory-hardened authentication, MFA, FIDO2, profile management, identity schemas, social sign in, registration, account recovery, service-to-service and IoT auth. Can work as an OAuth2 / OpenID Connect Provider. Golang, headless, API-only - without templating or theming headaches.
- kritis - Deploy-time Policy Enforcer for Kubernetes applications.
- kube-bench - The Kubernetes Bench for Security is a Go application that checks whether Kubernetes is deployed according to security best practices.
- kube-lego - Automatically request certificates for Kubernetes Ingress resources from Let's Encrypt.
- kube2iam - kube2iam provides different AWS IAM roles for pods running on Kubernetes.
- kubescape - Kubescape is the first tool for testing if Kubernetes is deployed securely as defined in Kubernetes Hardening Guidance by to NSA and CISA.
- kubesec - Security risk analysis for Kubernetes resources.
- KubiScan - A tool to scan Kubernetes cluster for risky permissions.
- neuvector - Kubernetes-native container security platform.
- notary - Notary is a Docker project that allows anyone to have trust over arbitrary collections of data.
- opa - An open source project to policy-enable your service.
- opal - An administration layer for Policy Engines, detecting changes to both policy and policy data in real time and pushing live updates to your agents.
- rback - RBAC in Kubernetes visualizer.
- rond - A lightweight container for distributed security policy evaluation.
- spiffe - The SPIFFE Project.
- supertokens-core - Open source alternative to Auth0 / Firebase Auth / AWS Cognito.
- syft - CLI tool and library for generating a Software Bill of Materials from container images and filesystems.
- teleport - Certificate authority and access plane for SSH, Kubernetes, web apps, databases and desktops.
- topaz - Cloud-native authorization for modern applications and APIs.
- trivy - Scanner for vulnerabilities in container images, file systems, and Git repositories, as well as for configuration issues and hard-coded secrets.
- trivy-action - Runs Trivy as GitHub action to scan your Docker container image for vulnerabilities.
- trousseau - File based encrypted key-value store.
- trust-manager - trust-manager is an operator for distributing trust bundles across a Kubernetes cluster.
- vault - A tool for managing secrets.
- vilicus - Vilicus is an open source tool that orchestrates security scans of container images(docker/oci) and centralizes all results into a database for further analysis and metrics.
- kubed - A Kubernetes Cluster Operator Daemon.
- segspec - Extracts network dependencies from application config files and generates Kubernetes NetworkPolicies with evidence tracing.
- brood-box - CLI tool for running coding agents inside hardware-isolated microVMs with workspace snapshot isolation and egress control.
- cloud-audit - Fast, opinionated AWS security scanner with 47 curated checks. Each finding includes copy-paste remediation in AWS CLI and Terraform. Features attack chain detection and a diff command for CI/CD pipeline gating.
- go-microvm - Go framework for running OCI images as microVMs via libkrun with embedded runtime, rootfs management, and guest networking.
- darkmoon - Open source autonomous AI penetration testing platform that orchestrates 80+ offensive tools via Markdown playbooks, with a proof trail per finding.
Serverless Platforms
- booster - Booster is a framework for building and deploying reliable and scalable event-driven serverless applications.
- dapr - Dapr is a portable, event-driven, runtime for building distributed applications across cloud and edge.
- easyfaas - EasyFaaS 是一个依赖轻、适配性强、资源占用少、无状态且高性能的函数计算服务引擎。
- eventing - Open source specification and implementation of Knative event binding and delivery.
- faas-netes - Enable Kubernetes as a backend for Functions as a Service (OpenFaaS).
- firecamp - Serverless Platform for the stateful services.
- firecracker - Secure and fast microVMs for serverless computing.
- fission - Fast Serverless Functions for Kubernetes.
- fn - The container native, cloud agnostic serverless platform.
- fx - Poor man's serverless framework based on Docker, Function as a Service with painless.
- ironfunctions - IronFunctions - the serverless microservices platform.
- keda - KEDA is a Kubernetes-based Event Driven Autoscaling component. It provides event driven scale for any container running in Kubernetes.
- knative-lambda-runtime - Running AWS Lambda Functions on Knative/Kubernetes Clusters.
- knix - KNIX MicroFunctions is a serverless computing platform that combines container-based resource isolation with a lightweight execution model using processes to significantly improve resource efficiency and decrease the function startup latency. KNIX MicroFunctions works in Knative as well as bare metal or virtual machine-based environments.
- kubeless - Kubernetes Native Serverless Framework.
- laf - Laf is a cloud development platform offering ready-to-use resources like cloud functions, databases, and storage. It empowers developers to quickly unleash their creativity.

Programming Languages

Go 382 Python 42 Java 38 TypeScript 26 Shell 26 Rust 24 JavaScript 22 C++ 19 C 16 Ruby 6

ecosyste.ms

Data

Tools

Indexes

Applications

Experiments

Awesome

awesome-cloud-native

Networking & Connectivity

Networking Utilities

Observability & Monitoring

Reliability & Chaos Engineering

RPC Frameworks

Runtimes & Platforms

Security & Compliance

Serverless Platforms