Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
eBPF
eBPF is a technology that can run sandboxed programs in a privileged context such as the operating system kernel. It is used to safely and efficiently extend the capabilities of the kernel at runtime without requiring to change kernel source code or load kernel modules.
- GitHub: https://github.com/topics/ebpf
- Wikipedia: https://en.wikipedia.org/wiki/EBPF
- Created by: Alexei Starovoitov, Daniel Borkmann
- Released: 2014
- Last updated: 2024-12-23 00:08:03 UTC
- JSON Representation
https://github.com/asphaltt/skbtracer-iptables
skbtracer on iptables based on eBPF. Apache License 2.0
bpf cilium-ebpf ebpf ebpf-co-re golang iptables skbtracer skbtracer-iptables
Last synced: 13 Nov 2024
https://github.com/srodi/xdp-ddos-protect
This project provides a BPF XDP program to detect and mitigate DDoS attacks targeting a specific endpoint by monitoring unusually high traffic
amd64 arm64 c ddos-attacks ebpf linux xdp
Last synced: 30 Nov 2024
https://github.com/mfontanini/sockwho
Inspect socketaddrs using eBPF tracepoints
Last synced: 19 Nov 2024
https://github.com/srodi/ebpf-prometheus-metrics
This project process eBPF events into Prometheus metrics via a Go user-space application. A Grafana dashboard is included to visualize Kernel Network Latency.
docker ebpf go grafana helm kubernetes linux-kernel prometheus
Last synced: 20 Dec 2024
https://github.com/aanm-org/cilium
eBPF-based Networking, Security, and Observability
bpf cncf cni containers ebpf k8s kernel kubernetes kubernetes-networking loadbalancing monitoring networking observability security troubleshooting xdp
Last synced: 10 Oct 2024
https://github.com/mar0ls/bcc_ubuntu22.04_installer
Installer BPF Compiler Collection (BCC) on Ubuntu 22.04 LTS
autoinstaller bash-script ebpf gcc kernel linux python3
Last synced: 20 Nov 2024
https://github.com/szymonkubica/micro-bpf
µBPF - a framework for microcontroller compartmentalization using eBPF
compartmentalization ebpf embedded-systems fault-isolation internet-of-things microcontrollers middleware virtual-machine
Last synced: 20 Nov 2024
https://github.com/zhuangqh/blog
Share/record valuable experiences/techniques at work.
Last synced: 20 Nov 2024
https://github.com/asphaltt/bpfsyscalldist
An eBPF syscall profiler focused on BPF syscall.
bpf-syscall bpfsyscalldist ebpf linux-syscall
Last synced: 13 Nov 2024
https://github.com/containerscrew/nflux
Network monitoring and firewall using EBPF, XDP and TC. Powered by Aya-rs 🐝
aya ebpf kernel linux networking rust
Last synced: 23 Dec 2024
https://github.com/asphaltt/pkt-stucker
An experiment to reproduce the issue packet stuck in lockless pfifo_fast qdisc. [FAILED]
Last synced: 13 Nov 2024
https://github.com/asphaltt/syscalldist
A bcc-like tool to analyze syscall's histogram. Apache License 2.0
Last synced: 13 Nov 2024
https://github.com/astrid-project/cubebeat
Custom Beat of the Elastic Stack to interact with the Polycube-based eBPF cubes.
beats configuration cube dynamically ebpf ebpf-cubes elasticsearch golang logstash polycube programmability runtime settings
Last synced: 11 Dec 2024
https://github.com/fzakaria/rust-ebpf-demo
A simple pure hello world demo of writing an ebpf filter in rust
ebpf ebpf-programs linux linux-kernel rust
Last synced: 06 Nov 2024
https://github.com/eset/eei-agent-linux-probes
eBPF probes used by ESET Linux products
Last synced: 09 Nov 2024
https://github.com/aibor/cpumap-loop
Example program show casing eBPF cpumap infinite loop
Last synced: 20 Nov 2024
https://github.com/astrid-project/cb-manager
APIs to interact with the Context Broker's database. Through a REST Interface, it exposes data and events stored in the internal storage system in a structured way. It provides uniform access to the capabilities of monitoring agents.
agent beats control data ebpf elasticsearch log logstash management programmability security
Last synced: 05 Nov 2024
https://github.com/keisku/nperf
A Network PERFormance monitor tool
ebpf golang network-programming opentelemetry
Last synced: 11 Dec 2024
https://github.com/vladd12/bpf-program
eBPF program for net traffic filtering
Last synced: 29 Nov 2024
https://github.com/chaostoolkit-incubator/chaostoolkit-pixie
Chaos Toolkit extension for the Pixie/eBPF platform
chaostoolkit chaostoolkit-extension ebpf
Last synced: 16 Nov 2024
https://github.com/samankhalife/x-defender
X-Defender💥 is an advanced (D)DoS mitigation tool built with eBPF and XDP. It not only filters and limits malicious traffic in real-time but also takes a proactive and aggressive approach to neutralize threats before they impact your network.
ddos-mitigation ddos-protection ebpf ebpf-programs xdp
Last synced: 12 Oct 2024
https://github.com/jalalmostafa/socktrace
A tool to trace BSD sockets concurrency behavior using eBPF
bsd-sockets ebpf ebpf-programs linux linux-kernel socket-programming sockets
Last synced: 17 Nov 2024
https://github.com/cen-ngc5139/nfs-trace
NFS Trace 是一个强大的工具，使用 eBPF 技术监控和分析 NFS（网络文件系统）操作。它提供了 NFS 性能指标的实时洞察，并帮助诊断分布式文件系统中的问题。
cloudnative ebpf kubernetes observability
Last synced: 12 Oct 2024
https://github.com/itscheithanya/ebpf-linux-ransomware-detection
A comprehensive overview of a multi-layered approach to ransomware detection integrating eBPF technology and machine learning,
Last synced: 20 Nov 2024
https://github.com/aibor/netfilter_exporter
OpenMetrics exporter for custom netfilter internal metrics
ebpf go golang linux netfilter openmetrics prometheus-exporter
Last synced: 20 Nov 2024
https://github.com/rogercoll/learningebpf
Examples of C++ programs that generates BPF bytecodes
Last synced: 04 Dec 2024
https://github.com/rogercoll/ebpfutil
retrivies basic information of the active BPF programs
Last synced: 11 Nov 2024
https://github.com/gvencadze/tracing-demo
Manifests for different tracing systems + demo-apps
ebpf kubernetes observability tracing
Last synced: 13 Nov 2024
https://github.com/lucasbn/final-year-project
Using eBPF to replace namespaces in container networking
containers ebpf linux-kernel network-namespaces networking
Last synced: 03 Dec 2024
https://github.com/moolen/neuwerk
🛡️ cloud-native eBPF network egress firewall
cloud-native ebpf firewall kubernetes security
Last synced: 09 Nov 2024
https://github.com/fkie-cad/bpf-rootkit-workshop
Workshop: Forensic Analysis of eBPF based Linux Rootkits
bpf bpf-malware ebpf ebpf-malware forensics linux live-forensics malware memory-forensics rootkit
Last synced: 13 Nov 2024
https://github.com/tpapagian/go-ebpf-timer
An example to demonstrate the use of eBPF timers.
Last synced: 20 Nov 2024
https://github.com/aditya1404sal/vulcanguard
Vulcan Guard is a comprehensive network management tool designed to mitigate DDOS attacks
ebpf golang load-balancer packet-filter ratelimiter reverse-proxy
Last synced: 12 Oct 2024
https://github.com/thejokr/ebpf-playground
Collection of small eBPF code examples
ebpf golang-examples linux-kernel observability
Last synced: 17 Nov 2024
https://github.com/raghu-nandan-bs/cpupeek
Peek into CPU execution time of processes
cpu-monitoring ebpf system-engineering
Last synced: 30 Nov 2024
https://github.com/asphaltt/bpfbak
bpfbak is a tiny tool to backup bpf objects under bpffs. Apache 2.0 License
Last synced: 20 Nov 2024
https://github.com/devops-360-online/cilium-k8s-cni-guide
A comprehensive guide to deploying and managing Cilium as a CNI provider in Kubernetes, covering eBPF, security, observability, cluster mesh, and routing modes
cilium cloud-native cluster-mesh cni ebpf hubble ip-routing kubernetes network-security networking observability service-mesh
Last synced: 10 Nov 2024
https://github.com/64j0/starting-ebpf
Starting my journey through eBPF (Extended Berkeley Packet Filter)
Last synced: 14 Nov 2024
https://github.com/sakateka/htb-simulator
Hierachical token bucket simulator
algorithm c ebpf hierarchical-token-bucket htb token-bucket xdp
Last synced: 11 Nov 2024
https://github.com/kube-tarian/tarian-policy-engine
eBPF based threat elimination - Enforce Policies and Automated actions for auto threat elimination for Kubernetes. Also, share the threat(s) info & solution with community with simple yaml based configurations as eBPF functions..
ebpf kubernetes kubernetes-security threat-elimination threat-hunting threat-intelligence
Last synced: 12 Nov 2024
https://github.com/monkburger/bpf-mysql-querylog
BPF based MySQL query logging tool
Last synced: 09 Nov 2024
https://github.com/codeprometheus/starry-observability
learn everything about observability
agent asm byte-buddy ebpf javassist observability skywalking
Last synced: 15 Dec 2024
https://github.com/lucasbn/ebpf-lb
Layer 4 hash based load balancer written with eBPF
Last synced: 21 Dec 2024
https://github.com/lbirchler/pyflow
BCC based tool to trace function call/return hierarchy of Python scripts and processes
Last synced: 19 Nov 2024
https://github.com/thearyanahmed/ebpf0
I'm trying to learn about eBPF from Liz Rice's book.
Last synced: 19 Nov 2024
https://github.com/vmyroslav/ebpf-cilium-demo
This repository contains demos showcasing the usage of eBPF with Cilium in Go applications
Last synced: 19 Nov 2024
https://github.com/l2dy/tcpsynacklat
Analyze TCP handshake latency with BPF (regardless of user space timeout)
Last synced: 19 Nov 2024
https://github.com/promacanthus/ebpf-docs
本项目基于 isovalent/ebpf-docs ，旨在全面记录 eBPF 相关的信息和知识。
Last synced: 19 Nov 2024
https://github.com/s5uishida/simple_measurement_of_eupf_performance
Simple Measurement of eUPF(eBPF/XDP UPF) Performance
5g 5gc ebpf eupf omec-pfcpsim performance pfcpsim proxmox proxmox-ve trex upf xdp
Last synced: 21 Dec 2024
https://github.com/akiidjk/styx
Styx is a Next-Generation Firewall (NGFW) project designed to provide advanced protection at both the host and application levels. This design is built using modern technologies such as eBPF and XDP, with the goal of providing high performance, flexibility, and a modular architecture.
Last synced: 19 Dec 2024
https://github.com/zigelboim-misha/kernel-system-enter-write-test
Using eBPF to print each a line every time a system enter write event is executed on the kernel
Last synced: 20 Nov 2024
https://github.com/pyaillet/aya-lb-dr
A minimal example of using aya to build a loadbalancer with direct return
aya ebpf example learning-exercise rust-lang
Last synced: 20 Nov 2024
https://github.com/gruyaume/eupf-rock
OCI image for operating eUPF on Kubernetes
Last synced: 20 Nov 2024
https://github.com/minj-ae/tinyxdp
Strict traffic overload control XDP program for endpoint, suitable for getting rid of DDoS packets
ddos-mitigation ebpf endpoint-security xdp
Last synced: 20 Nov 2024
https://github.com/guptaachin/tracing-with-open-telemetry
Auto instrumentation of go application with eBPF (Otel Collector)
api docker ebpf golang jaeger observability otel-collector swagger traces
Last synced: 20 Nov 2024
https://github.com/laugharne/keynote__ebpf_-_everything_you_need_to_know_in_5_minutes
eBPF has become the key technology for infrastructure software. This session tells you everything you need to know about eBPF in 5 minutes. Why eBPF matters and why it exists. What it can do. What it can’t do. Who uses it for what. And finally, what the future holds.
Last synced: 20 Nov 2024
https://github.com/gruyaume/eupf-k8s-operator
Juju charm for operating eUPF on Kubernetes
Last synced: 20 Nov 2024
https://github.com/scm-probe/scm
Syscall monitoring and auditing tool built using eBPF
ebpf ebpf-exporter golang influxdb security security-audit security-tools
Last synced: 20 Nov 2024
https://github.com/miladhzzzz/linux-epbf-poc
eBPF toolkit for implementing custom logic . Proof of Concept
Last synced: 20 Nov 2024
https://github.com/fug0/ebpm
Embedded BPF Performance Monitor (ebpm) — is a modern light-weight Observability and Application Performance Monitoring tool powered by eBPF and most suitable for embedded systems.
apm application-performance-monitoring ebpf embedded-systems linux monitoring observability tracing
Last synced: 20 Nov 2024
https://github.com/digilolnet/pint-c2
eBPF evading C2
av-bypass av-evasion c2 ebpf rat
Last synced: 20 Nov 2024
https://github.com/ashishtiwari1993/slides.ashish.one
Collection of all slides presented by Ashish Tiwari
ebpf elastic elasticsearch function-calling genai
Last synced: 20 Nov 2024
https://github.com/m-osource/mienro
eXpress Data Path Router
ddos-protection ebpf ebpf-programs fast-forward firewall ipv6 kernel-bypass linux low-latency network-address-translation networking openbsd router software vlan
Last synced: 20 Dec 2024
https://github.com/asphaltt/bpflbr
bpflbr is an eBPF enhanced tool to trace some details of bpf prog with LBR. License Apache 2.0
bpf bpflbr ebpf last-branch-record lbr
Last synced: 14 Dec 2024
https://github.com/miladhzzzz/the-eye
eBPF kubernetes platform observation and automation.
automation cli cli-tool ebpf kubernetes linux-kernel monitoring
Last synced: 17 Nov 2024
https://github.com/lorenzosaino/xdp-playground
Development environment for experimenting with XDP on a VM
Last synced: 07 Dec 2024
https://github.com/s5uishida/simple_measurement_of_upf_performance_4
Simple Measurement of UPF Performance 4
5g 5gc dpdk ebpf eupf free5gc open5gs packetrusher performance proxmox proxmox-ve upf upg-vpp vpp xdp
Last synced: 07 Dec 2024
https://github.com/lawndoc/seccomp-ci-demo
Automate seccomp filter generation in your CI pipeline
ci container-security containers devops devsecops ebpf linux seccomp security security-automation syscalls
Last synced: 14 Dec 2024
https://github.com/junka/pycbpf
python script which compile cbpf to C code for BCC
bcc cbpf ebpf packet-capture tcpdump
Last synced: 06 Dec 2024
https://github.com/danny-yamamoto/lsm
LSM stands for Linux Security Modules which is a framework which allows developers to write security systems on top of the Linux kernel.
Last synced: 11 Nov 2024
https://github.com/isu-kim/tempest
Simple eBPF Reverse Proxy for Servers Behind the Firewalls
Last synced: 11 Nov 2024
https://github.com/mranv/sysmon-process
A poc on sysmon for process creation on kernel level!
Last synced: 01 Dec 2024
https://github.com/martichou/nrt-onl
Near Real Time Outage Notification Library
Last synced: 11 Nov 2024
https://github.com/jgalar/linuxcon2022-benchmarks
Suite of benchmarks developed for my presentation at LinuxCon Europe 2022
benchmark ebpf lttng performance
Last synced: 22 Dec 2024
