ebpf

eBPF-based Networking, Security, and Observability

APM, Application Performance Monitoring System

The container platform tailored for Kubernetes multi-cloud, datacenter, and edge management ⎈ 🖥 ☁️

Capturing SSL/TLS plaintext without a CA certificate using eBPF. Supported on Linux/Android kernels for amd64/arm64.

eBPF-powered network observability for Kubernetes. Indexes L4/L7 traffic with full K8s context, decrypts TLS without keys. Queryable by AI agents via MCP and humans via dashboard.

ebpf-go is a pure-Go library to read, modify and load eBPF programs and attach them to various hooks in the Linux kernel.

Coroot is an open-source observability and APM tool with AI-powered Root Cause Analysis. It combines metrics, logs, traces, continuous profiling, and SLO-based alerting with predefined dashboards and inspections.

Cloud native networking and network security

Instant Kubernetes-Native Application Observability

eBPF-based Linux high-performance transparent proxy solution.

Kyanos is a networking analysis tool using eBPF. It can visualize the time packets spend in the kernel, capture requests/responses, makes troubleshooting more efficient.

eBPF-based Security Observability and Runtime Enforcement

Per-process network monitoring for your terminal with deep packet inspection. Cross-platform, sandboxed.

Aya is an eBPF library for the Rust programming language, built with a focus on developer experience and operability.

eBPF Developer Tutorial: Learning eBPF Step by Step with Examples

Packet, where are you? -- eBPF-based Linux kernel networking debugger

Inspektor Gadget is a set of tools and framework for data collection and system inspection on Kubernetes clusters and Linux hosts using eBPF

bpftop provides a dynamic real-time view of running eBPF programs. It displays the average runtime, events per second, and estimated total CPU % for each program.

🕵️‍♂️ TUI for sniffing network traffic using eBPF on Linux