cilium
Network/Security Solution
An eBPF-based networking and security solution for Kubernetes clusters
eBPF-based Networking, Security, and Observability
20k stars
314 watching
3k forks
Language: Go
last commit: over 1 year ago
Linked from 3 awesome lists
bpfcncfcnicontainersebpfk8skernelkuberneteskubernetes-networkingloadbalancingmonitoringnetworkingobservabilitysecuritytroubleshootingxdp
tomhuang12/awesome-k8s-resources
rootsongjc/awesome-cloud-native
spacial/awesome-systoolsRelated projects:
| Repository | Description | Stars |
|---|---|---|
| cilium/hubble | A distributed platform for monitoring and analyzing cloud-native applications in Kubernetes environments | 3,581 |
| cilium/tetragon | A real-time security monitoring system that detects and responds to sensitive events using eBPF-based sensors and enriched with kernel and Kubernetes metadata | 3,694 |
| cilium/ebpf | A Go library for working with eBPF programs and the Linux kernel | 6,430 |
| cilium/pwru | Tool to debug network packets in Linux kernel | 2,904 |
 pixie-io/pixie | A Kubernetes-native observability tool for monitoring cluster resources and application traffic | 5,651 |
 opennhp/opennhp | A Zero Trust protocol that leverages resource-hiding and encryption to safeguard servers and data from attackers | 13,520 |
 open-telemetry/opentelemetry-ebpf-profiler | A Linux-based profiler that uses eBPF to profile system calls and CPU cycles in real-time, providing insights into application performance without requiring instrumentation or recompilation. | 2,529 |
 cloudnativelabs/kube-router | A turnkey solution for Kubernetes networking providing operational simplicity and high performance through IPVS/LVS based service proxy, pod networking with BGP protocol, network policy controller using ipsets and iptables. | 2,332 |
 security-onion-solutions/securityonion | An integrated security monitoring and threat hunting platform that collects, analyzes, and responds to network traffic data | 3,347 |
 microsoft/ebpf-for-windows | Provides a platform for running eBPF programs on Windows by adapting existing Linux toolchains and APIs | 2,971 |
 emissary-ingress/emissary | An open-source API gateway and load balancer for microservices built on Envoy Proxy. | 4,388 |
 solo-io/gloo | A Kubernetes-native API gateway and AI gateway that enables hybrid apps to route requests to microservices, serverless functions, and legacy applications. | 17 |
 loxilb-io/loxilb | An eBPF-based load balancer and service proxy for Kubernetes and edge environments, supporting various networking protocols and use cases. | 1,520 |
 netbirdio/netbird | A platform that enables secure private network creation and management using WireGuard-based overlay networks. | 11,485 |
 klzgrad/naiveproxy | A system designed to disguise and protect internet traffic from censorship and surveillance by leveraging Chrome's network stack | 6,775 |