Inspektor Gadget is a set of tools and framework for data collection and system inspection on Kubernetes clusters and Linux hosts using eBPF

eBPF based always-on profiler auto-discovering targets in Kubernetes and systemd, zero code changes or restarts needed!

Continuous profiling for analysis of CPU and memory usage, down to the line number and throughout time. Saving infrastructure cost, improving performance, and increasing reliability.

X-Defender💥 is an advanced (D)DoS mitigation tool built with eBPF and XDP. It not only filters and limits malicious traffic in real-time but also takes a proactive and aggressive approach to neutralize threats before they impact your network.

Sample ebpf programs to analyze

k8spacket - collects TCP traffic and TLS connection metadata in the Kubernetes cluster using eBPF and visualizes in Grafana

🧑‍💻🔭 Digma helps you fix performance issues in your code by automatically profiling the code execution. Using APMs to identify code bottlenecks, query problems and scalability issues takes time and effort - Digma automates all of that. Digma is free for developers - get it here: https://digma.ai/get-digma/

Flow feature extraction tool built in Rust using eBPF

Rust virtual machine and JIT compiler for eBPF programs

Hades is a Host-Based Intrusion Detection System based on eBPF(mainly)

Making eBPF programming easier via build env and examples

Prototyping kernel development work outside mainline

Experiment with BPF_MAP_TYPE_HASH_OF_MAPS

Implementation of EtherIP with XDP

Monitor DNS queries by host processes using eBPF!

eBPF Programs

simple firewall a simple kernel level firewall using aya-ebpf

This repository contains two tasks demonstrating system-level programming using eBPF in Python for system call monitoring and a doubly linked list implementation in C. Both tasks aim to showcase practical skills in working with low-level systems and data structures.

This project implements memory checkpointing and restoration for a Linux process using eBPF (Extended Berkeley Packet Filter) technology.

Alaz: Advanced eBPF Agent for Kubernetes Observability – Effortlessly monitor K8s service interactions and performance metrics in your K8s environment. Gain in-depth insights with service maps, metrics, and more, while staying alert to crucial system anomalies 🐝