eBPF-based Networking, Security, and Observability
-
Updated
Apr 30, 2025 - Go
eBPF is a technology that can run sandboxed programs in a privileged context such as the operating system kernel.
It is used to safely and efficiently extend the capabilities of the kernel at runtime without requiring to change kernel source code or load kernel modules.
eBPF-based Networking, Security, and Observability
The container platform tailored for Kubernetes multi-cloud, datacenter, and edge management ⎈ 🖥 ☁️
Coroot is an open-source APM & Observability tool, a DataDog and NewRelic alternative. Metrics, logs, traces, continuous profiling, and SLO-based alerting, supercharged with predefined dashboards and inspections.
Cloud native networking and network security
eBPF-based Linux high-performance transparent proxy solution.
Linux Runtime Security and Forensics using eBPF
Distributed tracing without code changes. 🚀 Instantly monitor any application using OpenTelemetry and eBPF
eBPF distributed networking observability tool for Kubernetes
An open source real-time network topology and protocols analyzer
Prometheus exporter for custom eBPF metrics
Schedule bpftrace programs on your kubernetes cluster using the kubectl
Instant K8s service dependency map, right to your Grafana.
Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (BPF-LSM, AppArmor).
eBPF based cloud-native load-balancer for Kubernetes|Edge|Telco|IoT|XaaS.
Kepler (Kubernetes-based Efficient Power Level Exporter) uses eBPF to probe performance counters and other system stats, use ML models to estimate workload energy consumption based on these stats, and exports them as Prometheus metrics
Library to work with eBPF programs from Go
k8spacket - collects TCP traffic and TLS connection metadata in the Kubernetes cluster using eBPF and visualizes in Grafana
eBPF-based Cloud Native Monitoring Tool