ebpf

APM, Application Performance Monitoring System

eBPF-based Networking, Security, and Observability

High-level tracing language for Linux eBPF

Cloud Native Runtime Security

capture SSL/TLS text content without CA cert using eBPF. supports Linux/Android x86_64/Aarch64.

Web-based Traffic and Security Network Traffic Monitoring

Instant Kubernetes-Native Application Observability

ebpf-go is a pure-Go library to read, modify and load eBPF programs and attach them to various hooks in the Linux kernel.

A curated list of awesome projects related to eBPF.

Hubble - Network, Service & Security Observability for Kubernetes using eBPF

An open source real-time network topology and protocols analyzer

Linux Runtime Security and Forensics using eBPF

eBPF-based Security Observability and Runtime Enforcement

Schedule bpftrace programs on your kubernetes cluster using the kubectl

A zero-instrumentation observability tool for microservice architectures.

Rust library for building and running BPF/eBPF modules

Prometheus exporter for custom eBPF metrics

Aya is an eBPF library for the Rust programming language, built with a focus on developer experience and operability.

A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.

Linux eBPF backdoor over TCP. Spawn reverse shells, RCE, on prior privileged access. Less Honkin, More Tonkin.