bpf

Cilium 为基于Kubernetes 的Linux 容器管理平台上部署的服务，透明地提供服务间的网络和API 连接及安全。 Cilium 底层是基于Linux 内核的新技术eBPF，可以在Linux 系统中动态注入强大的安全性、可见性和网络控制逻辑

High-level tracing language for Linux

Capstone disassembly/disassembler framework for ARM, ARM64 (ARMv8), Alpha, BPF, Ethereum VM, HPPA, LoongArch, M68K, M680X, Mips, MOS65XX, PPC, RISC-V(rv32G/rv64G), SH, Sparc, SystemZ, TMS320C64X, TriC...

Kyanos is a networking analysis tool using eBPF. It can visualize the time packets spend in the kernel, capture requests/responses, makes troubleshooting more efficient.

#Awesome#A curated list of awesome projects related to eBPF.

Continuous profiling for analysis of CPU and memory usage, down to the line number and throughout time. Saving infrastructure cost, improving performance, and increasing reliability.

eBPF-based Security Observability and Runtime Enforcement

Linux Runtime Security and Forensics using eBPF

Aya is an eBPF library for the Rust programming language, built with a focus on developer experience and operability.

eBPF 开发者教程与知识库

Packet, where are you? -- eBPF-based Linux kernel networking debugger

the TCPdump network dissector

the LIBpcap interface to various kernel packet capture mechanism

XDP tutorial

Inspektor Gadget is a set of tools and framework for data collection and system inspection on Kubernetes clusters and Linux hosts using eBPF

Automated upstream mirror for libbpf stand-alone build.

Prometheus exporter for custom eBPF metrics

Schedule bpftrace programs on your kubernetes cluster using the kubectl

🕵️‍♂️ TUI for sniffing network traffic using eBPF on Linux

Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (LSM-BPF, AppArmor).