eBPF-based Networking, Security, and Observability
-
Updated
Nov 19, 2024 - Go
A kernel is the heart of almost every operating system. It is always loaded in memory at any time and deals with the hardware to provide an interface for the software. It also manages peripherals, memory, interrupts, and processes. Examples of widely used kernels include Windows NT and Linux.
eBPF-based Networking, Security, and Observability
Application Kernel for Containers
syzkaller is an unsupervised coverage-guided kernel fuzzer
The Go kernel for Jupyter notebooks and nteract.
eBPF-based Security Observability and Runtime Enforcement
Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (BPF-LSM, AppArmor).
procfs provides functions to retrieve system, kernel and process metrics from the pseudo-filesystem proc.
The hypervisor-based container runtime for Kubernetes.
A tool for gathering and visualizing kernel scheduling traces on Linux machines
High Performance ServiceMesh Data Plane Based on Programmable Kernel
BTFhub, in collaboration with the BTFhub Archive repository, supplies BTF files for all published kernels that lack native support for embedded BTF. This joint effort ensures that even kernels without built-in BTF support can effectively leverage the benefits of eBPF programs, promoting compatibility across various kernel versions.
FaaS platform for running raw Go functions.
Tools to let a u-root instance boot signed live distro images over the web