eBPF

eBPF is a technology that can run sandboxed programs in a privileged context such as the operating system kernel.

It is used to safely and efficiently extend the capabilities of the kernel at runtime without requiring to change kernel source code or load kernel modules.

Here are 1,088 public repositories matching this topic...

Language:All

Filter by language

All1,088 C387 Go217 Rust130 Python123 C++38 Shell34 Makefile11 HTML10 Dockerfile9 JavaScript8

Sort:Most stars

Sort options

Most stars Fewest stars Most forks Fewest forks Recently updated Least recently updated

apache /skywalking

Star24.7k

APM, Application Performance Monitoring System

web-performance metrics logging prometheus zabbix telegraf apm dapper ebpf service-mesh observability distributed-tracing skywalking open-telemetry

UpdatedDec 17, 2025
Java

cilium /cilium

Star23.1k

eBPF-based Networking, Security, and Observability

kubernetes security networking monitoring kernel containers cncf k8s ebpf xdp troubleshooting observability cni loadbalancing bpf kubernetes-networking

UpdatedDec 18, 2025
Go

kubesphere /kubesphere

Star16.8k

The container platform tailored for Kubernetes multi-cloud, datacenter, and edge management ⎈ 🖥 ☁️

kubernetes jenkins devops cncf container-management k8s cloud-native ebpf hacktoberfest observability istio servicemesh argocd kubesphere multi-cluster kubernetes-platform-solution llm

UpdatedNov 6, 2025
Go

gojue /ecapture

Star14.9k

Capturing SSL/TLS plaintext without a CA certificate using eBPF. Supported on Linux/Android kernels for amd64/arm64.

android linux tls golang ssl security-audit https ebpf tcpdump network-capture ssldump android-https-capture ebpf-uprobe ebpf-tc ebpf-go

UpdatedDec 13, 2025
C

bpftrace /bpftrace

Star9.8k

High-level tracing language for Linux

tracing ebpf bpf bcc kprobes tracepoints usdt uprobes

UpdatedDec 17, 2025
C++

falcosecurity /falco

Star8.5k

Cloud Native Runtime Security

kubernetes security containers cncf cloud-native ebpf hacktoberfest falco runtime-security cncf-project

UpdatedDec 17, 2025
C++

ntop /ntopng

Star7.4k

Web-based Traffic and Security Network Traffic Monitoring

docker kubernetes sflow netflow ipfix network snmp realtime packet-analyser packet-processing ebpf ntopng traffic-monitoring

UpdatedDec 17, 2025
Lua

cilium /ebpf

Star7.4k

ebpf-go is a pure-Go library to read, modify and load eBPF programs and attach them to various hooks in the Linux kernel.

go linux golang ebpf btf

UpdatedDec 15, 2025
Go

Coroot is an open-source observability and APM tool with AI-powered Root Cause Analysis. It combines metrics, logs, traces, continuous profiling, and SLO-based alerting with predefined dashboards and inspections.

ai monitoring dashboard microservice metrics alerting prometheus apm tracing slo sre ebpf observability distributed-tracing service-map database-monitoring

UpdatedDec 17, 2025
Go

projectcalico /calico

Star7k

Cloud native networking and network security

cats windows kubernetes security networking openstack k8s ebpf xdp observability cni kubernetes-networking cni-plugin network-policy kubernetes-windows identity-aware-policy host-protection

UpdatedDec 18, 2025
Go

pixie-io /pixie

Star6.3k

Instant Kubernetes-Native Application Observability

kubernetes golang distributed-systems machine-learning monitoring metrics cncf pandas gke vega minikube cloud-native ebpf observability px apache-arrow pixie aks eks px-run

UpdatedDec 17, 2025
C++

hengyoush /kyanos

Star4.9k

Kyanos is a networking analysis tool using eBPF. It can visualize the time packets spend in the kernel, capture requests/responses, makes troubleshooting more efficient.

tcp command-line network sniffer capture command-line-tool ebpf tcpdump bpf tcpdump-like

UpdatedDec 18, 2025
C

daeuniverse /dae

Star4.9k

eBPF-based Linux high-performance transparent proxy solution.

golang shadowsocks v2ray ebpf dae transparent-proxy sdwan policy-routing tuic

UpdatedNov 3, 2025
Go

zoidyzoidzoid /awesome-ebpf

Star4.9k

A curated list of awesome projects related to eBPF.

awesome awesome-list ebpf xdp hacktoberfest bpf bcc io-visor linux-bpf-superpowers

UpdatedDec 4, 2025

parca-dev /parca

Star4.7k

Continuous profiling for analysis of CPU and memory usage, down to the line number and throughout time. Saving infrastructure cost, improving performance, and increasing reliability.