eBPF topic
eBPF is a technology that can run sandboxed programs in a privileged context such as the operating system kernel. It is used to safely and efficiently extend the capabilities of the kernel at runtime without requiring to change kernel source code or load kernel modules.
kubectl-trace
Schedule bpftrace programs on your kubernetes cluster using the kubectl
rbpf
Rust virtual machine and JIT compiler for eBPF programs
ntopng
Web-based Traffic and Security Network Traffic Monitoring
goebpf
Library to work with eBPF programs from Go
ebpf_exporter
Prometheus exporter for custom eBPF metrics
eBPF-for-Ghidra
eBPF Processor for Ghidra
go-tc
traffic control in pure go - it allows to read and alter queues, filters and classes
sockdump
Dump unix domain socket traffic with bpf
ebpf
eBPF Utilities, Maps, and more
XDP-Firewall
A firewall that utilizes the Linux kernel's XDP hook. The XDP hook allows for very fast network processing on Linux systems. This is great for dropping malicious traffic from a (D)DoS attack. IPv6 is...