eBPF-based Networking, Security, and Observability

High-level tracing language for Linux

Capstone disassembly/disassembler framework for ARM, ARM64 (ARMv8), Alpha, BPF, Ethereum VM, HPPA, LoongArch, M68K, M680X, Mips, MOS65XX, PPC, RISC-V(rv32G/rv64G), SH, Sparc, SystemZ, TMS320C64X, TriCore, Webassembly, XCore and X86.

A curated list of awesome projects related to eBPF.

Continuous profiling for analysis of CPU and memory usage, down to the line number and throughout time. Saving infrastructure cost, improving performance, and increasing reliability.

eBPF-based Security Observability and Runtime Enforcement

Linux Runtime Security and Forensics using eBPF

Aya is an eBPF library for the Rust programming language, built with a focus on developer experience and operability.

Packet, where are you? -- eBPF-based Linux kernel networking debugger

the TCPdump network dissector

the LIBpcap interface to various kernel packet capture mechanism

eBPF Developer Tutorial: Learning eBPF Step by Step with Examples

XDP tutorial

Inspektor Gadget is a set of tools and framework for data collection and system inspection on Kubernetes clusters and Linux hosts using eBPF

Automated upstream mirror for libbpf stand-alone build.

Prometheus exporter for custom eBPF metrics

Schedule bpftrace programs on your kubernetes cluster using the kubectl

Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (BPF-LSM, AppArmor).

bpf 学习仓库

bpftune uses BPF to auto-tune Linux systems