a golang library and webserver for fast TCP & TLS fingerprinting, powered by eBPF

Know what's happening on your network before it becomes a problem: real-time eBPF monitoring

Advanced kernel-native security framework to disrupt and prevent DNS-based breaches including C2 channels and tunneling with zero data loss. Combines TC, Netfilter, raw socket interception, BPF maps, and ring buffers, runs entirely on eBPF in the Linux kernel. Integrates with deep learning for advanced intelligent EDR

eBPF sk_lookup program as a golang library

eBPF based, L7 protocols monitoring solution in k8s

cilium ebpf common starter template for go.

traces tcp requests in kernel. allow to set up IPs to filter dynamically using bpf-map.

eBPF proxy with loadbalancing capabilities

Parse HTTP(S) requests by eBPF hooks without APM

A eBPF program deployer for kubernetes clusters

Learning eBPF

The repository is designed to quickly deploy a whole new Kubernetes cluster on a Linux distribution with one click

simple ebpf program for tricking ping's rtt

skbtracer on iptables based on eBPF. Apache License 2.0

Implementing a Zero Trust network and runtime security model on Kubernetes with Cilium, Tetragon, Hubble, and L7 policies, and eBPF-powered detection.

📔 📚 A curated list of awesome resources : books, videos, talks, articles about using Cilium.

A go wrapper that wraps ebpf object

This repository contains demos showcasing the usage of eBPF with Cilium in Go applications

Learning Cilium