a golang library and webserver for fast TCP & TLS fingerprinting, powered by eBPF

eBPF sk_lookup program as a golang library

eBPF based, L7 protocols monitoring solution in k8s

Simple root privilege escalation detection using eBPF 🐝

cilium ebpf common starter template for go.

traces tcp requests in kernel. allow to set up IPs to filter dynamically using bpf-map.

Enhanced observability and security framework built to fully prevent DNS exfiltration (C2, tunnelling) with no data loss, supporting killing C2 implants using TC, Netfilter, Sock, BPF_MAPs. Ring Buffers, Running eBPF inside linux kernel and Deep Learning in user space and threat events streaming for dynamic blacklisting of malicious domains.

eBPF proxy with loadbalancing capabilities

Learning eBPF

Parse HTTP(S) requests by eBPF hooks without APM

A eBPF program deployer for kubernetes clusters

The repository is designed to quickly deploy a whole new Kubernetes cluster on a Linux distribution with one click

skbtracer on iptables based on eBPF. Apache License 2.0

📔 📚 A curated list of awesome resources : books, videos, talks, articles about using Cilium.

A go wrapper that wraps ebpf object

simple ebpf program for tricking ping's rtt

This repository contains demos showcasing the usage of eBPF with Cilium in Go applications