Projects built with ebpf-go¶
Below is a non-comprehensive list of open-source software built with ebpf-go,
just for inspiration or to gain a better understanding of how to tackle certain
problems using eBPF.
A list of ebpf-go importers can be found on
Sourcegraph.
If you'd like to include a project on this page, feel free to open a pull request.
Cilium-
Kubernetes-oriented Container Networking Interface implementation providing network policy and observability.
containerd&runc-
Used by Docker and podman, these use eBPF for implementing device filters in cgroups.
coroot-
Zero-instrumentation observability featuring root cause analysis and anomaly detection.
datadog-agent-
The Datadog agent, the component responsible for collecting system and application metrics and shipping them to the Datadog platform.
Delve-
A debugger for the Go programming language. Uses eBPF uprobes for tracing user space code execution.
gVisor-
gVisor relies on eBPF for implementing various forms of guest/workload isolation and security.
Inspektor Gadget-
A collection of tools to debug and inspect Kubernetes resources and applications. Reimplements many of the BCC tools for easy deployment onto a Kubernetes cluster.
Istio-
In Istio’s ambient mode, eBPF is used for redirecting application traffic to the zero-trust tunnel on the node.
KubeArmor-
KubeArmor allows restricting the behaviour of Pods, containers and Kubernetes nodes at the system level.
kube-proxy-ng-
Emerging eBPF-based
kube-proxyimplementation, developed by the upstream Kubernetes project. OpenShift-
OpenShift's ingress node firewall is implemented using eBPF.
pwru-
Packet, where are you?
tcpdump, but for tracing a packet's journey through the kernel. Pyroscope-
From Grafana, open source continuous profiling platform. Flame graphs!
Tetragon-
eBPF-based security framework, also providing observability and runtime enforcement.
Tubular-
From Cloudflare, bind a service to any IP or port. See the announcement blog post for a deep dive into why it was created and how it works.
Authored by