eBPF is a technology that can run sandboxed programs in a privileged context such as the operating system kernel.
It is used to safely and efficiently extend the capabilities of the kernel at runtime without requiring to change kernel source code or load kernel modules.
APM, Application Performance Monitoring System
eBPF-based Networking, Security, and Observability
The container platform tailored for Kubernetes multi-cloud, datacenter, and edge management ⎈ 🖥 ☁️
Capturing SSL/TLS plaintext without a CA certificate using eBPF. Supported on Linux/Android kernels for amd64/arm64.
Cluster-wide network observability for Kubernetes. Captures L4 packets, L7 API calls, and decrypted TLS traffic using eBPF, with full Kubernetes context. Available to AI agents via MCP and human operators via dashboard.
Cloud Native Runtime Security
Web-based Traffic and Security Network Traffic Monitoring
Coroot is an open-source observability and APM tool with AI-powered Root Cause Analysis. It combines metrics, logs, traces, continuous profiling, and SLO-based alerting with predefined dashboards and inspections.
Cloud native networking and network security
Instant Kubernetes-Native Application Observability
eBPF-based Linux high-performance transparent proxy solution.
Kyanos is a networking analysis tool using eBPF. It can visualize the time packets spend in the kernel, capture requests/responses, makes troubleshooting more efficient.
Continuous profiling for analysis of CPU and memory usage, down to the line number and throughout time. Saving infrastructure cost, improving performance, and increasing reliability.
eBPF-based Security Observability and Runtime Enforcement
Linux Runtime Security and Forensics using eBPF
Aya is an eBPF library for the Rust programming language, built with a focus on developer experience and operability.
Hubble - Network, Service & Security Observability for Kubernetes using eBPF
Created by Alexei Starovoitov, Daniel Borkmann
Released 2014