A purpose-built proxy for the Linkerd service mesh. Written in Rust.

Fast and extensible multi-platform HTTP/1-2-3 web server with automatic HTTPS

Azure Container Registry samples, troubleshooting tips and references

Emulates IMDS on Azure by generating fake scheduled events on the local host for testing

System Region and Language Simulator.

Trae Agent is an LLM-based agent for general purpose software engineering tasks.

Kilo is a multi-cloud network overlay built on WireGuard and designed for Kubernetes (k8s + wg = kg)

Run any Linux process in a secure, unprivileged sandbox using Landlock. Think firejail, but lightweight, user-friendly, and baked into the kernel.

L3AFD eBPF Programs control plane

Fast and flexible Docker image building tool, works in unprivileged containerized environments like Mesos and Kubernetes.

Stateless cluster local OCI registry mirror.

Overlaybd: a block based remote image format. The storage backend of containerd/accelerated-container-image.

A production-ready remote container image format (overlaybd) and snapshotter based on block-device.

A high-performance distributed file system designed to address the challenges of AI training and inference workloads.

Dragonfly is an open source P2P-based file distribution and image acceleration system. It is hosted by the Cloud Native Computing Foundation (CNCF) as an Incubating Level Project.

P2P Docker registry capable of distributing TBs of data in seconds

Peer to peer distribution of container content in Kubernetes clusters.

mptcpd is a daemon for Linux that performs Multipath TCP path management related operations in the user space 😈

Interrupts-off or softirqs-off latency tracer

Utilities and example programs for use with XDP

Utilities and example programs for use with XDP

Twitter Media Assist

An open source, self-hosted implementation of the Tailscale control server

FlowSentryX is an open-source XDP-based fast packet processing DOS and DDOS Mitigation Framework solution designed to protect your network infrastructure from Denial of Service (DOS) and Distribute…

JA3 is a standard for creating SSL client fingerprints in an easy to produce and shareable way.

A high performance Go Implementation of the JA3 Client Fingerprinting Algorithm.

XDP tutorial

Framework for running BPF programs with rules on Linux as a daemon. Container aware.

Ingress node firewall implements Kubernetes operator to provision stateless ingress node level firewall rules, stateless ingress node firewall implementation is done using eBPF XDP kernel plugin

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more