High Performance ServiceMesh Data Plane Based on Programmable Kernel
-
Updated
May 27, 2024 - C
eBPF is a technology that can run sandboxed programs in a privileged context such as the operating system kernel.
It is used to safely and efficiently extend the capabilities of the kernel at runtime without requiring to change kernel source code or load kernel modules.
High Performance ServiceMesh Data Plane Based on Programmable Kernel
An eBPF Manager for Linux and Kubernetes
eBPF-based Networking, Security, and Observability
eBPF based always-on profiler auto-discovering targets in Kubernetes and systemd, zero code changes or restarts needed!
Kepler (Kubernetes-based Efficient Power Level Exporter) uses eBPF to probe performance counters and other system stats, use ML models to estimate workload energy consumption based on these stats, and exports them as Prometheus metrics
Continuous profiling for analysis of CPU and memory usage, down to the line number and throughout time. Saving infrastructure cost, improving performance, and increasing reliability.
Profiling/tracing/visualization tool based on eBPF
Strict hashtable ratelimit, struct conntrack based DDoS mitigation XDP program, most valid for endpoint interfaces.
Web-based Traffic and Security Network Traffic Monitoring
Instant Kubernetes-Native Application Observability
Userspace eBPF runtime for fast Uprobe & Syscall hook & Extensions with LLVM JIT
Process-aware, eBPF-based tcpdump
Distributed tracing without code changes. 🚀 Instantly monitor any application using OpenTelemetry and eBPF
PcapPlusPlus is a multiplatform C++ library for capturing, parsing and crafting of network packets. It is designed to be efficient, powerful and easy to use. It provides C++ wrappers for the most popular packet processing engines such as libpcap, Npcap, WinPcap, DPDK, AF_XDP and PF_RING.
Linux Runtime Security and Forensics using eBPF