eBPF-based Networking, Security, and Observability

Cloud native networking and network security

Library to work with eBPF programs from Go

eBPF (extended Berkeley Packet Filter) Guide. Learn all about the eBPF Tools and Libraries for Security, Monitoring , and Networking.

Package xdp allows one to use XDP sockets from the Go programming language.

A toy tool that leverages the super powers of XDP to bring in-kernel IP filtering

A horizontally scalable Direct Server Return layer 4 load balancer for Linux using XDP/eBPF

Lightweight packet filtering for Linux: 'durdur' is a high-performance, eBPF-based simple firewall tool that drops packets by IP or DNS domain. Perfect for on-demand network control.

lightweight cross-platform networking toolkit

texporter is a lightweight, high-performance eBPF-based network traffic exporter for Prometheus.

Real-time eBPF-powered network security monitor with AI-driven threat detection. Surfaces port scans, DDoS attacks, botnet activity, and anomalies at 100Gbps+ speeds with sub-microsecond latency (~150 million packets/sec).

Create simple VPCs written in (mostly) Go using Linux bridges/netlinks, iptables & network namespaces

hands-on to implement simple network load balancer using XDP

GoBPFLD is a pure go eBPF loader/userspace library

Implementation of EtherIP with XDP

DNS at ludicrous speed for Go, powered by XDP sockets. [EXPERIMENTAL]

4fun eBPF firewall

First and only publicly avaliable Raknet/Minecraft Bedrock XDP filter, Protects your server by dropping all traffic that isnt valid Layer7 Raknet/MC Bedrock Protocol

Advanced kernel-native observability and enforcement framework to disrupt and prevent DNS-based breaches including C2 channels and tunneling with zero data loss. Combines TC, Netfilter, raw socket interception, BPF maps, and ring buffers, runs entirely on eBPF in the Linux kernel. Integrates with user-space deep learning models for real-time

Yoda: Post-exploitation tool using eBPF xdp / AF_XDP, running on a userspace gVisor network stack