eBPF-based Networking, Security, and Observability

Cloud native networking and network security

Library to work with eBPF programs from Go

eBPF (extended Berkeley Packet Filter) Guide. Learn all about the eBPF Tools and Libraries for Security, Monitoring , and Networking.

Package xdp allows one to use XDP sockets from the Go programming language.

A horizontally scalable Direct Server Return layer 4 load balancer for Linux using XDP/eBPF

A toy tool that leverages the super powers of XDP to bring in-kernel IP filtering

Lightweight packet filtering for Linux: 'durdur' is a high-performance, eBPF-based simple firewall tool that drops packets by IP or DNS domain. Perfect for on-demand network control.

lightweight cross-platform networking toolkit

Real-time eBPF-powered network security monitor with AI-driven threat detection. Surfaces port scans, DDoS attacks, botnet activity, and anomalies at 100Gbps+ speeds with sub-microsecond latency (~150 million packets/sec).

xdperf is a high-performance network traffic generation tool that leverages XDP (eXpress Data Path).

texporter is a lightweight, high-performance eBPF-based network traffic exporter for Prometheus.

Create simple VPCs written in (mostly) Go using Linux bridges/netlinks, iptables & network namespaces

Advanced kernel-native security framework to disrupt and prevent DNS-based breaches including C2 channels and tunneling with zero data loss. Combines TC, Netfilter, raw socket interception, BPF maps, and ring buffers, runs entirely on eBPF in the Linux kernel. Integrates with deep learning for advanced intelligent EDR

hands-on to implement simple network load balancer using XDP

GoBPFLD is a pure go eBPF loader/userspace library

First and only publicly avaliable Raknet/Minecraft Bedrock XDP filter, Protects your server by dropping all traffic that isnt valid Layer7 Raknet/MC Bedrock Protocol

DNS at ludicrous speed for Go, powered by XDP sockets. [EXPERIMENTAL]

Implementation of EtherIP with XDP

4fun eBPF firewall