ebpf-rust

The goal is to make it easier to configure your favorite Linux distribution as a router. Built with Rust and eBPF.

One Rust control plane for Firecracker, Cloud Hypervisor, QEMU/KVM, and the in-tree FluxVM hypervisor. No libvirtd. No XML. A REST API and a CLI that do the same thing on every backend.

Hound is a Kubernetes network observability agent that exposes TCP connection-level metrics (state, throughput, retransmits, RTT, SYN anomalies) via Prometheus, powered by C+eBPF in the kernel and Rust in userspace.

Kernel-level security monitoring system using eBPF and Rust (Aya framework). Hooks critical syscalls to detect security anomalies and potential Advanced Persistent Threats.

A high-performance network event daemon written in Rust that configures network interfaces and executes scripts on network events from systemd-networkd, NetworkManager DBus signals, or when dhclient gains a lease.

Per-app network rate limiter and traffic monitor for Linux. Pure eBPF. Boring and silent but killer.

Example for create, monitor eBPF probe

A tool to downgrade bandwidth for other users on the same network

Private cloud on KVM: VMs, browser consoles, fleet HA/DRS, Fleet Cloud and Zyra AI ops from three Rust binaries. An OpenStack alternative you can install in one command.

very fast and furious eBPF log scraper, with kubernetes aware enrichment

eBPF networking and security crate for FleetOS, uses Aya (eBPF) Rust Library.

An example of aya eBPF project