Bowei Du

Production-Grade Container Scheduling and Management

DNS server and related things

Ingress controller for Google Cloud

Repository for the next iteration of composite service (e.g. Ingress) and load balancing APIs.

Creates documentation for Kubernetes API represented in Golang

How to add custom iptables rules to a Kubernetes cluster

Data and analysis of the Kubernetes Ingress survey 2018 (sig-network)

No description.

Misc utilities for Kubernetes

Kubernetes browser for emacs

Kubernetes log viewer

Example of multitier ingress configuration

Kubernetes community content

No description.

No description.

Feature tracking repo for Kubernetes releases

snippets

iptables visualization

Bash on Balls

Kernel-enforced agent sandbox. Capability-based isolation with secure key management, atomic rollback, cryptographic immutable audit chain of provenance. Run your agents in a zero-trust environment.

Agent Substrate: the core system

A Virtual Machine Monitor for modern Cloud workloads. Features include CPU, memory and device hotplug, support for running Windows and Linux guests, device offload with vhost-user and a minimal compact footprint. Written in Rust with a strong focus on security.

A Kubernetes operator designed to automate the lifecycle of TPU slices within self-managed clusters on Google Compute Engine (GCE).

Stand-alone Native Linux KVM Tool repo

A minimal kvm example

No description.

A very simple example of an ext_proc that redirects to an arbitrary host

github pages

The agent that grows with you

Infrastructure that's powering E2B Cloud.

Open-source, secure environment with real-world tools for enterprise-grade agents.

JobSet: a k8s native API for distributed ML training and HPC workloads

LeaderWorkerSet: An API for deploying a group of pods as a unit of replication

Fiddler for Linux Networking

Kubernetes Node-Local DNS Cache

Agentic networking policies and governance for agents and tools in Kubernetes

This repo addresses further work involving Kubernetes network security beyond the initial NetworkPolicy resource

Information about Cilium Developer Summits

No description.

Static analysis tool to detect potential nil panics in Go code

No description.

agent-sandbox enables easy management of isolated, stateful, singleton workloads, ideal for use cases like AI agent runtimes.

Application Kernel for Containers

AI powered Kubernetes Assistant

kamera is a simulation toolkit for observing, analyzing, and verifying the behavior of Kubernetes control planes.

KAL - The Kube API Linter

Kubernetes network policies

Code and configuration to manage Kubernetes project infrastructure, including various *.k8s.io sites

Meta configuration for Kubernetes Github Org

Kubernetes WithOut Kubelet - Simulates thousands of Nodes and Clusters.

Experimental Layer 4 Kubernetes Gateway using eBPF/XDP

A launch point for your personal nvim configuration

Here you can find community content around Cilium

An open-source AI agent that brings the power of Gemini directly into your terminal.

Packet, where are you? -- eBPF-based Linux kernel networking debugger

DRANET is a Kubernetes Network Driver that uses Dynamic Resource Allocation (DRA) to deliver high-performance networking for demanding applications in Kubernetes.

PoC for layer 3 / 4 services using Gateway API (v1.1.0) over secondary networks in Kubernetes (v1.30)

PoCs for calling CNI using DRA

No description.

Reworking kube-proxy's architecture

A collection of out-of-tree LLVM passes for teaching and learning

This GKE controller provides simple custom integration between GKE and GCLB.

Various utilities

Prototypes and experiments for WG Device Management.

Clackety Keyboards Powered by Python

ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx that is developed by Trustwave's SpiderLabs. It has a robust event-based programming language which provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analysis. With over 10,000 deployments world-wide, ModSecurity is the most widely deployed WAF in existence.

A Makefile/Dockerfile example for Go projects.

Support code for implementing a Kubernetes cloud provider for Google Cloud Platform

Collection of vagrant scripts for testing xdp

No description.

xDS API Working Group

No description.

gcpdiag is a command-line diagnostics tool for GCP customers.

No description.

Connect, secure, control, and observe services.

Carbon Language's main repository: documents, design, implementation, and related tools. (NOTE: Carbon Language is experimental; see README)

DX7 FM multi plaform/multi format plugin

Understanding the guitar fretboard through tetrachords

A simple sidecar that serves a healthcheck status from a file. This is useful if your Pod has a more complex healthcheck status that needs to be customized.

The LLVM Project is a collection of modular and reusable compiler and toolchain technologies. Note: the repository does not accept github pull requests at this moment. Please submit your patches at http://reviews.llvm.org.

BPF & XDP for containers

Directly access data objects stored in etcd by kubernetes.

Official public Markdeep source archive

Website/documentation repo

Kubernetes Network Service Validator

eBPF implementation that runs on top of Windows

Automated upstream mirror for libbpf stand-alone build.

Terraform enables you to safely and predictably create, change, and improve infrastructure. It is an open source tool that codifies APIs into declarative configuration files that can be shared amongst team members, treated as code, edited, reviewed, and versioned.

TLC is an explicit state model checker for specifications written in TLA+. The TLA+Toolbox is an IDE for TLA+.

s2n : an implementation of the TLS/SSL protocols

Declarative configuration for Gmail filters

Record and Replay Framework

Program to sort photos via Exif

A demo deployment of github.com/kubernetes-sigs/service-apis using Istio controller

CoreDNS is a DNS server that chains plugins

nftables load balancer integration in kubernetes

No description.

🌌📊✈Universal Data Plane API Working Group (UDPA-WG)

WIP Caddy 2 ingress controller for Kubernetes

A place for cluster deployment automation

Conformance test suite for Kubernetes Ingress using BDD (POC)

A tree explorer plugin for vim.

Roaring bitmaps in Go (golang)

Star compiler written in star

service-apis

Pepper's Cone

Core aware thread management system

A distributed approximate nearest neighborhood search (ANN) library which provides a high quality vector index build, search and distributed online serving toolkits for large scale vector search scenario.

A high performance layer 4 load balancer

No description.

Universal WebAssembly runtime

This is a place for various components in the Kubernetes ecosystem that aren't part of the Kubernetes core. Consider creating a new repo instead.

Protocol Buffers for JavaScript. Finally.

Box2D is a 2D physics engine for games

Auto-generated Google APIs for Go.

Delve is a debugger for the Go programming language.

No description.

Windows - Host Compute Service Shim

No description.

Compute Resource Usage Analysis and Monitoring of Container Clusters

Secure and fast microVMs for serverless computing.

Experimental KVM-based VMM for containers, written in Go.

Prolog interpreter in Go

API, config and standard vocabulary definitions for the Istio project

The Istio proxy components.

This is an ingress controller that can be run on Azure Kubernetes Service (AKS) to allow an Azure Application Gateway to act as the ingress for an AKS cluster.

Star compiler

No description.

eBPF program using kprobes to trace TCP events without run-time compilation dependencies

Presentations and docs

Easy and Repeatable Kubernetes Development

No description.

Reactive Extensions for C++

Omnibox Timer

An active monitoring software to detect failures before your customers do.

Skeletal YAML for quick testing

No description.

GoMock is a mocking framework for the Go programming language.

Envoy REST/proto API definitions

Performance analysis tools based on Linux perf_events (aka perf) and ftrace

Tools used for debugging

Automatically provision TLS certificates for Kubernetes

An unofficial copy of MIT's Alloy Analyzer model checking tool.

No description.

An example of how TPROXY can be used to proxy tcp connections.

The Z3 Theorem Prover

Cryptol: The Language of Cryptography

Packages for Google Compute Engine Linux images.

IPv4 and IPv6 userland network stack

Test infrastructure for the Kubernetes project.

IO, Message, and RPC Acceleration Library

The reference implementation of the Linux FUSE (Filesystem in Userspace) interface

Visualization for the Kubernetes e2e tests

Manages an unbound server for a Kubernetes cluster

Kubernetes Operations (kops) - Production Grade K8s Installation, Upgrades, and Management

(community-driven) guide to writing useful and modern bash scripts. seriously.

Hyperkube-based e2e framework

Ingress controllers

Go client for Kubernetes.

An open and reliable container runtime, by Docker

BCC - Tools for BPF-based Linux IO analysis, networking, monitoring, and more

DNS service discovery for etcd

Performance tests and benchmarks

Automatically exported from code.google.com/p/blip-buffer

A fork of dnsperf from Nomium

container of random toolkit stuff based on alpine

No description.

Project Calico deployed in a containerized environment

Container Network Interface - networking for Linux containers

Print where symbols are defined in Go source code

The Prometheus monitoring system and time series database.

No description.

:books: Freely available programming books

Main gcovr repository (See http://gcovr.com)

A fast preprocessor for C and C++

Lessons learned

Jenkins log-parser plugin

Cross-platform asychronous I/O

No description.

MDBM a very fast memory-mapped key/value store.

Memory Efficient Serialization Library

NAXSI is an open-source, high performance, low rules maintenance WAF for NGINX

TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

The Memory Pool System. WARNING: See wiki before forking.

An open source search engine written in C/C++ for Linux on Intel/AMD. From gigablast dot com. See the README.md file at the very bottom of this page for instructions!!!

A checker (site and tool) for CVE-2014-0160

kpatch - dynamic kernel patching

Some experiments with structuring I/O

TLS Library in python

Community developed and maintained version of the OS/Net consolidation

OWASP ModSecurity Core Rule Set (CRS) Project (Official Repository)

C++ standards drafts

Beta release of Masstree.

The HTML Presentation Framework

Tsung is a high-performance benchmark framework for various protocols including HTTP, XMPP, LDAP, etc.

Chromium OS Ubuntu Chroot Environment

Interactive visualizations of time series using JavaScript and the HTML canvas tag. Issue tracker at http://code.google.com/p/dygraphs/issues/list

Doom 3 GPL source release

Folly is an open-source C++ library developed and used at Facebook.