GitHub - twisted-pear/ipx_wrap: A joke IPX implementation for Linux using eBPF. A joke IPX implementation for Linux using eBPF. Contribute to twisted-pear/ipx_wrap development by creating an account on GitHub.

A joke IPX implementation for Linux using eBPF

GitHub - xzcrpw/blackwall: AI-native eBPF firewall and Active Deception mesh AI-native eBPF firewall and Active Deception mesh. Contribute to xzcrpw/blackwall development by creating an account on GitHub.

AI-native eBPF firewall and Active Deception mesh

GitHub - kumarkshiv/yaksha-ebpf-analyzer: eBPF bytecode analyzer for understanding third-party network function behavior. (Published on Arxiv) eBPF bytecode analyzer for understanding third-party network function behavior. (Published on Arxiv) - kumarkshiv/yaksha-ebpf-analyzer

eBPF bytecode analyzer for understanding third-party network function behavior

GitHub - h0x0er/ebpf-skill: An eBPF skill for coding agents An eBPF skill for coding agents. Contribute to h0x0er/ebpf-skill development by creating an account on GitHub.

An eBPF skill for coding agents

GitHub - boratanrikulu/gecit: DPI bypass tool - eBPF on Linux, TUN on macOS/Windows. DPI bypass tool - eBPF on Linux, TUN on macOS/Windows. - boratanrikulu/gecit

DPI bypass tool - eBPF on Linux, TUN on macOS/Windows.

GitHub - swananan/ghostscope: DWARF-aware eBPF tracer for source-level userspace tracing - Explore in a TUI or automate with a scriptable CLI DWARF-aware eBPF tracer for source-level userspace tracing - Explore in a TUI or automate with a scriptable CLI - swananan/ghostscope

DWARF-aware eBPF tracer for source-level userspace tracing - Explore in a TUI or automate with a scriptable CLI

GitHub - evandhoffman/olltop: Real-time tok/s monitor for Ollama using eBPF (Linux) and pcap (macOS) Real-time tok/s monitor for Ollama using eBPF (Linux) and pcap (macOS) - evandhoffman/olltop

Real-time tok/s monitor for Ollama using eBPF (Linux) and pcap (macOS)

Project Lightning Talk: Translating Ebpf Into Business Value: Lessons From The Cili... Bill Mulligan YouTube video by CNCF [Cloud Native Computing Foundation]

Maintainers increasingly need to explain why their project is valuable, not just how it works.

Over the past four years, I’ve built out the Cilium website to translate deep eBPF capabilities into clear business outcomes around performance, cost, and security.

www.youtube.com/watch?v=J4jH...

GitHub - fiwippi/erez: eBPF-based per-packet multipath routing eBPF-based per-packet multipath routing. Contribute to fiwippi/erez development by creating an account on GitHub.

eBPF-based per-packet multipath routing

GitHub - Kinann01/hbpf: Introducing eBPF to Haskell - This project is in an early stage of development. Introducing eBPF to Haskell - This project is in an early stage of development. - Kinann01/hbpf

A Haskell eDSL for writing eBPF programs with compile-time safety guarantees

GitHub - pjs7678/kpod-metrics: eBPF-based pod-level kernel metrics collector for Kubernetes eBPF-based pod-level kernel metrics collector for Kubernetes - pjs7678/kpod-metrics

eBPF-based pod-level kernel metrics collector for Kubernetes

Couldn't agree more with Mitch Connors 🤝

thenewstack.io/microsoft-wa...

GitHub - 4rivappa/nfs-flamegraph: eBPF-based NFS throughput Flamegraph eBPF-based NFS throughput Flamegraph. Contribute to 4rivappa/nfs-flamegraph development by creating an account on GitHub.

A lightweight, eBPF-based tracing tool designed to generate FlameGraphs for NFS client activity

github.com/4rivappa/nfs...

From Hyperscalers to Neoclouds: Why Cloud Providers Are Standardizing on Cilium From CoreWeave to OVHcloud, cloud providers are making Cilium their default CNI. We map 18+ providers and explore why eBPF networking is becoming the standard.

Honestly at this point, can you name a cloud that doesn't at least support Cilium?

From Nico's blog

GitHub - ismajl-ramadani/kwatch-ebpf Contribute to ismajl-ramadani/kwatch-ebpf development by creating an account on GitHub.

eBPF-based kernel process monitor. Hooks into kernel tracepoints to capture process execution, network connections, and sensitive file access.

Native mTLS for Cilium: Transparent Encryption Meets Cloud Native Identity with ztunnel Cilium now brings native, inline mTLS to the Kubernetes datapath with ztunnel, unifying authentication and encryption in a single ste...

mTLS is now natively in Cilium. If that was your only reason to have a service mesh, maybe now its time to reconsider?

cilium.io/blog/2026/03...

GitHub - Cybereason-Public/owLSM: Sigma Rules Engine inside the Linux Kernel using eBPF. Focusing on prevention capabilities Sigma Rules Engine inside the Linux Kernel using eBPF. Focusing on prevention capabilities - Cybereason-Public/owLSM

Sigma Rules Engine inside the Linux Kernel using eBPF. Focusing on prevention capabilities

AI identity controls become a central enterprise concern - SiliconANGLE AI identity controls are emerging as a core layer of cloud-native platforms, as enterprises focus on securing and managing AI agents at scale.

“[It’s all] just another device on the network,” Mulligan said. “You can do containers, you can do VMs, you can do AI agents — giving everything identity, putting it on the network and being able to do networking, observability and security around that.”

siliconangle.com/2026/03/25/a...

GitHub - cbdeane/TokenSiren: eBPF uprobe-based telemetry pipeline exporting token metrics and anomaly signals from vLLM inference via OTLP. eBPF uprobe-based telemetry pipeline exporting token metrics and anomaly signals from vLLM inference via OTLP. - cbdeane/TokenSiren

eBPF uprobe-based telemetry pipeline exporting token metrics and anomaly signals from vLLM inference via OTLP

VKS (VMware Kubernetes Service) Networking, Now Powered by Cilium: Expanding Networking… Introduction: Why Cilium on VKS?

With Cilium now available on VMware platforms is there a single Kubernetes distro that doesn't at least support Cilium?

medium.com/@saurabhtand...

GitHub - spoonmilk/trafik: eBPF congestion control research eBPF congestion control research. Contribute to spoonmilk/trafik development by creating an account on GitHub.

eBPF congestion control research

Bill Mulligan, Isovalent Kubecon + CloudNativeCon EU 2026 In this interview from KubeCon + CloudNativeCon EU 2026 in Amsterdam, Bill Mulligan, Cilium and eBPF maintainer at Isovalent, joins theCUBE's Rebecca Knight and Rob Strechay to discuss how Cilium is…

Last week at KubeCon theCUBE's Rebecca M. Knight and Rob Strechay had me on the livestream 📽️

We covered many topics from retirement of ingress-nginx to AI, but at the end of the day it all came down to how distributed computing is a networking problem

Cilium Project Update KubeCon EU 2026 YouTube video by eBPF & Cilium Community

In case you missed the Cilium project update at KubeCon, I skipped the list of features this year and focused more on the jedi powers it gives you

www.youtube.com/watch?v=ILjp...

GitHub - atgreen/Whistler: A lisp that compiles to eBPF A lisp that compiles to eBPF. Contribute to atgreen/Whistler development by creating an account on GitHub.

A lisp that compiles to eBPF

Cilium, eBPF, and Modern Kubernetes Networking with Bill Mulligan - Software Engineering Daily Modern cloud-native systems are built on highly dynamic, distributed infrastructure where containers spin up and down constantly, services communicate across clusters, and traditional networking…

Gregor Vand had me on @softwaredaily.bsky.social to talk about all things Cilium and eBPF. The hour flew by and I think it did a great job capturing my thoughts on the current state of the ecosystem 🐝

GitHub - mykola-lysenko/ebpf-viz: A web dashboard that visualizes eBPF programs running on a Linux server by periodically polling bpftool. Renders a Linux kernel diagram with attachment points, networking interfaces with OSI layers, and cgroup hierarchies with attached BPF programs. · Built with Manus A web dashboard that visualizes eBPF programs running on a Linux server by periodically polling bpftool. Renders a Linux kernel diagram with attachment points, networking interfaces with OSI layers...

A web dashboard that visualizes eBPF programs running on a Linux server by periodically polling bpftool. Renders a Linux kernel diagram with attachment points, networking interfaces with OSI layers, and cgroup hierarchies with attached BPF programs

GitHub - Kookiejarz/basic_xdp: Fast XDP Script for basic Anti-DDoS Security w/ automatic port whitelisting Fast XDP Script for basic Anti-DDoS Security w/ automatic port whitelisting - Kookiejarz/basic_xdp

Fast XDP Script for basic Anti-DDoS Security w/ automatic port whitelisting

GitHub - ingero-io/ingero: eBPF-based GPU causal observability agent eBPF-based GPU causal observability agent. Contribute to ingero-io/ingero development by creating an account on GitHub.

eBPF-based GPU causal observability agent

Solnix — Verifier-safe eBPF Language An experimental programming language for writing verifier-safe eBPF programs in the Linux kernel.

A verifier-safe programming language for Linux kernel security.

GitHub's five 9s of availability