Awesome GitHub RepositoriesInfrastructure Tools

Kubernetes is a distributed container orchestration platform that automates the deployment, scaling, and management of containerized applications across clusters of computing nodes. It functions as a declarative infrastructure controller, utilizing a control loop architecture that continuously monitors the current system state against user-defined configurations to ensure desired operational outcomes. The system relies on a centralized API-driven interface and a replicated key-value store to maintain a consistent source of truth for all cluster objects. The platform distinguishes itself throu

Moby is an OCI container engine and runtime manager designed for building, running, and managing isolated containers based on Open Container Initiative standards. It functions as a container daemon and image builder, providing a core engine to orchestrate the full lifecycle of containers and the packaging of source code into portable images. The project provides a standardized HTTP interface that allows for programmatic container management, enabling external clients to control daemon settings and container operations. It supports a rootless security model, allowing the engine daemon to execu

Traefik is a cloud-native load balancer and dynamic reverse proxy designed for microservices traffic routing. It automatically discovers services and generates network routes by listening to infrastructure changes in orchestrators and service registries. The project distinguishes itself through auto-configuring service routing, which eliminates manual configuration by updating routing rules in real time as infrastructure scales. It also provides automated SSL certificate management, utilizing ACME-based automation to request and renew certificates from remote authorities. Additional capabili

Gitea is a self-hosted service designed for managing version control repositories, project issue tracking, and software artifact distribution. It provides a collaborative platform that enables teams to host their own source code, manage development tasks through integrated project boards, and store container images or language-specific packages within a unified environment. The platform distinguishes itself through a built-in automation engine that executes continuous integration and delivery pipelines directly triggered by repository events. It utilizes a background task queue to manage asyn

Vegeta is an HTTP load testing tool and library designed to measure the performance and stability of web services. It functions as a command-line utility, a programmable package for integration into other applications, and a distributed load generator capable of splitting request rates across multiple machines. The tool is distinguished by its constant-rate request scheduler, which dispatches requests at a fixed frequency regardless of target response times. It employs lazy target streaming to maintain low memory usage during large tests and uses a binary-encoded storage format to minimize di

This project is a command-line utility designed for HTTP load testing and network stress testing. It functions as a benchmarking tool that generates high volumes of concurrent traffic to evaluate the performance, reliability, and throughput capacity of web applications and APIs under sustained load. The tool allows for precise control over traffic generation by enabling users to configure request parameters, including custom headers, authentication credentials, and specific HTTP methods. It manages load through a worker-pool system that regulates request frequency, allowing for both time-boun

Packer is a machine image build tool and multi-platform image orchestrator. It functions as an infrastructure as code image builder that produces identical machine images across multiple platforms from a single source configuration to ensure environment consistency. The tool enables the creation of a golden image pipeline by generating compatible system images for different cloud providers and on-premises hypervisors. It includes an image lifecycle registry to store metadata for tracking the versioning and status of generated images. The system manages the automation of machine image creatio

Webhook is a lightweight automation server that executes local shell scripts and system commands in response to incoming HTTP requests. It functions as an integration engine, mapping external network events to server-side tasks by parsing request payloads and triggering predefined processes. The project distinguishes itself through a declarative configuration model that allows for dynamic argument injection. By extracting values from request headers, query parameters, or bodies, it populates command templates to facilitate flexible script execution. This enables the automation of infrastructu

Gvm is a Go version manager, environment orchestrator, and dependency isolator. It provides a system for installing, removing, and switching between different versions of the Go programming language on a single machine. The tool manages native dependencies and creates isolated package sets to prevent version conflicts between different project environments. It uses environment variable overlays and directory isolation to link native code without modifying the host operating system. The software covers the full language lifecycle, including remote version cataloging, active version switching,

This project is a Go shell scripting library and framework designed for writing automation scripts and CLI tools. It provides a concurrent data pipeline system for chaining sources, filters, and sinks to process text and JSON streams. The library distinguishes itself through a comprehensive toolkit for shell-like operations, including a text processing engine for regular expression filtering and frequency analysis, a filesystem utility toolkit for recursive search and path manipulation, and an integrated HTTP client wrapper for building data pipelines that fetch web content. The capability s

Bombardier is a concurrent HTTP load generator and performance benchmarking tool written in Go. It functions as a latency distribution analyzer and benchmarking utility designed to measure the throughput and response speed of HTTP services by simulating high-volume request loads. The tool provides specific capabilities for TLS benchmarking, supporting client certificate authentication and the ability to bypass server certificate verification. It distinguishes itself through the use of a token-bucket algorithm for precise request rate limiting and the use of templates to export benchmark resul

Gaia هو منسق خطوط أنابيب متعدد اللغات ومنصة لأتمتة التكامل والتسليم المستمر. يعمل كمحرك سير عمل متعدد اللغات ينسق حركة البيانات وتحويلها من خلال تنفيذ مهام مكتوبة بلغات برمجة مختلفة عبر رسم بياني للتبعيات. تتميز المنصة بمنسق خطوط أنابيب مرئي لتعيين وسائط الدوال عبر بوابة إدارة، ومدير أسرار آمن يستخدم التشفير لحماية كلمات المرور والرموز. كما تقوم بأتمتة دورة حياة البرمجيات عن طريق استنساخ المستودعات وإعادة تجميع التطبيقات بناءً على خطافات الويب (webhooks) الخاصة بالتحكم في الإصدار أو الاستطلاع. تشمل القدرات الأوسع للنظام نشر تطبيقات العناقيد (clusters) باستخدام مخططات التكوين لإدارة مساحات الأسماء والدخول (ingress)، وسجلات تنفيذ مركزية للمكونات الإضافية الموزعة، وتشفير يعتمد على الشهادات لتأمين الاتصال بين البوابة وخدمات الخلفية.

Pomerium هو وكيل عكسي (reverse proxy) واعٍ بالهوية ومبني على مبدأ الثقة الصفرية (zero-trust) مصمم لتأمين التطبيقات والبنية التحتية الداخلية دون الحاجة إلى VPN تقليدي. من خلال التحقق من كل طلب عبر مزود هوية ومحرك سياسات تصريحي، فإنه يضمن منح الوصول بناءً على هوية المستخدم، وسياق الجهاز، وسمات الطلب بدلاً من موقع الشبكة. يتميز المشروع بقدرته على التعامل مع بروتوكولات متنوعة ومتطلبات وصول معقدة. يوفر وصولاً آمناً ومتحققاً من الهوية لتطبيقات الويب، وخدمات TCP و UDP، واتصالات SSH، مستبدلاً المفاتيح الساكنة بشهادات مؤقتة قصيرة العمر. بالإضافة إلى ذلك، يعمل كبوابة لبروتوكول سياق النموذج (Model Context Protocol)، مما يتيح الاكتشاف الآمن، والتدقيق، وتنفيذ الأدوات القائم على السياسات لوكلاء الذكاء الاصطناعي والخدمات المؤتمتة. يتكامل Pomerium مع Kubernetes كـ ingress controller، حيث يترجم موارد ingress الأصلية إلى تكوينات توجيه واعية بالهوية. تدعم بنيته مزامنة مستوى التحكم المركزي، مما يسمح للمسؤولين بتوزيع سياسات الأمان، وشهادات TLS، وتكوينات التوجيه عبر عناقيد الوكيل الموزعة. يوفر النظام أيضاً إدارة دقيقة لحركة المرور، بما في ذلك موازنة التحميل، ومعالجة الترويسات، والتصفية القائمة على المسار، لضمان اتصال آمن وعالي الأداء بخدمات الخلفية. تم تصميم المشروع لنشر مرن، ويدعم كلاً من البنيات الموحدة وغير المترابطة لاستيعاب التوسع المستقل لمكونات البيانات ومستوى التحكم. يوفر قابلية مراقبة شاملة من خلال سجلات تدقيق قرارات التفويض وتصدير مقاييس الأداء، مما يسهل الامتثال ومراقبة الأمن عبر بيئات متنوعة.

Gox هو أداة أتمتة بناء عبر المنصات وأداة سطر أوامر مصممة لتجميع Go عبر المنصات. يعمل كمدير سلسلة أدوات يبني ويهيئ أدوات التجميع والأعلام اللازمة المطلوبة لاستهداف منصات أجهزة متنوعة. يؤتمت النظام إعداد وتثبيت وتوفير المجمعات والروابط اللازمة لأنظمة تشغيل وبنيات مختلفة. يدير توليد الملفات الثنائية القابلة للتنفيذ لمنصات متعددة بالتوازي، باستخدام قوالب تسمية مخصصة وأعلام رابط لإعداد إصدارات البرامج. توفر الأداة قدرات لتصفية المنصة المستهدفة باستخدام أنماط شاملة وحصرية وتسمح بتجاوز إعدادات البناء عبر متغيرات البيئة. كما تدعم اكتشاف مجموعات أنظمة التشغيل والبنية المتاحة.

s5cmd is a command line interface for high-performance data transfers and management tasks across S3 compatible storage services. It functions as a parallel data transfer tool and bucket synchronization utility, designed to accelerate the uploading and downloading of large volumes of files using concurrent workers. The tool acts as a batch command processor capable of executing thousands of object management operations in parallel from command files or piped streams. It also serves as an S3 Select query client, allowing the execution of SQL expressions against stored JSON records to retrieve

netflix-proxy is a smart DNS proxy designed to bypass regional content restrictions and geo-locked streaming services. It masks user locations by routing DNS and HTTPS traffic through a proxy server to access restricted content. The project includes a web-based administrative interface for managing configuration settings and remote access control. This dashboard allows operators to authorize specific client IP addresses and manage authentication. Additional capabilities include bridging IPv4 traffic over IPv6 to enable communication with IPv6-only service providers. The system also supports

Time Series Alerting Framework

Modern Job Scheduler

OctoDroid This application provides access to GitHub and lets you stay connected with your network

Easy-to-use CUI for fixing git conflicts