Awesome GitHub RepositoriesService Traffic Routing

Traefik is a cloud-native edge router and API gateway designed to manage service communication and traffic flow across distributed infrastructure. It functions as a dynamic service proxy that automatically discovers backend services and configures routing rules in real time, eliminating the need for manual restarts or complex configuration updates. By integrating directly with container orchestrators and service registries, it maintains a consistent state for network traffic, load balancing, and security policy enforcement. The project distinguishes itself through its deep integration with di

Activepieces is an open-source, self-hosted workflow automation platform designed to connect third-party applications through modular triggers and actions. It provides a low-code integration framework that allows users to build, manage, and execute complex business logic sequences within isolated, sandboxed environments. The platform distinguishes itself through its focus on embeddability and enterprise-grade security. It features an embedded automation builder that can be integrated into external applications via iframes, supported by comprehensive identity and access management tools such a

KubeSphere is a distributed operating system for cloud-native application management that provides a centralized control plane for Kubernetes clusters. It functions as a comprehensive DevOps portal, enabling teams to orchestrate containerized workloads, manage CI/CD pipelines, and enforce security policies across hybrid cloud, datacenter, and edge environments. The platform distinguishes itself through its multi-cluster federation capabilities and robust multi-tenancy model, which allow for logical resource isolation and granular access control across shared infrastructure. It integrates a mo

This project is a high-performance, distributed API gateway designed to manage, secure, and observe traffic for microservices, serverless functions, and artificial intelligence model providers. It functions as a dynamic service proxy and cloud-native ingress controller, centralizing policy enforcement and traffic routing through a unified configuration interface that synchronizes state across multiple nodes in real time. The platform distinguishes itself through a highly extensible architecture that utilizes a high-performance scripting engine to execute modular logic directly within the requ

Quarkus is a Kubernetes-native Java framework designed for building high-performance, memory-efficient applications. It utilizes ahead-of-time native compilation to transform Java code into standalone, optimized binaries that eliminate the need for a virtual machine, enabling rapid startup and reduced memory consumption. By performing code augmentation during the build phase, it shifts heavy processing tasks away from runtime, ensuring that applications are optimized for cloud-native environments. The framework distinguishes itself through a unified approach to reactive and imperative program

Mall-swarm is a microservices-based e-commerce system built with Spring Cloud Alibaba and Spring Boot. It functions as a scalable online retail platform designed to manage complex business logic through a distributed architecture of independent services. The system utilizes Kubernetes and Docker for service orchestration, incorporating a unified API gateway for traffic routing and service discovery. Security is handled via a unified identity and access management framework for verifying user tokens across all connected microservices. The platform includes a dedicated search engine for high-p

This project is a comprehensive infrastructure guide and technical reference for designing and deploying cloud native and AI native environments using Kubernetes. It serves as a manual for managing container orchestration, pod lifecycles, and declarative state reconciliation to maintain scalable cluster workloads. The resource provides instructional material on building custom controllers and implementing operational logic via the operator pattern. It also functions as a framework for optimizing the delivery of large language models through specialized gateways and workload scheduling. The h

This project is a service mesh platform designed to manage, secure, and observe service-to-service communication within Kubernetes clusters. It functions as a control plane that orchestrates transparent sidecar proxies, which intercept and manage network traffic to provide reliable connectivity for microservices. By automating the injection of these proxies, the platform ensures that infrastructure-level policies are applied consistently across all workloads without requiring manual configuration changes. The platform distinguishes itself through its focus on zero-trust security and cross-clu

vcluster is a Kubernetes virtual cluster platform that creates fully isolated Kubernetes environments with dedicated control planes, API servers, and RBAC on shared physical infrastructure. It virtualizes Kubernetes control planes by running them as pods inside a host cluster, as standalone binaries on bare metal or virtual machines, or within Docker containers, providing each tenant their own isolated Kubernetes environment without the overhead of managing separate physical clusters. The platform enables multi-tenant Kubernetes isolation through multiple tenancy models, from shared node pool

Boto3 is the AWS SDK for Python, providing a programmatic interface for managing and automating AWS cloud infrastructure and services. It serves as a cloud management API client and resource manager for provisioning, configuring, and scaling virtual servers, databases, and storage. The library enables the implementation of infrastructure-as-code through declarative templates and scripts, allowing for the deployment of identical resource stacks across multiple accounts and geographic regions. It also provides a framework for coordinating distributed workflows, serverless functions, and contain

Higress is an AI API gateway and cloud-native traffic manager that functions as a Kubernetes ingress controller. It provides a centralized system for routing, securing, and optimizing traffic directed toward large language models, AI agents, and microservice architectures. The project distinguishes itself through deep AI orchestration, including the ability to host and manage Model Context Protocol servers that transform REST APIs into tools for AI agents. It features specialized AI infrastructure for model request proxying, protocol translation across multiple providers, and semantic-based c

Agones is a Kubernetes game server orchestrator designed for hosting, scaling, and managing dedicated multiplayer game servers. It extends the Kubernetes control plane using custom resource definitions to define game server and fleet objects, utilizing a dedicated fleet manager to maintain pools of warm server instances. The system provides a game server SDK and language-specific client libraries that allow server processes to signal readiness, health, and shutdown states directly to the controller. It distinguishes itself through specialized scaling logic, including the use of WebAssembly mo

Kubernetes-based, scale-to-zero, request-driven compute

Motan هو إطار عمل RPC عبر اللغات وشبكة خدمات موزعة مصممة لبناء خدمات موزعة عالية الأداء. يعمل كطبقة شبكات تدير اكتشاف الخدمة، وتوجيه الطلبات، وتوزيع حركة المرور عبر مجموعات الخوادم. يعمل النظام كموازن تحميل عبر مراكز البيانات، حيث يوزع الطلبات عبر مجموعات ومراكز بيانات متعددة باستخدام الجدولة المرجحة. يتضمن سجل اكتشاف الخدمة لتحديد وربط مثيلات الخدمة المتاحة تلقائياً داخل بيئة شبكة موزعة. يوفر إطار العمل قدرات لتنسيق الخدمة الموزعة من خلال استدعاءات الإجراءات البعيدة المتزامنة وغير المتزامنة. كما ينفذ توجيه الخدمة عالي التوفر لضمان الاستقرار عبر مراكز بيانات مختلفة ويدير تبادل البيانات بين الخدمات المكتوبة بلغات برمجة مختلفة.

Easegress is a cloud-native traffic orchestration platform that functions as a multi-protocol API gateway and service mesh proxy. It routes, transforms, and orchestrates HTTP and MQTT traffic through configurable filter chains, providing high availability, security controls, and resilience for backend services. The platform integrates with service discovery systems like Kubernetes, Consul, and Eureka to dynamically route traffic to discovered services with automatic failover and health monitoring. The system distinguishes itself through a pipeline-based filter chain architecture where request

This is an educational repository that teaches container orchestration fundamentals through hands-on guides and practical examples. It covers core Kubernetes concepts including Pods, Services, Deployments, and Namespaces, providing step-by-step exercises that demonstrate how to manage containerized applications across a cluster. The tutorials walk through essential Kubernetes capabilities such as decoupling configuration from application code using ConfigMaps and Secrets, exposing Pods with stable network endpoints via Services, and routing external traffic with Ingress controllers. The mater

يوفر هذا المشروع مجموعة من مجموعات التنفيذ، والأدلة، والكود المصدري المصممة لتعليم تطوير التطبيقات المعتمدة على الحاويات وإدارة المجموعات. يعمل كمسار تعليمي لتعبئة التطبيقات باستخدام Docker وتنسيق أعباء العمل داخل Kubernetes. يتضمن المستودع جولات عملية لبناء خطوط أنابيب تسليم آلية باستخدام عداءين (runners) معتمدين على الحاويات وعملاء بناء. كما يوفر مجموعة من الأدلة لتنفيذ المراقبة الأصلية للسحابة، ونشر شبكات الخدمات، وإدارة تكوينات مجموعة Kubernetes. تغطي المواد مجموعة واسعة من قدرات DevOps، بما في ذلك أتمتة خط أنابيب CI/CD، وتوجيه حركة مرور الشبكة، وتوفير التخزين المستمر. كما تتناول مخاوف البنية التحتية مثل التحكم في الوصول القائم على الأدوار، وتوفير شهادات SSL، وجمع مقاييس أداء النظام والسجلات.

هذا المشروع عبارة عن دليل نشر Kubernetes ومزود بنية تحتية مصمم لبيئات الهواة والمختبرات المنزلية. يوفر إطار عمل لإعداد مجموعات متعددة العقد عبر مختلف مزودي السحابة والعقد المادية أو الافتراضية، ويعمل كمنسق مجموعة ذاتي الاستضافة. يركز المشروع على تعزيز الأمان واستقرار البنية التحتية من خلال أدلة تنفيذ محددة. يتضمن ذلك إطار عمل لأمن الشبكة يغطي جدران حماية المضيف وتراكبات الشبكة المشفرة، بالإضافة إلى تعليمات مفصلة لتكوين توجيه الدخول (ingress) لإدارة حركة المرور العامة الخارجية عبر تعيين DNS ومتحكمات حركة المرور. تمتد إمكانيات المشروع إلى توفير التخزين الموزع، وتوفير طرق لتنفيذ تخزين الكتل المكرر والأحجام المستمرة التي تستمر بعد إعادة تشغيل الحاويات. كما يغطي إدارة الشهادات المؤتمتة للاتصالات المشفرة وتكوين عناصر التحكم في الوصول القائم على الأدوار.

يوفر هذا المشروع مخططاً معمارياً شاملاً ومجموعة تنفيذ لبناء منصة كخدمة (PaaS) على Kubernetes. يعمل كمورد فني لنشر بيئات تنسيق الحاويات، وإدارة دورة حياة تطوير البرمجيات بالكامل، ودمج سلسلة أدوات DevOps كاملة. يؤكد التنفيذ على تسليم البرمجيات الآلي من خلال دمج خطوط أنابيب البناء والتسليم، وسجلات الحاويات الخاصة، وأنظمة التكوين الموزعة. يتيح فصل إعدادات التطبيق عن الصور عبر مدير تكوين مركزي، مما يسمح بتحديثات خاصة بالبيئة دون إعادة بناء الحاويات. تغطي المنصة مجموعة واسعة من القدرات السحابية الأصلية، بما في ذلك تنسيق شبكات الحاويات، وإدارة حركة المرور من الطبقة 4 و7، وتنسيق الخدمات المصغرة مع استراتيجيات التحديث المتداول. كما تتضمن حزمة مراقبة كاملة للتسجيل المركزي، والتتبع الموزع، وتصور مقاييس السلاسل الزمنية. يتم تنفيذ المشروع بشكل أساسي كمجموعة من نصوص Shell وملفات التكوين لأتمتة نشر طبقة التنسيق وخدماتها الداعمة.

Flagger is a Kubernetes operator designed to automate the lifecycle of application deployments through progressive delivery. It functions as a controller that monitors custom resource definitions to orchestrate complex release strategies, including canary, blue/green, and A/B testing. By continuously reconciling the desired cluster state with the actual environment, it ensures that deployments adhere to defined specifications while managing the underlying infrastructure required for traffic routing. The project distinguishes itself through a sophisticated metric-driven analysis loop that eval