Awesome GitHub RepositoriesKernel Networking

This project is a command-line HTTP load testing tool designed to measure the throughput and latency of web servers under high-concurrency conditions. It functions as a multi-threaded benchmarking engine that simulates thousands of simultaneous connections to evaluate server performance, identify bottlenecks, and determine capacity limits. The tool distinguishes itself through a shared-nothing thread architecture that isolates state within individual threads to eliminate lock contention during high-frequency request generation. It utilizes a non-blocking event loop and low-latency socket poll

This application is a desktop network traffic analyzer that provides real-time monitoring and forensic inspection of data packets. By interfacing directly with low-level system drivers, it captures raw network traffic from physical or virtual adapters to identify communication patterns, track bandwidth usage, and diagnose connectivity issues. The system distinguishes itself through an immediate-mode graphical interface that rebuilds the display state every frame, ensuring high responsiveness during live data updates. It maintains performance by using asynchronous message passing to decouple t

Tailscale is a zero-trust networking overlay that connects distributed devices and services into a private, encrypted mesh network. By utilizing a high-performance, user-space implementation of the WireGuard protocol, it establishes secure peer-to-peer tunnels across diverse network topologies without requiring complex firewall configuration. The platform operates on a centralized control plane that manages global network state, authentication, and policy distribution, ensuring that connectivity is governed by identity rather than traditional IP-based rules. What distinguishes Tailscale is it

GoodbyeDPI is a censorship circumvention utility designed to bypass deep packet inspection and restrictive network filtering. It functions as a background engine that intercepts and modifies network traffic at the kernel level, allowing users to maintain connectivity in environments where specific protocols or web content are blocked. The tool employs active manipulation techniques to confuse inspection hardware, including TCP stream fragmentation, HTTP header obfuscation, and the injection of out-of-order packets. By altering packet structures and dropping specific redirection patterns, it m

This project is an automated command-line tool designed to install and configure a secure network gateway on a host machine. By utilizing established open-source security protocols, it establishes a private tunnel endpoint that encrypts internet traffic and facilitates remote access connectivity for authorized users. The tool functions as an infrastructure lifecycle manager, streamlining the deployment of private network services through shell-script-based orchestration. It distinguishes itself by integrating directly with the Linux kernel to manage packet filtering rules and providing creden

Masscan is a command-line network scanner designed for large-scale discovery and infrastructure reconnaissance. It identifies open ports across specific network segments or the entire internet by probing vast address ranges with high efficiency. The tool functions as an asynchronous packet engine, bypassing standard operating system kernel networking stacks to transmit raw packets directly from application memory. The project distinguishes itself through a specialized architecture that manages millions of concurrent connections by separating packet transmission and reception into independent

The Byte Book is an open-source book that covers cloud-native infrastructure, focusing on kernel networking, Kubernetes, service meshes, and containers. It serves as a technical reference for designing stable and cost-effective infrastructure, combining DevOps workflows and site reliability engineering principles. The book provides a deep dive into Kubernetes networking, including CNI, service mesh integration, and container network interfaces for production clusters. It also covers container runtime operations, service mesh architecture for observability and traffic management, and Linux ker

This project is a collection of automated deployment tools centered around a Shadowsocks server auto-installer for Linux distributions. It provides a specialized SOCKS5 proxy manager and a web-based proxy control panel to administer secure network tunneling. The toolkit distinguishes itself by integrating a Linux kernel optimizer that enables congestion control algorithms to increase network throughput. It also includes a dedicated deployer for HTTP/3 web servers and a management interface capable of generating connection QR codes and monitoring real-time performance. The software covers a b

This is a structured reference that maps Linux kernel network sysctl parameters to their specific roles in the packet processing pipeline, from the network interface card through to the application layer. It covers the full path of packet traversal, including interrupt mitigation, buffer management, queuing disciplines, and TCP auto-tuning mechanisms. The reference details how to configure kernel parameters for connection handling, including TCP listen backlog, SYN queue management, FIN timeout, and syncookies. It also addresses queue management and bufferbloat control through egress queuing

FRRouting هي مجموعة توجيه إنترنت تتكون من مجموعة من العفاريت (Daemons) التي تنفذ بروتوكولات التوجيه القياسية IPv4 وIPv6. توفر محرك بروتوكول لـ BGP، ومحاكي شبكة EVPN، ومدير تسميات MPLS، إلى جانب واجهة توجيه gRPC للتهيئة البرمجية واسترجاع البيانات باستخدام نماذج YANG. تتميز المجموعة بقابليتها للتوسع من خلال إطار عمل نصوص Lua الذي ينفذ نصوصاً مخصصة عند خطافات داخلية لتعديل سلوك التوجيه. كما تتميز بنموذج تهيئة معاملاتي يستخدم قواعد بيانات منفصلة للمرشح والتشغيل لضمان التزامات (Commits) ذرية وتراجعات لإعدادات النظام. يغطي المشروع مجموعة واسعة من بروتوكولات البوابة الداخلية والخارجية، بما في ذلك OSPF وIS-IS وEIGRP وRIP. ويدعم هندسة حركة المرور المتقدمة عبر توجيه القطاعات (Segment Routing) وSRv6، وافتراضية الشبكة من خلال عزل VRF وL3VPNs، والمراقبة الشاملة عبر SNMP وبروتوكول مراقبة BGP. يمكن نشر البرنامج عبر تجميع المصدر، أو سلاسل أدوات عبر المعماريات، أو صور حاويات Docker مسبقة البناء.

xmr-stak is blockchain mining software designed to secure decentralized ledgers by calculating hashes to earn rewards. It functions as a cryptocurrency miner supporting the RandomX algorithm for Monero and various versions of the CryptoNight algorithm across CPUs and GPUs. The software includes a web-based monitoring dashboard that allows for the tracking of real-time performance metrics and mining status through a browser interface. It also features a multi-pool failover mechanism to maintain continuous operation by managing connections between primary and backup mining pools. Operational c