Awesome GitHub RepositoriesHigh Availability Infrastructure

K3s is a lightweight Kubernetes distribution designed for resource-constrained environments, edge computing, and simplified deployment across diverse hardware architectures. It functions as a container orchestration engine that automates the deployment, scaling, and management of containerized applications. By bundling all necessary control plane components and dependencies into a single binary, it minimizes the system footprint and streamlines the installation process. The project distinguishes itself through a flexible architecture that supports both high-availability clustering and minimal

Nacos is a service discovery and configuration platform designed for cloud native environments. It serves as a management plane that orchestrates service registries, handles dynamic application settings through a remote configuration store, and functions as a load balancing control plane for distributed clusters. The platform differentiates itself by providing real-time configuration updates that push changes to clients without requiring service restarts. It also implements weighted routing and DNS-based traffic routing to manage load balancing policies across a fleet of healthy service insta

This project is a Docker educational resource and a collection of practical examples designed for learning containerization technologies. It serves as a guide for understanding container fundamentals, including the creation and management of custom images and the use of registries. The repository provides specialized references for container security hardening, such as managing kernel privileges and implementing supply chain security. It also includes tutorials for multi-container orchestration and a DevOps guide focused on CI/CD automation and image optimization. The material covers a broad

KubeSphere is a distributed operating system for cloud-native application management that provides a centralized control plane for Kubernetes clusters. It functions as a comprehensive DevOps portal, enabling teams to orchestrate containerized workloads, manage CI/CD pipelines, and enforce security policies across hybrid cloud, datacenter, and edge environments. The platform distinguishes itself through its multi-cluster federation capabilities and robust multi-tenancy model, which allow for logical resource isolation and granular access control across shared infrastructure. It integrates a mo

Nomad is a distributed workload orchestrator and infrastructure automation platform designed to manage the lifecycle of applications across large-scale, heterogeneous environments. It functions as a multi-cloud orchestration engine, providing a unified control plane to deploy, scale, and govern containers, virtual machines, and legacy applications. By utilizing declarative job specifications, the system ensures infrastructure convergence and maintains the desired state across distributed data centers and geographic regions. The platform distinguishes itself through a flexible, plugin-based ar

This project is a cloud-native identity and access management platform designed to centralize authentication, authorization, and identity lifecycle management. It functions as a standards-compliant OpenID Connect authorization server, providing secure session management and token issuance for web, mobile, and device-based applications. The platform is built to handle complex identity requirements through stateless token authentication and support for modern passwordless methods, including biometrics and hardware keys. What distinguishes this platform is its native support for multi-tenant env

The AWS Cloud Development Kit is an infrastructure-as-code framework that enables developers to define and provision cloud resources using familiar programming languages. By utilizing construct-based synthesis, it translates high-level, object-oriented code into declarative templates, allowing for the automated management of complex cloud environments through a centralized, code-driven control plane. The framework distinguishes itself through its ability to model infrastructure as a dependency-aware resource graph, ensuring that components are provisioned and updated in the correct order. It

Bisheng is an enterprise AI framework and LLM DevOps platform designed to manage the full lifecycle of large language models. It provides a unified system for dataset curation, supervised fine-tuning, model versioning, and performance evaluation. The platform features a visual workflow orchestrator for building retrieval-augmented generation pipelines and complex task sequences using flowcharts with conditional logic and human intervention points. It also includes an AI agent framework that uses a specialized guidance language to embed domain expertise and professional business logic into aut

Patroni is a high availability manager and cluster orchestrator for PostgreSQL. It functions as a failover controller that monitors database health and manages leader transitions to ensure continuous availability and consistency across multiple nodes. The system relies on a distributed configuration store client to synchronize cluster state and perform leader election. It supports integration with external consensus services such as Etcd, Consul, and ZooKeeper, and provides specific orchestration capabilities for deploying clusters within Kubernetes environments. The project covers the manag

This project is a PostgreSQL client library and SQL query builder for JavaScript and TypeScript. It provides a low-level database driver and connection manager to handle database sessions, along with a logical replication client for monitoring real-time changes. The library distinguishes itself with a high-performance bulk data streamer that utilizes the database copy command for importing and exporting large datasets. It also implements a logical replication protocol to facilitate real-time database synchronization through change subscriptions and channel-based notifications. The toolset co

Chainlink is a decentralized oracle network that connects smart contracts to off-chain data, computation, and real-world systems. It provides a secure and reliable infrastructure for blockchain applications to access external information, execute automated workflows, and interact with other blockchains. The network is secured by a staking-based model where node operators lock LINK tokens as collateral, which can be slashed for poor performance, incentivizing honest and accurate data delivery. The platform distinguishes itself through a comprehensive set of capabilities that extend beyond basi

Manifest is a language model provider unification system that standardizes access to multiple AI backends through a single interface. It functions as a centralized management layer for integrating various cloud-based and local model providers to simplify how applications request completions. The system provides intelligent model routing and high availability infrastructure by directing queries based on complexity and automatically triggering model fallbacks when a primary provider fails. It distinguishes itself through multi-tenant AI management, organizing agents into isolated groups with de

Hazelcast is a distributed data platform that combines an in-memory data grid with a stream processing engine to support real-time analytics and event-driven applications. It functions as a partitioned, distributed key-value store that replicates data across cluster nodes to provide low-latency access and high availability. The platform also serves as a distributed SQL query engine, allowing users to execute standard SQL statements against both in-memory datasets and external data sources. What distinguishes Hazelcast is its use of a distributed consensus subsystem to maintain strongly consis

CodeIgniter is a PHP web framework built on the Model-View-Controller pattern, designed for building full-stack web applications. It provides a lightweight toolkit with minimal configuration, organizing application logic into controllers, models, and views for clean separation of concerns. The framework includes a fluent query builder for constructing SQL statements programmatically, PSR-4 autoloading with namespace mapping, and a service-based dependency injection container for managing shared class instances. The framework distinguishes itself through its comprehensive set of built-in tools

AliSQL is a fork of MySQL by Alibaba that extends the relational database management system with enhancements for high performance, scalability, and enterprise-grade availability. It retains the core MySQL identity as a SQL-based database for storing, organizing, and retrieving structured data, while adding optimizations for large-scale transactional and analytical workloads. The project differentiates itself through a set of Alibaba-specific improvements, including a columnar engine for accelerating analytical queries directly on MySQL tables, and a distributed, shared-nothing NDB Cluster en

Kill Bill is a subscription billing platform and usage-based billing engine designed to manage recurring invoicing and automated payment collection. It functions as a multi-tenant billing infrastructure, providing isolated environments for different organizational entities through a dedicated API. The system is distinguished by a plugin-based extension framework that allows for the integration of third-party payment gateways and custom business logic. It includes a payment gateway orchestrator to handle transactions and refunds, as well as a revenue recognition system to allocate contract rev

Readyset is a transparent caching proxy for PostgreSQL and MySQL that sits between an application and its database, intercepting SQL queries and serving cached results from memory. It automatically caches query results on first execution and keeps those caches consistent by consuming the database’s replication stream in real time, enabling faster repeated reads without application code changes. The proxy also supports caching advanced SQL functions such as window functions, bucket functions, and locale-aware collation sorting, and exposes an interface that allows AI agents to inspect proxied q

Grace is a lifecycle controller and process manager for Go applications designed to coordinate server transitions and implement system-level socket activation. It functions as a tool for managing secure HTTP servers and their transport layer security configurations across multiple ports. The project enables zero-downtime deployments by handing over network sockets to successor processes, allowing existing requests to complete before an old process shuts down. It also provides socket activation management, which allows servers to start lazily only upon receiving connections through an external

Pomerium es un reverse proxy de confianza cero (zero-trust) consciente de la identidad, diseñado para asegurar aplicaciones internas e infraestructura sin necesidad de una VPN tradicional. Al verificar cada solicitud a través de un proveedor de identidad y un motor de políticas declarativo, asegura que el acceso se otorgue basado en la identidad del usuario, el contexto del dispositivo y los atributos de la solicitud en lugar de la ubicación de red. El proyecto se distingue por su capacidad para manejar diversos protocolos y requisitos de acceso complejos. Proporciona acceso seguro y verificado por identidad a aplicaciones web, servicios TCP y UDP, y conexiones SSH, reemplazando claves estáticas con certificados efímeros de corta duración. Además, funciona como una puerta de enlace para el Model Context Protocol, permitiendo el descubrimiento seguro, auditoría y ejecución de herramientas aplicada por políticas para agentes de IA y servicios automatizados. Pomerium se integra con Kubernetes como un controlador de ingress, traduciendo recursos de ingress nativos en configuraciones de enrutamiento conscientes de la identidad. Su arquitectura soporta la sincronización centralizada del plano de control, permitiendo a los administradores distribuir políticas de seguridad, certificados TLS y configuraciones de enrutamiento a través de clústeres de proxy distribuidos. El sistema también ofrece gestión de tráfico granular, incluyendo balanceo de carga, manipulación de encabezados y filtrado basado en rutas, para asegurar una conectividad segura y eficiente a los servicios backend. El proyecto está diseñado para un despliegue flexible, soportando arquitecturas tanto unificadas como desacopladas para acomodar el escalado independiente de los componentes de datos y del plano de control. Proporciona una observabilidad integral a través de registros de auditoría de decisiones de autorización y exportación de métricas de rendimiento, facilitando el cumplimiento y el monitoreo de seguridad en diversos entornos.

Pgcat es una solución de middleware para PostgreSQL que ofrece agrupación de conexiones (connection pooling), sharding, balanceo de carga y gestión de conmutación por error (failover). Funciona como un proxy que optimiza el uso de recursos y la escalabilidad gestionando sesiones de base de datos y distribuyendo consultas entre múltiples instancias. El sistema destaca por su capacidad de duplicación de tráfico (traffic mirroring), que replica consultas de producción en tiempo real hacia bases de datos de prueba para su validación. También implementa un proxy de sharding para distribuir datos y consultas entre múltiples instancias de base de datos basándose en claves de particionamiento. El proyecto cubre la alta disponibilidad mediante failover automatizado y monitoreo del estado de los servidores. Incluye enrutamiento de tráfico para separar operaciones de lectura y escritura, seguridad en la capa de transporte (TLS) para comunicaciones cifradas y una base de datos administrativa virtual para la gestión del sistema y la exportación de métricas de rendimiento. El servicio se distribuye como un contenedor Docker para garantizar un despliegue consistente en diferentes entornos.