Awesome GitHub RepositoriesKernel Networking

This project is a command-line HTTP load testing tool designed to measure the throughput and latency of web servers under high-concurrency conditions. It functions as a multi-threaded benchmarking engine that simulates thousands of simultaneous connections to evaluate server performance, identify bottlenecks, and determine capacity limits. The tool distinguishes itself through a shared-nothing thread architecture that isolates state within individual threads to eliminate lock contention during high-frequency request generation. It utilizes a non-blocking event loop and low-latency socket poll

This application is a desktop network traffic analyzer that provides real-time monitoring and forensic inspection of data packets. By interfacing directly with low-level system drivers, it captures raw network traffic from physical or virtual adapters to identify communication patterns, track bandwidth usage, and diagnose connectivity issues. The system distinguishes itself through an immediate-mode graphical interface that rebuilds the display state every frame, ensuring high responsiveness during live data updates. It maintains performance by using asynchronous message passing to decouple t

Tailscale is a zero-trust networking overlay that connects distributed devices and services into a private, encrypted mesh network. By utilizing a high-performance, user-space implementation of the WireGuard protocol, it establishes secure peer-to-peer tunnels across diverse network topologies without requiring complex firewall configuration. The platform operates on a centralized control plane that manages global network state, authentication, and policy distribution, ensuring that connectivity is governed by identity rather than traditional IP-based rules. What distinguishes Tailscale is it

GoodbyeDPI is a censorship circumvention utility designed to bypass deep packet inspection and restrictive network filtering. It functions as a background engine that intercepts and modifies network traffic at the kernel level, allowing users to maintain connectivity in environments where specific protocols or web content are blocked. The tool employs active manipulation techniques to confuse inspection hardware, including TCP stream fragmentation, HTTP header obfuscation, and the injection of out-of-order packets. By altering packet structures and dropping specific redirection patterns, it m

This project is an automated command-line tool designed to install and configure a secure network gateway on a host machine. By utilizing established open-source security protocols, it establishes a private tunnel endpoint that encrypts internet traffic and facilitates remote access connectivity for authorized users. The tool functions as an infrastructure lifecycle manager, streamlining the deployment of private network services through shell-script-based orchestration. It distinguishes itself by integrating directly with the Linux kernel to manage packet filtering rules and providing creden

Masscan is a command-line network scanner designed for large-scale discovery and infrastructure reconnaissance. It identifies open ports across specific network segments or the entire internet by probing vast address ranges with high efficiency. The tool functions as an asynchronous packet engine, bypassing standard operating system kernel networking stacks to transmit raw packets directly from application memory. The project distinguishes itself through a specialized architecture that manages millions of concurrent connections by separating packet transmission and reception into independent

The Byte Book is an open-source book that covers cloud-native infrastructure, focusing on kernel networking, Kubernetes, service meshes, and containers. It serves as a technical reference for designing stable and cost-effective infrastructure, combining DevOps workflows and site reliability engineering principles. The book provides a deep dive into Kubernetes networking, including CNI, service mesh integration, and container network interfaces for production clusters. It also covers container runtime operations, service mesh architecture for observability and traffic management, and Linux ker

This project is a collection of automated deployment tools centered around a Shadowsocks server auto-installer for Linux distributions. It provides a specialized SOCKS5 proxy manager and a web-based proxy control panel to administer secure network tunneling. The toolkit distinguishes itself by integrating a Linux kernel optimizer that enables congestion control algorithms to increase network throughput. It also includes a dedicated deployer for HTTP/3 web servers and a management interface capable of generating connection QR codes and monitoring real-time performance. The software covers a b

This is a structured reference that maps Linux kernel network sysctl parameters to their specific roles in the packet processing pipeline, from the network interface card through to the application layer. It covers the full path of packet traversal, including interrupt mitigation, buffer management, queuing disciplines, and TCP auto-tuning mechanisms. The reference details how to configure kernel parameters for connection handling, including TCP listen backlog, SYN queue management, FIN timeout, and syncookies. It also addresses queue management and bufferbloat control through egress queuing

FRRouting es una suite de enrutamiento de internet que comprende una colección de daemons que implementan protocolos de enrutamiento IPv4 e IPv6 estándar. Proporciona un motor de protocolo para BGP, un virtualizador de red EVPN y un gestor de etiquetas MPLS, junto con una interfaz de enrutamiento gRPC para la configuración programática y la recuperación de datos utilizando modelos YANG. La suite se distingue por su extensibilidad a través de un framework de scripting Lua que ejecuta scripts personalizados en hooks internos para modificar el comportamiento de enrutamiento. También cuenta con un modelo de configuración transaccional que utiliza bases de datos candidatas y en ejecución separadas para garantizar commits atómicos y reversiones de la configuración del sistema. El proyecto cubre una amplia gama de protocolos de puerta de enlace interior y exterior, incluyendo OSPF, IS-IS, EIGRP y RIP. Admite ingeniería de tráfico avanzada a través de Segment Routing y SRv6, virtualización de red a través de aislamiento VRF y L3VPNs, y monitoreo integral a través de SNMP y BGP Monitoring Protocol. El software se puede desplegar mediante compilación de fuente, cadenas de herramientas de arquitectura cruzada o imágenes de contenedor Docker preconstruidas.

xmr-stak is blockchain mining software designed to secure decentralized ledgers by calculating hashes to earn rewards. It functions as a cryptocurrency miner supporting the RandomX algorithm for Monero and various versions of the CryptoNight algorithm across CPUs and GPUs. The software includes a web-based monitoring dashboard that allows for the tracking of real-time performance metrics and mining status through a browser interface. It also features a multi-pool failover mechanism to maintain continuous operation by managing connections between primary and backup mining pools. Operational c