39 dépôts
Systems that manage network traffic routing based on predefined configuration rules and authentication requirements.
Explore 39 awesome GitHub repositories matching devops & infrastructure · Routing. Refine with filters or upvote what's useful.
Openclaw est une plateforme de gestion d'environnements d'exécution d'agents, fournissant l'infrastructure nécessaire pour contrôler les cycles de vie des agents, l'état des sessions et la persistance des espaces de travail. Elle dispose d'une passerelle centralisée qui gère les boucles de modèles, l'invocation d'outils et les événements en streaming, tout en prenant en charge le routage multi-agents et la gestion de la mémoire persistante. Le système est conçu pour normaliser les signatures d'exécution des outils et fournir une interface standardisée pour la compatibilité entre les fournisseurs. La plateforme inclut des outils de développement étendus, tels qu'une interface en ligne de commande pour la gestion des espaces de travail, la journalisation de diagnostic et une architecture de plugins qui permet l'enregistrement d'outils et de capacités personnalisés. Elle prend en charge les flux de travail automatisés via des hooks pilotés par les événements, la planification des tâches et l'intégration avec des services externes. La sécurité est gérée par des politiques d'exécution, la portabilité des identifiants et des flux de travail d'approbation pour les actions des agents. Le déploiement est pris en charge par des installateurs d'infrastructure automatisés et des assistants de passerelle conteneurisés, avec des utilitaires intégrés pour les sauvegardes et la gestion de la configuration. Le système fournit un format structuré pour orchestrer des flux de travail en plusieurs étapes et inclut des outils spécialisés pour l'automatisation des navigateurs et le patch de code structuré.
Restricts request throughput based on user identity or origin to protect service stability and prevent resource exhaustion.
Ce projet est un répertoire complet, organisé par la communauté, qui structure un vaste paysage de bibliothèques, frameworks et outils logiciels Python. Il sert de base de connaissances centralisée conçue pour faciliter la navigation dans l'écosystème et accélérer la découverte par les développeurs tout au long du cycle de vie du développement logiciel. Le répertoire se distingue en fournissant un index structuré de ressources classées par domaine technique, allant des utilitaires de développement fondamentaux aux domaines d'ingénierie spécialisés. Il couvre des capacités de haut niveau, notamment l'intelligence artificielle, la science des données, le développement web et la gestion d'infrastructure, permettant aux développeurs d'identifier des solutions éprouvées pour des défis techniques spécifiques. Le projet englobe une large surface de capacités, notamment des outils pour la gestion des dépendances, l'analyse de code statique et les tests automatisés. Il catalogue également des ressources pour le stockage de données persistantes, l'orchestration d'infrastructure cloud et le développement d'interfaces, fournissant une référence unifiée pour la construction et la maintenance de systèmes logiciels complexes.
Emulate complex network topologies and manage software-defined configurations for testing virtualized environments.
Laravel is a comprehensive full-stack web framework designed for building scalable server-side applications. It provides an integrated development environment that centers on an object-relational mapper for database abstraction, a robust routing system, and a sophisticated service container for dependency injection. The framework is built to handle complex application requirements through a modular architecture that emphasizes convention over configuration. What distinguishes Laravel is its deep integration of background processing and event-driven communication. It features a task queue orch
Limits incoming traffic by applying custom constraints based on user identity or origin IP address.
This project provides a remote development platform that enables users to access a full-featured integrated development environment through a standard web browser. By decoupling the user interface from the server-side filesystem, it allows for persistent coding workspaces to be hosted on remote servers, virtual machines, or cloud-native infrastructure, ensuring a consistent development experience from any device. The platform distinguishes itself through a secure gateway architecture that manages traffic, authentication, and encryption at the edge. It utilizes persistent WebSocket connections
Acts as a proxy-based gateway that centralizes traffic management and enforces strict authentication for development services.
Flask is a micro web framework designed for building web services with a flexible, lightweight structure. It functions as a standard-compliant WSGI application server, providing the essential tools required to register URL routes, handle incoming HTTP requests, and construct responses. By utilizing a central application object, it allows developers to manage routing rules, template settings, and resource loading within a unified project environment. The framework distinguishes itself through a modular component architecture that enables the organization of routes, templates, and static files
State propagation ensures shared metadata and request-specific variables remain accessible throughout the entire lifecycle of a web transaction.
Traefik is a cloud-native edge router and API gateway designed to manage service communication and traffic flow across distributed infrastructure. It functions as a dynamic service proxy that automatically discovers backend services and configures routing rules in real time, eliminating the need for manual restarts or complex configuration updates. By integrating directly with container orchestrators and service registries, it maintains a consistent state for network traffic, load balancing, and security policy enforcement. The project distinguishes itself through its deep integration with di
Uses container metadata labels to define and automate complex traffic routing rules.
This project is an administrative reference for Docker, providing guides and command references for system maintenance, image building, network configuration, and security hardening. It serves as a comprehensive manual for managing the container lifecycle and performing general system administration. The reference covers the construction and optimization of images through build files, layering strategies, and registry integration. It also provides instructions for configuring isolated virtual networks, mapping ports, and implementing security hardening using Linux capabilities and read-only f
Guides the creation and management of isolated virtual networks to enable secure communication and service discovery.
Parse Server is a backend-as-a-service solution and Node.js framework that provides a ready-to-use REST and GraphQL API for mobile and web applications. It functions as a core backend infrastructure for managing database schemas, user authentication, and API routing. The system distinguishes itself with a real-time data engine that pushes database updates to clients via WebSockets and a GraphQL server that automatically generates schemas based on application data models. It also features an adapter-based storage layer that abstracts interactions with various cloud and local backends. The pla
Constrains the number of requests allowed to specific route patterns to prevent resource abuse.
Lima is a virtualization engine designed to provision and manage lightweight Linux, macOS, and FreeBSD virtual machines. It functions as a comprehensive virtual machine manager that leverages native hypervisors and system emulation to provide isolated environments for container development, cross-architecture testing, and secure sandboxing. The project distinguishes itself through its template-driven provisioning system, which allows users to define and automate environment configurations via local files or remote URL schemes. It integrates deeply with host systems by providing automated file
Creates, deletes, and lists isolated network segments for virtual machines to control connectivity.
CS-Base is a comprehensive educational platform and technical repository designed to support software engineers in mastering backend architecture, artificial intelligence engineering, and career development. It functions as a centralized knowledge hub that combines illustrated theoretical tutorials with practical, project-based learning to bridge the gap between foundational computer science concepts and professional industry requirements. The project distinguishes itself by integrating a robust career mentorship framework with advanced AI engineering resources. It provides users with tools f
Transmits cancellation, timeout, and deadline signals across API boundaries and process hierarchies to manage request lifecycles.
WSABuilds is a management framework designed to deploy and customize virtualized mobile runtime environments on desktop operating systems. It provides a comprehensive suite of tools for building, installing, and maintaining these environments, enabling the native execution of mobile applications alongside standard desktop software. The project distinguishes itself through its focus on deep system integration and lifecycle management. It allows users to generate tailored virtual environment packages by injecting administrative tools, service components, and specific configurations prior to dep
Resolves connectivity issues by identifying and removing conflicting virtual network adapters that disrupt internet access.
kops is a Kubernetes cluster provisioner and lifecycle manager designed to automate the creation, maintenance, and destruction of production-grade clusters on cloud infrastructure. It functions as a declarative infrastructure manager, synchronizing the live state of a cluster with versioned manifests stored in remote object storage to ensure idempotent operations. The project distinguishes itself by offering comprehensive automation for the entire cluster lifecycle, including high-availability control plane deployment, incremental rolling updates, and automated version upgrades. It also serve
Installs and configures Cilium as the primary eBPF-powered networking interface for the cluster.
EasyTier is a decentralized peer-to-peer virtual private network and mesh networking tool. It functions as a layer 3 network overlay that establishes secure tunnels between devices without requiring a centralized server or coordinator. It also serves as a WireGuard-compatible VPN, capable of acting as a server for standard WireGuard clients. The project distinguishes itself through multipath latency-based routing and the use of KCP or QUIC proxies to mitigate packet loss and stabilize connections in high-loss environments. It provides a virtual networking manager featuring a web management co
Provides a comprehensive management suite featuring a web console, GUI, and RPC API for network configuration.
Bunkerized Nginx is a containerized security automation system that provides a secure reverse proxy and web application firewall. It focuses on protecting web applications by monitoring container labels within cloud-native orchestration systems to automatically update security settings and firewall rules. The system distinguishes itself through automated security operations, including the automatic management of SSL certificates and an automated client banning mechanism that blocks IP addresses based on HTTP status codes. It features bot challenge mechanisms using CAPTCHAs, JavaScript, or coo
Automatically generates proxy routing rules based on container metadata labels within the orchestration system.
Runtipi is a home server dashboard and orchestration tool designed for deploying and managing containerized applications. It provides a web-based interface for discovering and installing software from a curated app store, utilizing a Docker Compose orchestrator to handle the deployment of self-hosted services. The system integrates a reverse proxy and SSL manager to route external traffic to internal containers, automating HTTPS certificate renewal and domain assignment. It also features a built-in backup and update manager that uses cron-based scheduling to perform automatic security patchin
Implements non-standard routing rules by utilizing specialized metadata labels on containers.
Flare-VM est un environnement d'analyse de logiciels malveillants Windows composé de scripts d'installation qui automatisent le provisionnement d'une machine virtuelle. Il fournit une suite complète d'outils de rétro-ingénierie, incluant des décompilateurs et des débogueurs, ainsi que les configurations système et variables d'environnement nécessaires à la recherche en sécurité. Le projet fonctionne comme un orchestrateur d'images de machine virtuelle, permettant la création, la gestion et l'exportation automatisées d'appliances d'analyse spécialisées. Il propose une sélection d'outils pilotée par la configuration et la possibilité d'étendre la logique d'installation via des modifications de registre personnalisées et des définitions de mise en page système. Le système inclut des capacités de configuration réseau isolée pour empêcher toute communication externe via le mode hôte uniquement. Il gère également le cycle de vie complet des états d'analyse via une gestion d'état basée sur des snapshots, incluant la possibilité de nettoyer ou d'exporter des snapshots en tant que fichiers d'appliance vérifiés.
Recursively deletes VM snapshots and their children to remove old analysis states and reclaim storage space.
dockerlabs is a collection of educational labs and technical tutorials designed to teach the fundamentals of containerization and microservice architecture. It provides instructional material and hands-on exercises covering image optimization, security training, infrastructure setup, and cluster orchestration. The project features specific courses and guides focused on reducing image size through multi-stage builds, securing workloads via vulnerability scanning and encrypted networks, and deploying multi-node clusters with high availability using Swarm orchestration. The materials cover a br
Covers attaching containers to specific network drivers to manage service communication and isolation.
jcode est un framework pour développer des agents de codage IA autonomes qui automatisent les tâches de développement logiciel. Il fonctionne comme un orchestrateur d'agents, un runtime d'outils et un moteur de mémoire sémantique, permettant la création d'agents capables de modifier du code, d'exécuter des tests et d'itérer sur leur propre fonctionnalité. Le projet se distingue par son utilisation de l'essaimage d'agents récursif, où une hiérarchie d'agents collaborateurs peut engendrer des agents enfants pour décomposer des tâches complexes. Il implémente un système de mémoire sémantique qui combine la récupération basée sur des vecteurs avec le mappage de relations basé sur des graphes pour maintenir le contexte à travers les sessions. Pour gérer les risques, le système utilise une gouvernance d'action à plusieurs niveaux qui nécessite une approbation humaine pour les opérations sensibles et isole les activités des agents dans des worktrees git séparés. Le framework inclut une boîte à outils complète d'automatisation de navigateur pour interagir avec les pages web, extraire des snapshots DOM et capturer des captures d'écran. Il implémente également le Model Context Protocol pour intégrer des outils et des données externes, et prend en charge le rechargement à chaud binaire pour mettre à jour le serveur sans perdre les connexions réseau actives. Le système fournit une interface en ligne de commande pour gérer les mémoires des agents et inclut des outils d'audit pour suivre la progression du plan et visualiser la topologie de l'essaim d'agents.
Adapts the frequency of background agent cycles based on token consumption and provider rate limits.
Firejail is a Linux application sandbox and kernel security wrapper that isolates untrusted applications from the host system. It uses kernel namespaces and seccomp filters to restrict filesystem access, drop kernel capabilities, and limit the system attack surface. The project is distinguished by its use of predefined security profiles to automatically apply filesystem restrictions and syscall limits based on the executable being launched. It provides specialized isolation for portable packages such as AppImages and implements X11 display isolation via proxy servers to prevent keyboard loggi
Initializes a separate TCP/IP stack with its own routing table and firewall for traffic isolation.
n2n is a peer-to-peer VPN that creates an encrypted mesh network by establishing layer 2 overlay networks. It uses UDP tunneling to connect remote computers into a shared virtual local area network, allowing devices to communicate as if they were on the same physical Ethernet switch. The system utilizes a centralized signaling registry and federated coordination nodes to facilitate peer discovery and node registration. It implements NAT traversal through UDP hole punching and UPnP port mapping, while using supernode relay routing to ensure connectivity when symmetric NATs prevent direct peer-
Creates a virtual Ethernet segment allowing remote devices to communicate as if on the same physical switch.