Awesome GitHub RepositoriesNetwork Virtualization Tools

Ce projet est un répertoire complet, organisé par la communauté, qui structure un vaste paysage de bibliothèques, frameworks et outils logiciels Python. Il sert de base de connaissances centralisée conçue pour faciliter la navigation dans l'écosystème et accélérer la découverte par les développeurs tout au long du cycle de vie du développement logiciel. Le répertoire se distingue en fournissant un index structuré de ressources classées par domaine technique, allant des utilitaires de développement fondamentaux aux domaines d'ingénierie spécialisés. Il couvre des capacités de haut niveau, notamment l'intelligence artificielle, la science des données, le développement web et la gestion d'infrastructure, permettant aux développeurs d'identifier des solutions éprouvées pour des défis techniques spécifiques. Le projet englobe une large surface de capacités, notamment des outils pour la gestion des dépendances, l'analyse de code statique et les tests automatisés. Il catalogue également des ressources pour le stockage de données persistantes, l'orchestration d'infrastructure cloud et le développement d'interfaces, fournissant une référence unifiée pour la construction et la maintenance de systèmes logiciels complexes.

This project is an administrative reference for Docker, providing guides and command references for system maintenance, image building, network configuration, and security hardening. It serves as a comprehensive manual for managing the container lifecycle and performing general system administration. The reference covers the construction and optimization of images through build files, layering strategies, and registry integration. It also provides instructions for configuring isolated virtual networks, mapping ports, and implementing security hardening using Linux capabilities and read-only f

Lima is a virtualization engine designed to provision and manage lightweight Linux, macOS, and FreeBSD virtual machines. It functions as a comprehensive virtual machine manager that leverages native hypervisors and system emulation to provide isolated environments for container development, cross-architecture testing, and secure sandboxing. The project distinguishes itself through its template-driven provisioning system, which allows users to define and automate environment configurations via local files or remote URL schemes. It integrates deeply with host systems by providing automated file

WSABuilds is a management framework designed to deploy and customize virtualized mobile runtime environments on desktop operating systems. It provides a comprehensive suite of tools for building, installing, and maintaining these environments, enabling the native execution of mobile applications alongside standard desktop software. The project distinguishes itself through its focus on deep system integration and lifecycle management. It allows users to generate tailored virtual environment packages by injecting administrative tools, service components, and specific configurations prior to dep

EasyTier is a decentralized peer-to-peer virtual private network and mesh networking tool. It functions as a layer 3 network overlay that establishes secure tunnels between devices without requiring a centralized server or coordinator. It also serves as a WireGuard-compatible VPN, capable of acting as a server for standard WireGuard clients. The project distinguishes itself through multipath latency-based routing and the use of KCP or QUIC proxies to mitigate packet loss and stabilize connections in high-loss environments. It provides a virtual networking manager featuring a web management co

Flare-VM est un environnement d'analyse de logiciels malveillants Windows composé de scripts d'installation qui automatisent le provisionnement d'une machine virtuelle. Il fournit une suite complète d'outils de rétro-ingénierie, incluant des décompilateurs et des débogueurs, ainsi que les configurations système et variables d'environnement nécessaires à la recherche en sécurité. Le projet fonctionne comme un orchestrateur d'images de machine virtuelle, permettant la création, la gestion et l'exportation automatisées d'appliances d'analyse spécialisées. Il propose une sélection d'outils pilotée par la configuration et la possibilité d'étendre la logique d'installation via des modifications de registre personnalisées et des définitions de mise en page système. Le système inclut des capacités de configuration réseau isolée pour empêcher toute communication externe via le mode hôte uniquement. Il gère également le cycle de vie complet des états d'analyse via une gestion d'état basée sur des snapshots, incluant la possibilité de nettoyer ou d'exporter des snapshots en tant que fichiers d'appliance vérifiés.

dockerlabs is a collection of educational labs and technical tutorials designed to teach the fundamentals of containerization and microservice architecture. It provides instructional material and hands-on exercises covering image optimization, security training, infrastructure setup, and cluster orchestration. The project features specific courses and guides focused on reducing image size through multi-stage builds, securing workloads via vulnerability scanning and encrypted networks, and deploying multi-node clusters with high availability using Swarm orchestration. The materials cover a br

Firejail is a Linux application sandbox and kernel security wrapper that isolates untrusted applications from the host system. It uses kernel namespaces and seccomp filters to restrict filesystem access, drop kernel capabilities, and limit the system attack surface. The project is distinguished by its use of predefined security profiles to automatically apply filesystem restrictions and syscall limits based on the executable being launched. It provides specialized isolation for portable packages such as AppImages and implements X11 display isolation via proxy servers to prevent keyboard loggi

n2n is a peer-to-peer VPN that creates an encrypted mesh network by establishing layer 2 overlay networks. It uses UDP tunneling to connect remote computers into a shared virtual local area network, allowing devices to communicate as if they were on the same physical Ethernet switch. The system utilizes a centralized signaling registry and federated coordination nodes to facilitate peer discovery and node registration. It implements NAT traversal through UDP hole punching and UPnP port mapping, while using supernode relay routing to ensure connectivity when symmetric NATs prevent direct peer-

Weave is a multi-host container networking tool that connects containers running on different physical machines into a single virtual network. It creates a software-defined overlay network spanning multiple hosts, enabling containers to communicate directly with each other as if they were on the same local switch. The system provides automatic service discovery, resolving container names to network addresses across hosts without manual configuration. Traffic between containers on different hosts is secured through encrypted tunnels, preventing eavesdropping and tampering. Weave also includes

Microsandbox is a runtime for creating and managing lightweight, hardware-isolated virtual machines — called sandboxes — that boot directly from standard OCI container images. Each sandbox runs as its own host process with a separate kernel, filesystem, and network stack, providing process-per-sandbox isolation. The project includes a command-line tool and multi-language SDKs (Rust, TypeScript, Python, Go) for programmatic lifecycle control, and it communicates with sandbox agents over Unix sockets using a CBOR-encoded protocol. What distinguishes Microsandbox is its combination of host-manag

Mininet is a network emulator that creates virtual networks of hosts, switches, and links on a single Linux machine for Software-Defined Networking (SDN) prototyping and testing. It emulates network nodes as lightweight processes in isolated network namespaces, connecting them via virtual Ethernet pairs, and supports OpenFlow protocol for programmable control of virtual switches and traffic flows. The project enables users to design custom network topologies using a Python API, simulate link conditions such as bandwidth, delay, and packet loss, and run real Linux applications and kernel code

Bubblewrap is a Linux sandbox runner that creates lightweight, isolated execution environments for running untrusted applications. It combines Linux user, mount, network, PID, and UTS namespaces with seccomp-BPF system call filtering to restrict filesystem, network, process, and inter-process communication access. The project provides comprehensive process isolation by giving each sandbox its own private tmpfs root with selective bind-mounts, a separate network stack containing only a loopback interface, an independent process ID space, and remapped user and group identifiers. It applies secc

CRI-O is an open-source container runtime that implements the Kubernetes Container Runtime Interface (CRI) to manage container images, pods, and containers on cluster nodes using OCI-compatible runtimes. It serves as a node-level container manager that handles image pulling, container lifecycle, and resource monitoring for Kubernetes clusters, running containers according to the Open Container Initiative specifications. The runtime distinguishes itself through live configuration reloading that applies changes to runtime definitions, registry mirrors, and TLS certificates without restarting th

LXD is a unified platform for managing both system containers and virtual machines through a single REST API and command-line interface. It provides a programmatic HTTP interface for controlling the full lifecycle of instances, enabling automation and integration with external tools. The system runs unprivileged containers with per-instance UID/GID mappings, seccomp filters, and AppArmor profiles for kernel-level isolation, while supporting multiple storage backends including directory, Btrfs, LVM, ZFS, Ceph, LINSTOR, and TrueNAS through a unified driver interface. The platform distinguishes

Incus is a unified orchestration platform for managing system containers, OCI application containers, and virtual machines through a single control plane. It brings together cluster infrastructure management, secure multi-tenancy, software-defined networking, and pluggable storage backend orchestration into one cohesive system exposed via a full REST API and command-line interface. What distinguishes Incus is its ability to run multiple instance types side by side—full Linux system containers, OCI application containers, and QEMU virtual machines—all managed with consistent tooling. Networkin

Testcontainers for .NET est une bibliothèque de test Docker et un framework de test d'intégration conçu pour gérer le cycle de vie de conteneurs éphémères. Il fournit des abstractions de haut niveau en tant que wrapper de l'API Docker pour provisionner une infrastructure éphémère, remplaçant les mocks par de vraies instances de base de données, de messagerie et de moteur de recherche pour garantir des environnements de test isolés et reproductibles. Le projet se distingue par un modèle de configuration de conteneur par builder et un mécanisme de liaison de port dynamique qui évite les collisions lors de l'exécution de tests concurrents. Il permet une communication service-à-service fiable via l'orchestration de réseau virtuel et l'aliasing réseau, et assure la disponibilité des services via des vérifications de disponibilité basées sur le polling pour les endpoints HTTP et les ports TCP. La bibliothèque fournit des modules spécialisés pour les bases de données relationnelles, NoSQL et vectorielles, ainsi que des courtiers de messagerie et des émulateurs de services cloud. Sa surface de capacité s'étend à la configuration d'images de conteneur, à la collecte de logs et à la simulation de conditions réseau pour vérifier la résilience du système. Elle prend en charge la connectivité aux runtimes Docker locaux et distants via des variables d'environnement et des fichiers de configuration standardisés.

Pipework est une boîte à outils de mise en réseau définie par logiciel et un utilitaire de gestion conçu pour automatiser les configurations réseau pour les conteneurs Linux. Il fournit des outils pour gérer les adresses IP, créer des topologies réseau virtuelles et intégrer des conteneurs dans diverses architectures réseau. Le projet se distingue par un support spécialisé pour la configuration des périphériques InfiniBand IPoIB, incluant la gestion des clés de partition. Il propose également une intégration avec Open vSwitch pour l'automatisation des ponts et l'isolation VLAN, ainsi que la capacité de lier des conteneurs directement au matériel hôte physique via des sous-interfaces macvlan. Ses capacités plus larges couvrent une gestion réseau complète, incluant l'assignation IP statique et DHCP, la manipulation des règles de routage et la configuration de la passerelle par défaut. Il inclut également des utilitaires pour surveiller la disponibilité des interfaces et simuler des conditions réseau telles que la latence et la perte de paquets au sein des espaces de noms des conteneurs.

The project provides an open container runtime specification and standardized schema for defining container configurations, namespaces, resource limits, security policies, and filesystem mounts across platforms. It outlines the formal configuration formats, lifecycle operations, and execution environments necessary for portable, isolated container workloads. The specification covers container lifecycle management protocols and structured rules governing container creation, execution startup, process signaling, state tracking, and resource teardown. It standardizes local bundle packaging and