Awesome GitHub RepositoriesKernel-Space Packet Processing

itlwm is a macOS network driver and kernel extension that enables Intel wireless network adapters to function on macOS systems. It serves as a hardware-specific driver providing connectivity and stability for Intel Wi-Fi chips on non-native platforms. The project acts as a bridge between Intel hardware and native macOS wireless frameworks, allowing the system to recognize the adapter as a native device and utilize Apple Airport features and system settings. The driver manages hardware integration and network connectivity by interfacing with the operating system to support macOS hardware comp

This is a structured reference that maps Linux kernel network sysctl parameters to their specific roles in the packet processing pipeline, from the network interface card through to the application layer. It covers the full path of packet traversal, including interrupt mitigation, buffer management, queuing disciplines, and TCP auto-tuning mechanisms. The reference details how to configure kernel parameters for connection handling, including TCP listen backlog, SYN queue management, FIN timeout, and syncookies. It also addresses queue management and bufferbloat control through egress queuing

Katran est un équilibreur de charge de couche 4 basé sur eBPF, conçu pour le transfert de paquets réseau haute performance directement au sein du noyau Linux. Il utilise un processeur de paquets réseau XDP pour contourner la pile réseau standard du noyau, minimisant la latence et maximisant le débit pour le trafic entrant. Le système implémente un hachage cohérent pondéré pour distribuer les charges réseau et maintenir la persistance des sessions sur les serveurs backend. Il optimise davantage le chemin de retour via une passerelle de retour direct au serveur (DSR), qui permet aux backends de répondre directement aux clients et supprime l'équilibreur de charge du flux de trafic sortant. Ses capacités incluent le suivi de connexion sans verrouillage pour la stabilité des sessions et une liaison de cœur compatible NUMA pour éliminer la latence inter-nœuds. Le projet prend également en charge la pondération du trafic backend, le drainage des serveurs et le chaînage de programmes XDP pour exécuter la logique de pare-feu avant l'équilibrage de charge. L'implémentation fournit des outils d'observabilité pour la capture du trafic réseau, le routage des sondes de santé et le filtrage du trafic encapsulé.

This project provides an open-source VPN client that creates an unrestricted tunnel to bypass internet censorship without fees, registration, speed caps, or data limits. It offers free, unlimited VPN tunneling with no sign‑up required, enabling access to blocked websites and unrestricted browsing. The application uses the WireGuard protocol for encrypted traffic routing, backed by kernel‑level packet forwarding to minimize overhead. It includes automatic server discovery that selects the most responsive server based on real‑time latency, a connection keepalive mechanism to detect and restore

Aya is a Rust-native framework for writing, compiling, and loading eBPF programs into the Linux kernel. It provides a complete development environment that eliminates the need for a C toolchain or libbpf, allowing developers to work entirely within the Rust ecosystem. The framework manages the full lifecycle of eBPF programs, including async runtime integration, CO-RE BTF resolution for kernel version portability, ELF-based program loading, and safe kernel memory access. The framework distinguishes itself through its pure Rust compilation pipeline, which compiles Rust source code directly int