Awesome GitHub RepositoriesKernel Networking

This project is a command-line HTTP load testing tool designed to measure the throughput and latency of web servers under high-concurrency conditions. It functions as a multi-threaded benchmarking engine that simulates thousands of simultaneous connections to evaluate server performance, identify bottlenecks, and determine capacity limits. The tool distinguishes itself through a shared-nothing thread architecture that isolates state within individual threads to eliminate lock contention during high-frequency request generation. It utilizes a non-blocking event loop and low-latency socket poll

This application is a desktop network traffic analyzer that provides real-time monitoring and forensic inspection of data packets. By interfacing directly with low-level system drivers, it captures raw network traffic from physical or virtual adapters to identify communication patterns, track bandwidth usage, and diagnose connectivity issues. The system distinguishes itself through an immediate-mode graphical interface that rebuilds the display state every frame, ensuring high responsiveness during live data updates. It maintains performance by using asynchronous message passing to decouple t

Tailscale is a zero-trust networking overlay that connects distributed devices and services into a private, encrypted mesh network. By utilizing a high-performance, user-space implementation of the WireGuard protocol, it establishes secure peer-to-peer tunnels across diverse network topologies without requiring complex firewall configuration. The platform operates on a centralized control plane that manages global network state, authentication, and policy distribution, ensuring that connectivity is governed by identity rather than traditional IP-based rules. What distinguishes Tailscale is it

GoodbyeDPI is a censorship circumvention utility designed to bypass deep packet inspection and restrictive network filtering. It functions as a background engine that intercepts and modifies network traffic at the kernel level, allowing users to maintain connectivity in environments where specific protocols or web content are blocked. The tool employs active manipulation techniques to confuse inspection hardware, including TCP stream fragmentation, HTTP header obfuscation, and the injection of out-of-order packets. By altering packet structures and dropping specific redirection patterns, it m

This project is an automated command-line tool designed to install and configure a secure network gateway on a host machine. By utilizing established open-source security protocols, it establishes a private tunnel endpoint that encrypts internet traffic and facilitates remote access connectivity for authorized users. The tool functions as an infrastructure lifecycle manager, streamlining the deployment of private network services through shell-script-based orchestration. It distinguishes itself by integrating directly with the Linux kernel to manage packet filtering rules and providing creden

Masscan is a command-line network scanner designed for large-scale discovery and infrastructure reconnaissance. It identifies open ports across specific network segments or the entire internet by probing vast address ranges with high efficiency. The tool functions as an asynchronous packet engine, bypassing standard operating system kernel networking stacks to transmit raw packets directly from application memory. The project distinguishes itself through a specialized architecture that manages millions of concurrent connections by separating packet transmission and reception into independent

The Byte Book is an open-source book that covers cloud-native infrastructure, focusing on kernel networking, Kubernetes, service meshes, and containers. It serves as a technical reference for designing stable and cost-effective infrastructure, combining DevOps workflows and site reliability engineering principles. The book provides a deep dive into Kubernetes networking, including CNI, service mesh integration, and container network interfaces for production clusters. It also covers container runtime operations, service mesh architecture for observability and traffic management, and Linux ker

This project is a collection of automated deployment tools centered around a Shadowsocks server auto-installer for Linux distributions. It provides a specialized SOCKS5 proxy manager and a web-based proxy control panel to administer secure network tunneling. The toolkit distinguishes itself by integrating a Linux kernel optimizer that enables congestion control algorithms to increase network throughput. It also includes a dedicated deployer for HTTP/3 web servers and a management interface capable of generating connection QR codes and monitoring real-time performance. The software covers a b

This is a structured reference that maps Linux kernel network sysctl parameters to their specific roles in the packet processing pipeline, from the network interface card through to the application layer. It covers the full path of packet traversal, including interrupt mitigation, buffer management, queuing disciplines, and TCP auto-tuning mechanisms. The reference details how to configure kernel parameters for connection handling, including TCP listen backlog, SYN queue management, FIN timeout, and syncookies. It also addresses queue management and bufferbloat control through egress queuing

FRRouting est une suite de routage internet comprenant une collection de démons qui implémentent les protocoles de routage IPv4 et IPv6 standard. Elle fournit un moteur de protocole pour BGP, un virtualiseur de réseau EVPN et un gestionnaire d'étiquettes MPLS, aux côtés d'une interface de routage gRPC pour la configuration programmatique et la récupération de données en utilisant des modèles YANG. La suite se distingue par son extensibilité via un framework de script Lua qui exécute des scripts personnalisés au niveau de hooks internes pour modifier le comportement de routage. Elle dispose également d'un modèle de configuration transactionnel qui utilise des bases de données candidates et actives séparées pour assurer des commits atomiques et des rollbacks des paramètres système. Le projet couvre un large éventail de protocoles de passerelle intérieurs et extérieurs, incluant OSPF, IS-IS, EIGRP et RIP. Il prend en charge l'ingénierie de trafic avancée via Segment Routing et SRv6, la virtualisation réseau via l'isolation VRF et les L3VPN, ainsi qu'une surveillance complète via SNMP et le protocole de surveillance BGP (BMP). Le logiciel peut être déployé via la compilation à partir de la source, des chaînes d'outils multi-architectures ou des images de conteneur Docker pré-construites.

xmr-stak is blockchain mining software designed to secure decentralized ledgers by calculating hashes to earn rewards. It functions as a cryptocurrency miner supporting the RandomX algorithm for Monero and various versions of the CryptoNight algorithm across CPUs and GPUs. The software includes a web-based monitoring dashboard that allows for the tracking of real-time performance metrics and mining status through a browser interface. It also features a multi-pool failover mechanism to maintain continuous operation by managing connections between primary and backup mining pools. Operational c