awesome-repositories.com
Blog
awesome-repositories.com

Découvrez les meilleurs dépôts open-source grâce à notre recherche par IA.

ExplorerRecherches sélectionnéesAlternatives open sourceLogiciels auto-hébergésBlogPlan du site
ProjetÀ proposNotre méthodologiePresseServeur MCP
Mentions légalesConfidentialitéConditions d'utilisation
© 2026 Bringes Technology SRL·VAT RO45896025·hello@awesome-repositories.com
·
kubeshark avatar

kubeshark/kubeshark

0
View on GitHub↗
11,954 stars·539 forks·Go·Apache-2.0·9 vueskubeshark.com↗

Kubeshark

Kubeshark is a network observability platform designed for Kubernetes environments, functioning as an eBPF-powered engine for cluster-wide traffic analysis. It captures, indexes, and visualizes network activity and API calls directly from the kernel, providing deep visibility into service-to-service communication without requiring sidecar proxies or manual code instrumentation.

The platform distinguishes itself through its ability to perform protocol-aware traffic dissection and user-space cryptographic hooking, which allows for the inspection of encrypted traffic and the reconstruction of application-layer protocols like HTTP, gRPC, and Kafka. It supports advanced diagnostic capabilities, including AI-driven troubleshooting, forensic analysis of network snapshots, and the correlation of infrastructure events with application-level traffic patterns.

Beyond core monitoring, the system provides a comprehensive suite of tools for managing traffic data, including granular role-based access control, sensitive data redaction, and flexible storage options ranging from ephemeral local buffers to cloud-based object storage. It is built to operate in diverse environments, supporting air-gapped deployments and integrating with standard Kubernetes ingress resources for secure dashboard access.

The project is managed via a command-line interface that facilitates deployment control, custom script execution, and the sharing of specific traffic analysis views through encoded search queries.

Features

  • Network Traffic Analyzers - Captures and analyzes cluster-wide network traffic to visualize service dependencies and communication patterns.
  • eBPF Interceptors - Uses kernel-level probes to capture network packets and system events directly from the operating system without requiring sidecar proxies.
  • Kubernetes - Captures, indexes, and visualizes cluster-wide network traffic and API calls using eBPF for deep service-level insights.
  • Debugging and Inspection Tools - Dissects and inspects HTTP, gRPC, and Kafka request payloads in real-time to troubleshoot service interactions and identify API-level errors.

Recherche par IA

Explorez plus de dépôts awesome

Décrivez vos besoins en langage naturel — l'IA classe des milliers de projets open source sélectionnés par pertinence.

Start searching with AI
  • Kubernetes API Inspectors - Provides a dashboard for real-time analysis of request and response payloads across services without code instrumentation.
  • Service Mesh Alternatives - Monitors and decrypts internal service communication without requiring manual certificate management or sidecar proxies.
  • Hooking Utilities - Intercepts encrypted traffic by dynamically hooking into process-level memory to access plaintext data before it is sent over the network.
  • Traffic Inspection Tools - Intercepts and decrypts encrypted network traffic to provide real-time visibility into application-layer protocols.
  • Automated Root Cause Analysis - Integrates network telemetry with AI assistants to perform automated root cause analysis and query traffic patterns using natural language.
  • Application Layer Protocol Dissectors - Reconstructs and decodes protocols like HTTP, gRPC, and Kafka to display full request and response payloads.
  • Distributed Observability Platforms - Deploys lightweight monitoring components across cluster nodes to collect and process network telemetry in parallel for high-performance observability.
  • Observability and Monitoring - API traffic viewer for Kubernetes containers.
  • Air-Gapped Deployments - Operates within isolated networks by disabling external dependencies and utilizing local container image registries for all required components.
  • Resource Controllers - Leverages standard cluster APIs and custom resource definitions to manage monitoring deployments, access controls, and network traffic scoping.
  • API Payload Inspectors - Dissects captured traffic to reveal chronological sequences of API calls and full request/response payloads.
  • Role-Based Access Control - Manages granular user permissions for accessing live traffic streams, snapshots, and configuration settings.
  • Cloud-Native - Provides tools for capturing and querying network snapshots to perform security audits in containerized environments.
  • Kubernetes Monitors - Correlates network traffic with cluster metadata to identify communication paths between pods, services, and nodes.
  • Cloud Storage Integrations - Uploads and retrieves captured network traffic data to cloud object storage providers for long-term retention, backup, and cross-cluster sharing.
  • Search and Indexing - Parses and indexes raw network packets into structured protocol data to enable fast, cluster-wide searching.
  • Snapshot Buffers - Buffers captured network data in local memory or temporary disk volumes with automated lifecycle management to minimize long-term resource footprint.
  • Infrastructure Event Correlation Tools - Links network traffic data with infrastructure API server events and operating system activity for a unified view.
  • Ingress Controllers - Configures stable and secure network routes to the observability dashboard using standard cluster ingress resources for persistent access.
  • Network Flow Analyzers - Captures connection data to monitor handshake latency, throughput, and connection lifecycle events across the cluster.
  • Automatic Redaction - Automatically detects and removes sensitive information from traffic data at the source.
  • Namespace Access Controls - Filters traffic visibility at the server level based on assigned Kubernetes namespaces.
  • Network Traffic Analysis Assistants - Integrates network data into AI assistants to perform automated root cause analysis and debug connectivity issues.
  • Root Cause Analysis - Provides deep packet inspection and forensic data to accelerate root cause analysis during service anomalies.
  • Search Indexing - Processes captured traffic snapshots into searchable databases for efficient historical network activity retrieval.
  • Search and Indexing - Decouples raw packet capture from data processing to enable intensive protocol analysis and search indexing on non-production compute resources.
  • Deployment Management - Installs network observability tools within dedicated namespaces on managed container platforms to ensure isolated and secure traffic monitoring.
  • Storage Management - Stores captured traffic in-memory or on local disk with configurable time-to-live settings to ensure data remains within the cluster environment.
  • TLS Fingerprinting - Computes JA3 and JA3S hashes to identify applications and detect anomalous traffic patterns.
  • SSL/TLS Analyzers - Analyzes handshake negotiation data to identify insecure TLS versions and weak cipher suites.
  • Identity Provider Integrations - Validates user identities against corporate OIDC and SAML providers for secure dashboard access.
  • Forensic Tools - Provides forensic investigation capabilities for network traffic snapshots in containerized environments.
  • Automated Incident Response Workflows - Executes reusable instruction sets that guide AI agents through standardized diagnostic procedures for incident response.
  • Monitoring and Observability - Provides deep visibility into process behavior and system calls using eBPF-powered kernel-level tracing.
  • Observability Tools - Enables starting or stopping network monitoring deployments within a cluster through proxy connections to control data collection and resource usage.
  • Resource Optimization - Toggles traffic capture and scopes monitoring to specific workloads to minimize resource usage.
  • Code-Telemetry Correlation Tools - Integrates network observability data with local source code to identify configuration errors or logic flaws.
  • Traffic Filtering - Queries indexed network traffic using expression-based syntax to isolate specific requests and responses for analysis.

    • Historique des stars

    Graphique de l'historique des stars pour kubeshark/kubesharkGraphique de l'historique des stars pour kubeshark/kubeshark

    Alternatives open source à Kubeshark

    Projets open source similaires, classés selon le nombre de fonctionnalités partagées avec Kubeshark.
    • up9inc/mizuAvatar de up9inc

      up9inc/mizu

      11,958Voir sur GitHub↗

      Mizu is a suite of tools for capturing, indexing, and visualizing cloud-native network traffic and decrypted payloads for cluster-wide diagnostics. It provides Kubernetes network observability by using eBPF to index and visualize layer 4 and layer 7 traffic with full cluster context, allowing for the mapping of workload dependencies and the diagnosis of network failures. The project distinguishes itself by using kernel-level hooks to decrypt TLS traffic in plain text without requiring private keys. It further integrates a standardized context protocol to expose indexed network telemetry to AI

      Go
      Voir sur GitHub↗11,958
    • openobserve/openobserveAvatar de openobserve

      openobserve/openobserve

      17,937Voir sur GitHub↗

      OpenObserve is a unified observability data platform designed to ingest, store, and analyze logs, metrics, and traces. It functions as a cloud-native monitoring tool that centralizes telemetry from diverse sources, including standard collectors and cloud service providers, into a single, scalable system. By utilizing a columnar storage engine backed by object storage, the platform enables efficient long-term data retention and high-performance analytical querying. The platform distinguishes itself through deep integration with artificial intelligence, allowing users to query data using natura

      TypeScriptanalyticsapmdatadog
      Voir sur GitHub↗17,937
    • linkerd/linkerd2Avatar de linkerd

      linkerd/linkerd2

      11,424Voir sur GitHub↗

      This project is a service mesh platform designed to manage, secure, and observe service-to-service communication within Kubernetes clusters. It functions as a control plane that orchestrates transparent sidecar proxies, which intercept and manage network traffic to provide reliable connectivity for microservices. By automating the injection of these proxies, the platform ensures that infrastructure-level policies are applied consistently across all workloads without requiring manual configuration changes. The platform distinguishes itself through its focus on zero-trust security and cross-clu

      Gocloud-nativegolangkubernetes
      Voir sur GitHub↗11,424
    • mastra-ai/mastraAvatar de mastra-ai

      mastra-ai/mastra

      21,221Voir sur GitHub↗

      Mastra is an orchestration framework designed for building, deploying, and managing autonomous AI agents and multi-agent systems. It provides a comprehensive suite of primitives for creating resilient AI applications, including durable workflow orchestration, event-driven agent loops, and semantic memory management. By integrating these core components, the platform enables developers to build complex, multi-step processes that can reason about goals and execute tasks without manual intervention. The framework distinguishes itself through its focus on observability and secure, isolated execut

      TypeScriptagentsaichatbots
      Voir sur GitHub↗21,221
    Voir les 30 alternatives à Kubeshark→

    Questions fréquentes

    Que fait kubeshark/kubeshark ?

    Kubeshark is a network observability platform designed for Kubernetes environments, functioning as an eBPF-powered engine for cluster-wide traffic analysis. It captures, indexes, and visualizes network activity and API calls directly from the kernel, providing deep visibility into service-to-service communication without requiring sidecar proxies or manual code instrumentation.

    Quelles sont les fonctionnalités principales de kubeshark/kubeshark ?

    Les fonctionnalités principales de kubeshark/kubeshark sont : Network Traffic Analyzers, eBPF Interceptors, Kubernetes, Debugging and Inspection Tools, Kubernetes API Inspectors, Service Mesh Alternatives, Hooking Utilities, Traffic Inspection Tools.

    Quelles sont les alternatives open-source à kubeshark/kubeshark ?

    Les alternatives open-source à kubeshark/kubeshark incluent : up9inc/mizu — Mizu is a suite of tools for capturing, indexing, and visualizing cloud-native network traffic and decrypted payloads… openobserve/openobserve — OpenObserve is a unified observability data platform designed to ingest, store, and analyze logs, metrics, and traces.… linkerd/linkerd2 — This project is a service mesh platform designed to manage, secure, and observe service-to-service communication… mastra-ai/mastra — Mastra is an orchestration framework designed for building, deploying, and managing autonomous AI agents and… redis/go-redis — This project is a feature-rich Go client library designed for interacting with Redis. It serves as a comprehensive… coroot/coroot — Coroot is an observability platform and Kubernetes performance monitor that utilizes eBPF to automatically collect…