Awesome GitHub RepositoriesCloud Native Infrastructure

This project is a Docker educational resource and a collection of practical examples designed for learning containerization technologies. It serves as a guide for understanding container fundamentals, including the creation and management of custom images and the use of registries. The repository provides specialized references for container security hardening, such as managing kernel privileges and implementing supply chain security. It also includes tutorials for multi-container orchestration and a DevOps guide focused on CI/CD automation and image optimization. The material covers a broad

OpenFaaS is a serverless function platform that provides a container-native framework for deploying and managing event-driven code. It functions as an abstraction layer over container orchestrators, allowing developers to package code into scalable functions that run across Kubernetes clusters or edge computing environments. The platform distinguishes itself through a developer-centric runtime that utilizes standardized language templates and automated build pipelines to simplify the creation of container images. It features a central API gateway that manages request routing, authentication,

This project is a Kubernetes microservices reference architecture implemented as a functional cloud-native e-commerce demo. It serves as a distributed systems testbed designed to demonstrate cloud-native deployment patterns, orchestration, and the interaction of independent services. The system showcases a polyglot service implementation using high-performance communication via gRPC and REST. It integrates generative AI for image analysis and product recommendations, and implements a service mesh to manage traffic, security, and observability between services. The application covers e-commer

OpenObserve is a unified observability data platform designed to ingest, store, and analyze logs, metrics, and traces. It functions as a cloud-native monitoring tool that centralizes telemetry from diverse sources, including standard collectors and cloud service providers, into a single, scalable system. By utilizing a columnar storage engine backed by object storage, the platform enables efficient long-term data retention and high-performance analytical querying. The platform distinguishes itself through deep integration with artificial intelligence, allowing users to query data using natura

This project is an educational resource and comprehensive learning path for the Spring Boot framework and its ecosystem. It serves as a Java backend framework tutorial and cloud-native development course designed to teach the construction of server-side applications. The material functions as a microservice architecture guide, providing instructional content on implementing distributed services. It covers the coordination of independent services through service discovery, routing, and centralized configuration. The curriculum includes guidance on cloud-native integration, connecting third-pa

Thanos is a CNCF cloud native monitoring tool that provides a highly available and scalable extension to the Prometheus ecosystem. It functions as a global query engine, a long-term storage system, and a metric downsampler. The project enables a unified interface to aggregate and query metrics across multiple distributed clusters from a single view. It maintains historical data beyond local retention limits by persisting time-series metrics in object storage and eliminates data gaps by merging metrics from redundant server pairs. The system includes capabilities for reducing the resolution o

This project is a cloud-native identity and access management platform designed to centralize authentication, authorization, and identity lifecycle management. It functions as a standards-compliant OpenID Connect authorization server, providing secure session management and token issuance for web, mobile, and device-based applications. The platform is built to handle complex identity requirements through stateless token authentication and support for modern passwordless methods, including biometrics and hardware keys. What distinguishes this platform is its native support for multi-tenant env

This project is a comprehensive infrastructure guide and technical reference for designing and deploying cloud native and AI native environments using Kubernetes. It serves as a manual for managing container orchestration, pod lifecycles, and declarative state reconciliation to maintain scalable cluster workloads. The resource provides instructional material on building custom controllers and implementing operational logic via the operator pattern. It also functions as a framework for optimizing the delivery of large language models through specialized gateways and workload scheduling. The h

WasmEdge is an extensible WebAssembly runtime that executes WebAssembly bytecode in a secure sandbox for cloud, edge, and embedded applications. It functions as a multi-language compiler, compiling applications written in Rust, JavaScript, Go, and Python into WebAssembly bytecode for sandboxed execution, and as a server-side JavaScript runtime that runs JavaScript programs with ES6 modules, NPM packages, and Node.js-compatible APIs. The runtime also serves as an AI inference runtime, executing AI models from JavaScript using WASI-NN plug-ins for inference tasks on personal devices and edge har

eShop is a .NET microservices reference application that provides a comprehensive blueprint for a distributed retail system. It implements an e-commerce architecture using decoupled services to manage core operations such as product catalogs, shopping baskets, and order processing. The project demonstrates a cloud-native retail infrastructure that incorporates an asynchronous event bus system to synchronize state across distributed services. It includes a reference implementation for integrating generative AI features by connecting the store to large language models via cloud providers. The

Meshery is a service mesh management plane and cloud native infrastructure orchestrator. It provides a visual design-as-code environment for modeling microservices and infrastructure components through declarative blueprints, functioning as a centralized platform for designing, deploying, and managing service mesh infrastructure. The platform is distinguished by its ability to translate visual designs into active deployments and its use of gRPC-based adapters to integrate with diverse infrastructure providers. It features a multi-tenant architecture that manages shared workspaces and role-bas

ET is a C# game server framework and distributed actor model runtime designed for large-scale multiplayer environments. It provides a comprehensive toolkit for building distributed game backends, incorporating a multiplayer network transport layer and a specialized suite for game AI and pathfinding. The framework is distinguished by its use of a distributed actor model to scale processing across multiple threads and servers, utilizing isolated actors for state management and messaging. It features a unified codebase architecture that allows shared logic between the server and client, enabling

Awesome Fenix is an open-source reference project and comprehensive guide that traces the evolution of software architecture from monolithic systems through microservices, service meshes, and serverless patterns. At its core, it provides a working bookstore application implemented in multiple architectural styles, allowing developers to study the trade-offs and migration paths between each approach through runnable code examples. The project distinguishes itself by treating infrastructure as disposable and reproducible, using Docker and Kubernetes to hide distributed complexity while enabling

jetson-inference is a set of libraries and tools for executing optimized deep learning models on embedded GPU hardware. Its primary purpose is to enable real-time computer vision and AI inference at the edge with low latency and high throughput. The project distinguishes itself through high-performance streaming analytics and the ability to execute concurrent AI pipelines on auto-grade silicon. It provides specialized support for multi-sensor stream processing, utilizing zero-copy data transport to load camera frames directly into GPU memory. The codebase covers a broad surface of capabiliti

This project is a cloud data analysis sandbox and a collection of courseware designed for learning data analysis techniques on Google Cloud Platform. It serves as a training lab containing technical demonstrations and practical exercises for skill development and cloud certification. The repository provides guided labs and demonstrations focused on Google Cloud data analysis, encompassing technical training for the platform's specific data services. It enables the practice of cloud data engineering and the use of big data tooling to perform queries and data transformations. The environment s

The Byte Book is an open-source book that covers cloud-native infrastructure, focusing on kernel networking, Kubernetes, service meshes, and containers. It serves as a technical reference for designing stable and cost-effective infrastructure, combining DevOps workflows and site reliability engineering principles. The book provides a deep dive into Kubernetes networking, including CNI, service mesh integration, and container network interfaces for production clusters. It also covers container runtime operations, service mesh architecture for observability and traffic management, and Linux ker

This project is a production-ready starter kit and boilerplate for building multi-tenant software-as-a-service applications using .NET and React. It provides a multi-tenant application framework and a cloud-native infrastructure kit designed to support scalable cloud services. The project distinguishes itself through a modular monolith architecture that organizes business logic into isolated bounded contexts to prevent code entanglement. It implements comprehensive SaaS identity management, including role-based access control, account impersonation, and strict tenant data isolation across the

Rancher OS is a cloud-native, container-optimized Linux distribution designed to host and manage containerized workloads with a small host footprint. It functions as a Docker-based operating system that runs core system services and user applications as containers. The system implements an immutable infrastructure workflow by deploying the entire operating system as a set of read-only images. To prevent configuration drift and ensure a consistent boot state, the primary system partition is mounted as read-only, while persistent settings and user data are stored on a separate writable configur

This repository is a collection of hands-on AWS learning labs that pair visual architecture diagrams with real infrastructure deployment. Each lab is built around a complete architecture diagram, and the learner follows step-by-step instructions to implement that exact design using pre-authored AWS CloudFormation templates. The core approach is to teach cloud concepts by having the learner build the infrastructure they see in the diagram, reinforcing understanding through direct, practical construction. The labs are designed as complete, multi-service integration demos that combine compute, s

FATE is an open-source federated learning platform that enables multiple organizations to collaboratively train machine learning models without exposing raw data to any party. It provides a complete framework for private data collaboration, allowing participants to jointly compute on sensitive information while maintaining data privacy and security guarantees through secure multi-party computation protocols. The platform distinguishes itself through its comprehensive infrastructure management capabilities, supporting automated deployment of multi-party clusters using Ansible-driven provisioni