Awesome GitHub RepositoriesHigh Availability Infrastructure

K3s is a lightweight Kubernetes distribution designed for resource-constrained environments, edge computing, and simplified deployment across diverse hardware architectures. It functions as a container orchestration engine that automates the deployment, scaling, and management of containerized applications. By bundling all necessary control plane components and dependencies into a single binary, it minimizes the system footprint and streamlines the installation process. The project distinguishes itself through a flexible architecture that supports both high-availability clustering and minimal

Nacos is a service discovery and configuration platform designed for cloud native environments. It serves as a management plane that orchestrates service registries, handles dynamic application settings through a remote configuration store, and functions as a load balancing control plane for distributed clusters. The platform differentiates itself by providing real-time configuration updates that push changes to clients without requiring service restarts. It also implements weighted routing and DNS-based traffic routing to manage load balancing policies across a fleet of healthy service insta

This project is a Docker educational resource and a collection of practical examples designed for learning containerization technologies. It serves as a guide for understanding container fundamentals, including the creation and management of custom images and the use of registries. The repository provides specialized references for container security hardening, such as managing kernel privileges and implementing supply chain security. It also includes tutorials for multi-container orchestration and a DevOps guide focused on CI/CD automation and image optimization. The material covers a broad

KubeSphere is a distributed operating system for cloud-native application management that provides a centralized control plane for Kubernetes clusters. It functions as a comprehensive DevOps portal, enabling teams to orchestrate containerized workloads, manage CI/CD pipelines, and enforce security policies across hybrid cloud, datacenter, and edge environments. The platform distinguishes itself through its multi-cluster federation capabilities and robust multi-tenancy model, which allow for logical resource isolation and granular access control across shared infrastructure. It integrates a mo

Nomad is a distributed workload orchestrator and infrastructure automation platform designed to manage the lifecycle of applications across large-scale, heterogeneous environments. It functions as a multi-cloud orchestration engine, providing a unified control plane to deploy, scale, and govern containers, virtual machines, and legacy applications. By utilizing declarative job specifications, the system ensures infrastructure convergence and maintains the desired state across distributed data centers and geographic regions. The platform distinguishes itself through a flexible, plugin-based ar

This project is a cloud-native identity and access management platform designed to centralize authentication, authorization, and identity lifecycle management. It functions as a standards-compliant OpenID Connect authorization server, providing secure session management and token issuance for web, mobile, and device-based applications. The platform is built to handle complex identity requirements through stateless token authentication and support for modern passwordless methods, including biometrics and hardware keys. What distinguishes this platform is its native support for multi-tenant env

The AWS Cloud Development Kit is an infrastructure-as-code framework that enables developers to define and provision cloud resources using familiar programming languages. By utilizing construct-based synthesis, it translates high-level, object-oriented code into declarative templates, allowing for the automated management of complex cloud environments through a centralized, code-driven control plane. The framework distinguishes itself through its ability to model infrastructure as a dependency-aware resource graph, ensuring that components are provisioned and updated in the correct order. It

Bisheng is an enterprise AI framework and LLM DevOps platform designed to manage the full lifecycle of large language models. It provides a unified system for dataset curation, supervised fine-tuning, model versioning, and performance evaluation. The platform features a visual workflow orchestrator for building retrieval-augmented generation pipelines and complex task sequences using flowcharts with conditional logic and human intervention points. It also includes an AI agent framework that uses a specialized guidance language to embed domain expertise and professional business logic into aut

Patroni is a high availability manager and cluster orchestrator for PostgreSQL. It functions as a failover controller that monitors database health and manages leader transitions to ensure continuous availability and consistency across multiple nodes. The system relies on a distributed configuration store client to synchronize cluster state and perform leader election. It supports integration with external consensus services such as Etcd, Consul, and ZooKeeper, and provides specific orchestration capabilities for deploying clusters within Kubernetes environments. The project covers the manag

This project is a PostgreSQL client library and SQL query builder for JavaScript and TypeScript. It provides a low-level database driver and connection manager to handle database sessions, along with a logical replication client for monitoring real-time changes. The library distinguishes itself with a high-performance bulk data streamer that utilizes the database copy command for importing and exporting large datasets. It also implements a logical replication protocol to facilitate real-time database synchronization through change subscriptions and channel-based notifications. The toolset co

Chainlink is a decentralized oracle network that connects smart contracts to off-chain data, computation, and real-world systems. It provides a secure and reliable infrastructure for blockchain applications to access external information, execute automated workflows, and interact with other blockchains. The network is secured by a staking-based model where node operators lock LINK tokens as collateral, which can be slashed for poor performance, incentivizing honest and accurate data delivery. The platform distinguishes itself through a comprehensive set of capabilities that extend beyond basi

Manifest is a language model provider unification system that standardizes access to multiple AI backends through a single interface. It functions as a centralized management layer for integrating various cloud-based and local model providers to simplify how applications request completions. The system provides intelligent model routing and high availability infrastructure by directing queries based on complexity and automatically triggering model fallbacks when a primary provider fails. It distinguishes itself through multi-tenant AI management, organizing agents into isolated groups with de

Hazelcast is a distributed data platform that combines an in-memory data grid with a stream processing engine to support real-time analytics and event-driven applications. It functions as a partitioned, distributed key-value store that replicates data across cluster nodes to provide low-latency access and high availability. The platform also serves as a distributed SQL query engine, allowing users to execute standard SQL statements against both in-memory datasets and external data sources. What distinguishes Hazelcast is its use of a distributed consensus subsystem to maintain strongly consis

CodeIgniter is a PHP web framework built on the Model-View-Controller pattern, designed for building full-stack web applications. It provides a lightweight toolkit with minimal configuration, organizing application logic into controllers, models, and views for clean separation of concerns. The framework includes a fluent query builder for constructing SQL statements programmatically, PSR-4 autoloading with namespace mapping, and a service-based dependency injection container for managing shared class instances. The framework distinguishes itself through its comprehensive set of built-in tools

AliSQL is a fork of MySQL by Alibaba that extends the relational database management system with enhancements for high performance, scalability, and enterprise-grade availability. It retains the core MySQL identity as a SQL-based database for storing, organizing, and retrieving structured data, while adding optimizations for large-scale transactional and analytical workloads. The project differentiates itself through a set of Alibaba-specific improvements, including a columnar engine for accelerating analytical queries directly on MySQL tables, and a distributed, shared-nothing NDB Cluster en

Kill Bill is a subscription billing platform and usage-based billing engine designed to manage recurring invoicing and automated payment collection. It functions as a multi-tenant billing infrastructure, providing isolated environments for different organizational entities through a dedicated API. The system is distinguished by a plugin-based extension framework that allows for the integration of third-party payment gateways and custom business logic. It includes a payment gateway orchestrator to handle transactions and refunds, as well as a revenue recognition system to allocate contract rev

Readyset is a transparent caching proxy for PostgreSQL and MySQL that sits between an application and its database, intercepting SQL queries and serving cached results from memory. It automatically caches query results on first execution and keeps those caches consistent by consuming the database’s replication stream in real time, enabling faster repeated reads without application code changes. The proxy also supports caching advanced SQL functions such as window functions, bucket functions, and locale-aware collation sorting, and exposes an interface that allows AI agents to inspect proxied q

Grace is a lifecycle controller and process manager for Go applications designed to coordinate server transitions and implement system-level socket activation. It functions as a tool for managing secure HTTP servers and their transport layer security configurations across multiple ports. The project enables zero-downtime deployments by handing over network sockets to successor processes, allowing existing requests to complete before an old process shuts down. It also provides socket activation management, which allows servers to start lazily only upon receiving connections through an external

Pomerium 是一个身份感知、零信任的反向代理，旨在保护内部应用程序和基础设施，而无需传统的 VPN。通过通过身份提供商和声明式策略引擎验证每个请求，它确保访问权限基于用户身份、设备上下文和请求属性，而不是网络位置。 该项目凭借其处理多种协议和复杂访问需求的能力脱颖而出。它提供对 Web 应用程序、TCP 和 UDP 服务以及 SSH 连接的安全、身份验证访问，用短暂的短期证书替换静态密钥。此外，它还作为模型上下文协议（Model Context Protocol）的网关，为 AI 代理和自动化服务实现安全发现、审计和策略强制执行的工具执行。 Pomerium 作为 Ingress 控制器与 Kubernetes 集成，将原生 Ingress 资源转换为身份感知的路由配置。其架构支持集中的控制平面同步，允许管理员在分布式代理集群中分发安全策略、TLS 证书和路由配置。该系统还提供细粒度的流量管理，包括负载均衡、头部操作和基于路径的过滤，以确保与后端服务的安全和高性能连接。 该项目专为灵活部署而设计，支持统一和解耦架构，以适应数据和控制平面组件的独立扩展。它通过授权决策的审计日志记录和性能指标导出提供全面的可观测性，促进跨不同环境的合规性和安全监控。

Pgcat 是一个 PostgreSQL 中间件解决方案，提供连接池、分片、负载均衡和故障转移管理。它作为一个代理，通过管理数据库会话并将查询分发到多个实例来优化资源使用和可扩展性。 该系统通过流量镜像脱颖而出，它将实时生产查询复制到测试数据库以进行验证。它还实现了分片代理，根据分片键将数据和查询分发到多个数据库实例。 该项目通过自动故障转移和服务器健康监控涵盖了高可用性。它包括用于分离读写操作的流量路由、用于加密通信的传输层安全 (TLS)，以及用于系统管理和性能指标导出的虚拟管理数据库。 该服务打包为 Docker 容器，以确保在不同环境中的一致部署。