Awesome GitHub RepositoriesHigh-Availability Instance Redundancy

kube-prometheus is a monitoring stack deployment and orchestration framework. It uses an operator pattern to automate the installation and lifecycle management of Prometheus and Alertmanager via custom resource definitions. The project focuses on scaling data collection through hash-based target sharding and topology-aware distribution to reduce cross-zone traffic. It implements a sidecar-based configuration reloading mechanism and utilizes consistent hashing to distribute scrape targets across multiple instances. The system covers broad observability capabilities including metric data colle

Easegress is a cloud-native traffic orchestration platform that functions as a multi-protocol API gateway and service mesh proxy. It routes, transforms, and orchestrates HTTP and MQTT traffic through configurable filter chains, providing high availability, security controls, and resilience for backend services. The platform integrates with service discovery systems like Kubernetes, Consul, and Eureka to dynamically route traffic to discovered services with automatic failover and health monitoring. The system distinguishes itself through a pipeline-based filter chain architecture where request

Descheduler is a Kubernetes workload rebalancer and pod eviction manager designed to optimize resource distribution and maintain cluster stability. It identifies and removes pods that no longer satisfy scheduling constraints or health requirements, allowing the cluster to relocate them to more suitable nodes. The project provides specialized capabilities for balancing node resource utilization, enforcing topology spread constraints, and removing duplicate pods to improve distribution. It also functions as an autoscaler helper by compacting workloads onto fewer nodes to facilitate the downscal

Buildbot is a Python-based continuous integration framework and distributed build orchestrator. It functions as a build automation engine that coordinates the retrieval of source code, the execution of build steps, and the reporting of results through a central controller and a network of remote worker agents. The system is distinguished by a plugin-based extensibility architecture and a master-worker distribution model. It allows for dynamic build modification at runtime and supports a pluggable database backend for persisting system state and historical build data. The project covers a bro

yggdrasil-go is a self-organizing encrypted IPv6 overlay network. It implements a decentralized peer routing system that uses public-key-based addressing to link identity and location, allowing the network to automatically discover paths and manage connectivity without central authority. The system provides transport-agnostic peering and multi-circuit redundancy, maintaining several concurrent connections to a single peer to ensure high availability. It supports prefix-based route advertisement, which enables the routing of dedicated IPv6 subnets to non-participating devices through the encry

该项目是安全设备的核心管理框架，为防火墙管理、网络入侵防御和高可用性网络提供主要基础设施。它作为控制网络安全策略、过滤流量和管理安全设备仪表板的集中式系统。 该系统以其高可用性功能而著称，包括在冗余节点之间同步配置和连接状态表，以实现自动硬件故障转移。它还具有用于扩展后端逻辑和用户界面的模块化插件架构，以及用于防火墙规则和系统设置程序化管理的基于 JSON 的 API。 该平台涵盖了广泛的功能领域，包括 IPv4 和 IPv6 的网络配置、安全 VPN 隧道、强制门户 (captive portal) 管理以及全面的监控和可观测性工具。它进一步集成了具有多因素身份验证的身份管理，并提供了用于配置备份、版本跟踪和跨 x86-64 硬件部署的工具。

Goalert 是一个按需（on-call）事件管理平台，旨在自动化系统警报的端到端生命周期。它从外部源摄取遥测和监控数据，根据定义的计划将通知路由给相关人员，并管理升级策略以确保事件由正确的响应者处理。 该平台的特色在于采用状态机驱动的事件生命周期方法，以及一个模块化的通知引擎，可在短信、语音、电子邮件和团队消息平台之间分发警报。它通过服务实例角色分区支持高可用性和运营连续性，将 API 流量与后台处理分离，并提供用于原子数据库迁移和切换的工具，以最大限度地减少维护期间的停机时间。 该系统与外部身份提供商集成，以强制执行集中式访问控制和组织安全策略。它还包括用于系统健康监控的诊断端点，并生成类型安全的数据访问层，以确保数据库交互的一致性。