2 个仓库
Awesome GitHub RepositoriesBPF Map Structures
Kernel-resident data structures used for sharing state between BPF programs and user space.
Distinct from Hash Maps: Specialized kernel maps (hashes, arrays, histograms) rather than general user-space hash map implementations.
Explore 2 awesome GitHub repositories matching operating systems & systems programming · BPF Map Structures. Refine with filters or upvote what's useful.
Awesome BPF Map Structures GitHub Repositories
用 AI 发现最棒的仓库。我们将通过 AI 为您搜索最匹配的仓库。
- iovisor/bcc
iovisor/bcc
22,459在 GitHub 上查看BCC is an eBPF development toolkit and tracing framework used for monitoring and analyzing the Linux kernel. It functions as a performance analysis tool and debugging utility to capture system events, measure kernel latency, and provide network observability. The project distinguishes itself by providing a build system that integrates with LLVM to compile C-like code into BPF bytecode at runtime. It utilizes BPF Type Format data for relocations to maintain cross-kernel compatibility and extracts kernel headers to ensure the generated programs match the specific kernel version. The toolkit co
Implements kernel-level data storage using BPF maps including hashes, arrays, and histograms.
C - cilium/tetragon
cilium/tetragon
4,753在 GitHub 上查看Tetragon 是一个基于 eBPF 的运行时安全和可观测性工具集，专为 Linux 和 Kubernetes 环境设计。它作为安全策略管理器、可观测性代理和执行引擎，通过 Hook 内核函数和跟踪点来检测权限提升、容器逃逸和未经授权的系统活动。 该项目的独特之处在于其执行实时内核内（in-kernel）强制执行的能力，允许在系统调用完成前同步终止恶意进程或修改函数返回值。它通过同步容器身份并将底层内核事件直接映射到 Pod 和命名空间，提供了深度的 Kubernetes 集成。 其更广泛的功能涵盖了全面的系统调用审计、网络连接跟踪和文件完整性监控。系统支持动态策略管理，并提供用于监控 BPF 性能和资源利用率的诊断工具。 部署支持通过 Helm Chart 在 Kubernetes 集群中进行，也支持通过独立容器和原生操作系统包进行部署。
Uses kernel-resident BPF maps to track process lifecycles and network sockets for event correlation.
C
