SaaSHub helps you find the best software and product alternatives Learn more →
Top 12 C++ Ebpf Projects
-
-
InfluxDB
InfluxDB – Built for High-Performance Time Series Workloads. InfluxDB 3 OSS is now GA. Transform, enrich, and act on time series data directly in the database. Automate critical tasks and eliminate the need to move data externally. Download now.
-
Falco Documentation: https://falco.org GitHub Projects: https://github.com/falcosecurity/falco Falco Rules: https://falco.org/docs/concepts/rules/ Falco Installation on Kubernetes: https://falco.org/docs/setup/kubernetes/ Falcosidekick: https://github.com/falcosecurity/falcosidekick Falcosidekick UI: https://github.com/falcosecurity/falcosidekick-ui Demo Recording & Code: https://github.com/vinod827/cloudkit-lab/tree/main/iac/k8s/falco
-
Project mention: CI/CD Observability with OpenTelemetry Step by Step Guide | news.ycombinator.com | 2025-06-15
A child comment mentioned k8s but I also have been chomping at the bit to try out the eBPF hooks in https://github.com/pixie-io/pixie (or even https://github.com/coroot/coroot or https://github.com/parca-dev/parca ) all of which are Apache 2 licensed
The demo for https://github.com/draios/sysdig was also just amazing, but I don't have any idea what the storage requirements would be for leaving it running
-
Project mention: Strobelight: A profiling service built on open source technology | news.ycombinator.com | 2025-03-07
In Yandex, we have a similar profiler that supports native languages seamlessly with addition to Python/Java: https://github.com/yandex/perforator. Pretty exciting to see new profilers from big players!
-
PcapPlusPlus
PcapPlusPlus is a multiplatform C++ library for capturing, parsing and crafting of network packets. It is designed to be efficient, powerful and easy to use. It provides C++ wrappers for the most popular packet processing engines such as libpcap, Npcap, WinPcap, DPDK, AF_XDP and PF_RING.
Project mention: PcapPlusPlus v24.09 is out – C++ library for analyzing network packets | news.ycombinator.com | 2024-09-25 -
Uprobes are a type of probe that can be used to trace functions in user-space applications, such as Nginx. They work by attaching to specific user-space function entry and exit points, allowing you to capture precise timing information. However, it’s important to note that using uprobes in the kernel mode eBPF runtime may cause some performance overhead. To mitigate this, you can consider using a user-mode eBPF runtime like bpftime, which is based on LLVM JIT/AOT. This runtime can run eBPF programs in user space, offering compatibility with kernel mode eBPF while potentially reducing overhead.
-
-
SaaSHub
SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives
-
-
-
-
-
gyeeta
Gyeeta - An Open Source eBPF based Observability Product for your Infrastructure, Services and Processes. This repository is for the Agent and Server C++ code.
NOTE:
The open source projects on this list are ordered by number of github stars.
The number of mentions indicates repo mentiontions in the last 12 Months or
since we started tracking (Dec 2020).
C++ Ebpf discussion
C++ Ebpf related posts
-
Strobelight: A profiling service built on open source technology
-
Perforator – cluster-wide continuous profiling tool for large data centers
-
Perforator – Open-source tool for cluster-wide continuous profiling
-
Tell HN: Wireshark has a new sibling: Stratoshark
-
Building High-Performance Userspace eBPF VMs with LLVM
-
Bpftime: Userspace eBPF runtime for fast Uprobe and Syscall hook and Plugins
-
Grafana Beyla: OSS eBPF auto-instrumentation for application observability
-
A note from our sponsor - SaaSHub
www.saashub.com | 18 Jun 2025
Index
What are some of the best open-source Ebpf projects in C++? This list will help you:
| # | Project | Stars |
|---|---|---|
| 1 | bpftrace | 9,273 |
| 2 | falco | 8,001 |
| 3 | pixie | 6,050 |
| 4 | perforator | 3,216 |
| 5 | PcapPlusPlus | 2,894 |
| 6 | bpftime | 1,026 |
| 7 | polycube | 515 |
| 8 | prevail | 419 |
| 9 | opentelemetry-network | 351 |
| 10 | OpenCSD | 60 |
| 11 | ebpf-assembler | 20 |
| 12 | gyeeta | 12 |
Sponsored
InfluxDB – Built for High-Performance Time Series Workloads
InfluxDB 3 OSS is now GA. Transform, enrich, and act on time series data directly in the database. Automate critical tasks and eliminate the need to move data externally. Download now.
www.influxdata.com