ALEYI17

InfraSight. InfraSight is a modular eBPF-based observability platform for Linux and Kubernetes environments. It provides deep visibility into system activity using custom eBPF programs, a centralized ClickHouse backend, and a Kubernetes-native controller.

ebpf-file-monitor. A high-performance file access monitoring tool using eBPF, written in Go. Captures real-time file open events with process details (PID, UID, filename, flags, and timestamps). Designed for system observability.

ebpf_server. Central gRPC server that receives eBPF events from agents, enriches them, and stores them efficiently in ClickHouse for querying and analysis.

ebpf_loader. Lightweight agent for running eBPF programs on Linux nodes. Captures system events and streams enriched data to a central server. Supports standalone and Kubernetes modes.

InfraSight_ml. Anomaly detection models for InfraSight. ML-based syscall frequency & resource usage profiling.

infrasight-controller. Kubernetes controller for managing and deploying eBPF-based monitoring agents across cluster nodes using custom CRDs. Part of the InfraSight observability stack.