nowfound

Life & fun · December 20, 2025

CR

Cerberus – Real-time network monitor with eBPF

Hi HN! I'm Mo, a platform engineer at Deltaflare working on critical infrastructure protection. I built Cerberus because traditional packet capture tools (tcpdump, Wireshark) have too much overhead for production CNI environments. eBPF lets us filter and classify packets at the kernel level with near-zero performance impact. Some interesting challenges: - eBPF verifier is strict - every memory access needs bounds checking - Limited to 32 bytes of L7 payload (tradeoff between inspection depth and overhead) - TC vs XDP decision (chose TC for compatibility) Looking for contributors, especially…

Visit github.com ↗Alternativestop 21% of December 2025

In plain words

Cerberus is a real-time network monitoring tool that uses eBPF to capture and classify network packets at the kernel level. Built for production container networking environments, it offers significantly lower performance overhead than traditional packet capture tools like tcpdump and Wireshark. The tool filters packets in the kernel with minimal impact on system performance, making it suitable for infrastructure teams managing critical systems who need visibility without sacrificing speed.

written from the facts on this page · September 2026

From the sources

In the maker’s words, at launch

Hi HN! I'm Mo, a platform engineer at Deltaflare working on critical infrastructure protection. I built Cerberus because traditional packet capture tools (tcpdump, Wireshark) have too much overhead for production CNI environments. eBPF lets us filter and classify packets at the kernel level with near-zero performance impact. Some interesting challenges: - eBPF verifier is strict - every memory access needs bounds checking - Limited to 32 bytes of L7 payload (tradeoff between inspection depth and overhead) - TC vs XDP decision (chose TC for compatibility) Looking for contributors, especially on: - Redis backend for distributed deployments - Prometheus metrics export - Anomaly detection Happy to answer questions!

Does the same job

all alternatives →

More life & fun this month

the category →

Launched alongside, December 2025

the whole month →
  • GP
    Gemini Pro 3 imagines the HN front page 10 years from now▲3,346

    Life & fun · Dec 2025 · dosaygo-studio.github.io

  • JG
    Jmail – Google Suite for Epstein files▲1,557

    Hi everyone! My name's Luke and I made the original Jmail here alongside Riley Walz. We had a ton of friends collaborate on building out more of the app suite last night in lieue of DOJ's "Epstein files" release. Please AMA!

    Life & fun · Dec 2025 · jmail.world

  • Loki.Build▲746

    Design and ship studio-grade landing pages with AI

    AI · Dec 2025 · loki.build

  • PlanEat AI▲733

    AI turns your health goals into a 7-day menu & grocery list

    AI · Dec 2025 · planeatai.com

  • 2G
    22 GB of Hacker News in SQLite▲730

    Community, All the HN belong to you. This is an archive of hacker news that fits in your browser. When I made HN Made of Primes I realized I could probably do this offline sqlite/wasm thing with the whole GBs of archive. The whole dataset. So I tried it, and this is it. Have Hacker News on your device. Go to this repo (https://github.com/DOSAYGO-STUDIO/HackerBook): you can download it. Big Query -> ETL -> npx serve docs - that's it. 20 years of HN arguments and beauty, can be yours forever. So they'll never die. Ever. It's the unkillable static archive of HN and it's…

    Dev tools · Dec 2025 · hackerbook.dosaygo.com

  • CyberCut AI▲723

    AI video studio for viral social clips

    AI · Dec 2025 · cybercut.ai