HyperAIHyperAI

Command Palette

Search for a command to run...

10 months ago
Open Source
General

Qtap: An eBPF Agent for Unencrypted Network Traffic Analysis with Full Context Visibility

Qtap is an eBPF (extended Berkeley Packet Filter) agent developed by Qpoint IO. It captures pre-encrypted network traffic, offering detailed insights into egress connections and their associated processes. By attaching to TLS/SSL functions, Qtap intercepts data before and after encryption, providing full visibility without the need to modify applications, install proxies, or manage certificates. This innovative tool ensures you can understand your outbound traffic with minimal overhead, avoiding latency and disruptions to application performance. How Qtap Works Qtap operates within the Linux kernel, capturing traffic as it flows through the system. It attaches to specific TLS/SSL functions, allowing it to intercept data in its unencrypted state and relay this information to flexible plugins. These plugins can access a wide range of context, including details about the process, container, host, user, and protocol. This comprehensive approach enables deep visibility into your network traffic without the usual complexities associated with traditional monitoring methods. Integration and Usage Qtap can seamlessly enhance your existing observability pipelines or serve as a core component for a custom solution. Whether you're building a monitoring stack from scratch or looking to augment an existing one, Qtap's flexibility makes it a versatile tool. Quick Start If you're interested in trying Qtap, you can quickly set up a temporary instance in Demo mode to watch traffic in real time directly from your terminal. Alternatively, you can install it and start using it immediately. Community Engagement Join the conversation with Qpoint developers and contributors on GitHub Discussions. Share your ideas, ask questions, and contribute to the project's growth. Development Environment To get started with developing for Qtap, you will need a compatible Linux operating system and certain tools. The specific requirements are outlined in the "Prerequisites" section of the project documentation. Common Makefile Targets Qpoint developers frequently use several Makefile targets to streamline their workflow. You can find these in the project documentation, which provides detailed instructions for setup and usage. Project Status Qtap is currently in its early stages of development. Our team is passionate about this project and eager to collaborate with the community. As we continue to refine and expand Qtap's capabilities, your feedback and contributions are invaluable. While we appreciate any input, please keep in mind that our team is small and must balance multiple priorities. Constructive feedback that helps improve the project is highly encouraged. Contributing to Qtap We welcome contributions from the community to help make Qtap even better. By submitting contributions to this project, you agree to the Contributor License Agreement (CLA). This agreement ensures that your contributions can be integrated into both the open-source and commercial versions of the project. Your support is crucial, and we thank you for your interest and contributions. Licensing Qtap is dual-licensed under two licenses: the GNU Affero General Public License version 3.0 (AGPLv3.0) for open-source use and a commercial license for commercial applications. This dual-licensing model ensures that the project remains accessible to the open-source community while also supporting commercial users. Thank you for exploring Qtap. We look forward to your feedback and hope to see you contributing to the project soon!

Related Links