egress 开源项目推荐（147 个）

kube-vip /kube-vip

Kubernetes控制平面虚拟IP和负载平衡器

qoomon /docker-host

A docker sidecar container to forward all traffic to local docker host or any other host

flomesh-io /pipy

Pipy 是面向云、边缘和 IoT 的可编程代理。

strands-agents /box

Run AI agents in a sandbox that restricts what they can execute, read, write, and reach on the network. Box combines OS isolation with default-deny Dogwood policies and credential injection that keeps secrets outside the agent. Written in Rust. Supports macOS on Apple silicon and Linux.

spidernet-io /egressgateway

Layer4 egress gateway for Kubernetes

monzo /egress-operator

A Kubernetes operator to produce egress gateway Envoy pods and control access to them with network policies

trustabl /agent-network-access-probe

Finds and fixes agent network access risks in OpenShell and Docker sandboxes.

flomesh-io /ErieCanal

ErieCanal is a MCS(multi cluster service https://github.com/kubernetes-sigs/mcs-api) implementation, provides MCS, Ingress, Egress, GatewayAPI for Kubernetes clusters.

HoussemDellai /azure-network-course

Course for learning Azure Hub and Spoke implementation

konsole-is /fqdn-controller

A lightweight operator to manage FQDN based egress network policies

fhiltscher /awesome-ai-coding-sandboxes

Security-posture-first list of sandboxes for running AI coding agents' code, ranked by isolation, egress control and secrets handling

Micolaabdi /multi-warp

N independent Cloudflare WARP exits as local SOCKS5 proxies (Docker). One-command multi-exit pool.

dvrkn /ebfw

eBPF egress firewall for Kubernetes — see and enforce what every pod talks to (domains, HTTP paths, headers, IPs), attributed per pod, enforced in the kernel. No sidecar, no proxy, no TLS MITM.

aalok-sathe /fire-evacuation-simulator

simple ABM program to simulate a moving danger (e.g., fire) and people in a confined space trying to escape the danger

OpenRod /OpenRod

One-click sandboxes for AI agents, with egress policy, MCPs, skills and audit. Built on NVIDIA OpenShell.

gamemann /ipip-direct-tc

Sends outgoing IPIP packets back to the client directly instead of back through the IPIP tunnel/forwarding server. Uses TC egress filter for fast packet processing.

cyllective /egress0r

DLP and Firewall test suite

yeet-src /netwatch

Network throughput as an 80s sunset. A two-sided bar chart of live traffic over time — egress (TX) climbing up from a neon zero-axis, ingress (RX) falling down, newest sample on the right. One interface or all of them, sampled straight from the kernel's byte counters.

uruana33 /egress-scope

Egress & IP diagnostics workbench — domestic/overseas egress checks, WebRTC & DNS leak tests, IP quality score, WHOIS, global ping and AI service status.

gamemann /compressor-v2-fou-wrapper

TC programs made for wrapping and unwrapping marked FOU-encapped packets. Being used for Compressor V2