cloud
DevOps experts to define, build, and improve your infrastructure Performance, security, sovereignty... Your infrastructure challenges require a tailored approach. Whether Cloud or On-Premise, our experts guide you in constructing the infrastructure that addresses your needs.
Percona Everest is a cloud-native database platform to deploy and manage enterprise-grade PostgreSQL, MongoDB and MySQL database clusters.
True Serverless. The fast, secure and open-source Unikernel Development Kit.
Unikraft powers the next-generation of cloud native, containerless applications by enabling you to radically customize and build custom OS/kernels; unlocking best-in-class performance, security primitives and efficiency savings.
A next-generation cloud native kernel designed to unlock best-in-class performance, security primitives and efficiency savings.
An embedded database built on object storage.
Unlike traditional LSM-tree storage engines, SlateDB writes data to object storage to provide bottomless storage capacity, high durability, and easy replication.
SlateDB is an embedded storage engine built as a log-structured merge-tree. Unlike traditional LSM-tree storage engines, SlateDB writes data to object storage (S3, GCS, ABS, MinIO, Tigris, and so on). Leveraging object storage allows SlateDB to provide bottomless storage capacity, high durability, and easy replication. The trade-off is that object storage has a higher latency and higher API cost than local disk.
Related contents:
Cloud-native high-performance edge/middle/service proxy. Envoy is an open source edge and service proxy, designed for cloud-native applications.
Policy-based control for cloud native environments. Flexible, fine-grained control for administrators across the stack.
Open Policy Agent (OPA) is an open source, general-purpose policy engine that enables unified, context-aware policy enforcement across the entire stack.
Related contents:
- Guardrails for Your Cloud: A Simple Guide to OPA and Terraform @ Sami Banerjee's Medium.
- Getting Open Policy Agent Up and Running @ The New Stack.
- Simplify Kubernetes Security With Kyverno and OPA Gatekeeper @ The New Stack.
- Automating policy enforcements for infrastructure using Open Policy Agent (OPA) in Terraform — Part 1 @ Ashay Maheshwari's Medium.
- Terraform governing with OPA @ DevOpsOnTheTrail.
- Blueprinting Security in CI/CD: Building Trust Through Open Source @ CD Foundation.
- From Kubernetes Gatekeeper to Full-Stack Governance with OPA @ Pulumi.
- Governing infrastructure as code using pattern-based policy as code @ AWS Security Blog.
list and get specific files from remote zip archives without downloading the whole thing.
Puter is a privacy-first personal cloud to keep all your files, apps, and games in one secure place, accessible from anywhere at any time.
Puter is an advanced, open-source internet operating system designed to be feature-rich, exceptionally fast, and highly extensible.
Open Source Distributed POSIX File System for Cloud. JuiceFS is a distributed POSIX file system built on top of Redis and S3.
JuiceFS is a high-performance POSIX file system released under Apache License 2.0, particularly designed for the cloud-native environment. The data, stored via JuiceFS, will be persisted in Object Storage (e.g. Amazon S3), and the corresponding metadata can be persisted in various compatible database engines such as Redis, MySQL, and TiKV based on the scenarios and requirements.
With JuiceFS, massive cloud storage can be directly connected to big data, machine learning, artificial intelligence, and various application platforms in production environments. Without modifying code, the massive cloud storage can be used as efficiently as local storage.
SeaweedFS is a fast distributed storage system for blobs, objects, files, and data lake, for billions of files! Blob store has O(1) disk seek, cloud tiering. Filer supports Cloud Drive, cross-DC active-active replication, Kubernetes, POSIX FUSE mount, S3 API, S3 Gateway, Hadoop, WebDAV, encryption, Erasure Coding.
An open-source distributed storage service you can self-host to fullfill many needs.
Garage is an S3-compatible distributed object storage service designed for self-hosting at a small-to-medium scale.
Garage is designed for storage clusters composed of nodes running at different physical locations, in order to easily provide a storage service that replicates data at these different locations and stays available even when some servers are unreachable. Garage also focuses on being lightweight, easy to operate, and highly resilient to machine failures.
Related contents:
Distributed Async Await. A dead simple programming model for modern applications.
Resonate's Distributed Async Await is a new programming model that simplifies coding for the cloud. It ensures code completion even if hardware or software failures occur during execution. The programming model does this with just functions and promises, making it trivial to build coordinated and reliable distributed applications.
Related contents:
From Code to Product. Save time, money, and enjoy peace of mind with our simplified, automated application deployment on our sovereign Cloud.
Related contents:
Infrastructure as Code in Any Programming Language. Open Source Infrastructure as Code. Manage infrastructure, secrets, and configurations intuitively on any cloud.Build infrastructure intuitively on any cloud using familiar languages 🚀.
Pulumi's Infrastructure as Code SDK is the easiest way to build and deploy infrastructure, of any architecture and on any cloud, using programming languages that you already know and love. Code and ship infrastructure faster with your favorite languages and tools, and embed IaC anywhere with Automation API.
Related contents:
CockroachDB is a cloud-native distributed PostgreSQL-compatible SQL database designed to build, scale, and manage modern, data-intensive applications.
Related contents:
- Migrating to Postgres @ Motion Engineering Blog.
- Optimizing PgBench for CockroachDB Part 1 @ DZone.
- Optimizing PgBench for CockroachDB Part 2 @ DZone.
- Optimizing PgBench for CockroachDB Part 3 @ DZone.
- Leveraging Change Data Capture For Database Migrations At Scale @ SquareSpace Engineering.
- How CockroachDB Built Vector Indexing at Scale @ ByteByteGo Newsletter.
Open-source hyperconverged infrastructure.
The open source hyperconverged infrastructure (HCI) solution for a cloud native world. Harvester is a modern, open, interoperable, hyperconverged infrastructure (HCI) solution built on Kubernetes. It is an open-source alternative designed for operators seeking a cloud-native HCI solution. Harvester runs on bare metal servers and provides integrated virtualization and distributed storage capabilities. In addition to traditional virtual machines (VMs), Harvester supports containerized environments automatically through integration with Rancher. It offers a solution that unifies legacy virtualized infrastructure while enabling the adoption of containers from core to edge locations.
A file manager from the future. One Explorer. All Your Files.
Unify files from all your devices and clouds into a single, easy-to-use explorer. Designed for creators, hoarders and the painfully disorganized.
Spacedrive is an open source cross-platform file explorer, powered by a virtual distributed filesystem written in Rust.
Run Locally, Deploy Globally
Develop and test your AWS applications locally to reduce development time and increase product velocity. Reduce unnecessary AWS spend and remove the complexity and risk of maintaining AWS dev accounts
Related contents:
Kubernetes Native Policy Management.
Kyverno is a policy engine designed for Kubernetes. It can validate, mutate, and generate configurations using admission controls and background scans. Kyverno policies are Kubernetes resources and do not require learning a new language. Kyverno is designed to work nicely with tools you already use like kubectl, kustomize, and Git.
Related contents:
- Vos politiques de conformité sur Kubernetes avec Kyverno @ Zwindler's Reflection :fr:.
- Understanding Kyverno: Enhancing Kubernetes Security with Policy Enforcement @ Jyothi Ram's blog.
- Using the Kyverno CLI to Write Policy Test Cases @ The New Stack.
- Simplify Kubernetes Security With Kyverno and OPA Gatekeeper @ The New Stack.
- Announcing Kyverno Release 1.15! @ CNCF.
- Optimizing Kyverno CLI performance: My LFX mentorship journey @ CNCF.
- GitOps architecture, patterns and anti-patterns @ Platform Engineering.
- GitOps policy-as-code: Securing Kubernetes with Argo CD and Kyverno @ CNCF.
- Automating Confidential Containers (CoCo) infrastructure with Kyverno @ CNCF.
Lambda function that streamlines containment of an AWS account compromise.
AWS Kill Switch is a Lambda function (and proof of concept client) that an organization can implement in a dedicated "Security" account to give their security engineers the ability to delete IAM roles or apply a highly restrictive service control policy (SCP) on any account in their organization.
open source big data platform.
Trunk Data Platform is an Open Source, free, Hadoop distribution.
Cloud-Native API Gateway.
Apache APISIX provides rich traffic management features like Load Balancing, Dynamic Upstream, Canary Release, Circuit Breaking, Authentication, Observability, etc.
The ultimate multi-model database. Develop easier. Build faster. Scale quicker.
SurrealDB is an end-to-end cloud-native database designed for modern applications, including web, mobile, serverless, Jamstack, backend, and traditional applications. With SurrealDB, you can simplify your database and API infrastructure, reduce development time, and build secure, performant apps quickly and cost-effectively.
Bring your code, we'll handle the rest.
Made for any language, for projects big and small. Railway is the cloud that takes the complexity out of shipping software.
The Platform Powering the API World. 🦍 The Cloud-Native API Gateway.
Kong or Kong API Gateway is a cloud-native, platform-agnostic, scalable API Gateway distinguished for its high performance and extensibility via plugins.
By providing functionality for proxying, routing, load balancing, health checking, authentication (and more), Kong serves as the central layer for orchestrating microservices or conventional API traffic with ease.
Serverless, Fault-Tolerant, Branchable Postgres.
The fully managed multi-cloud Postgres with a generous free tier. We separated storage and compute to offer autoscaling, branching, and bottomless storage.
Collaboratively transforming network infrastructure by leveraging: Open Source Software, Cloud-Native and SDN Technologies, Disaggregation and White Box Hardware.
List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.
Tools to support cloud guardrails implementation and compliance checks for Microsoft Azure.
Parallel S3 and local filesystem execution tool.
s5cmd is a very fast S3 and local filesystem execution tool. It comes with support for a multitude of operations including tab completion and wildcard support for files, which can be very handy for your object storage workflow while working with large number of files.
Wolfi is a community Linux OS designed for the container and cloud-native era. Chainguard started the Wolfi project to enable building Chainguard Images, our collection of curated distroless images that meet the requirements of a secure software supply chain. This required a Linux distribution with components at the appropriate granularity and with support for both glibc and musl, something that was not yet available in the cloud-native Linux ecosystem.
The fully transactional, cloud-ready, distributed database.
Build flexible, distributed systems that can leverage the entire history of your critical data, not just the most current state. Build them on your existing infrastructure or jump straight to the cloud.
PowerDNS is a leading provider of secure open-source and commercial DNS software. PowerDNS solutions are focused on large-scale DNS service providers, including mobile and fixed-line broadband operators, and hosting and cloud service providers. PowerDNS also underpins scalable security solutions from market-leading vendors.
Related contents:
The serverless database built for modern development.
Your database should be easy to use, not a source of frustration. Xata easily integrates into your developer workflow, providing the best data experience for Github, Vercel and Netlify based deployments.
Related contents:
A fully functional local cloud stack. Develop and test your cloud and serverless apps offline!
LocalStack is an easy-to-use test/mocking framework for developing cloud applications. Using LocalStack, you can spin up a local test environment in seconds, and get the same functionality you would get from a real AWS environment.
RedCloud OS is a Debian based Cloud Adversary Simulation Operating System for Red Teams to assess the security of leading Cloud Service Providers (CSPs). It includes tools optimized for adversary simulation tasks within Amazon Web Services (AWS), Microsoft Azure, and Google Cloud Platform (GCP).
A simple, easy-to-use, elegant open-source personal cloud system. Community-based open source software focused on delivering simple personal cloud experience around Docker ecosystem.
Free Cloud Encryption for Dropbox & Co.
Cryptomator offers multi-platform transparent client-side encryption of your files in the cloud.
Related contents:
Cross-platform backup tool for Windows, macOS & Linux with fast, incremental backups, client-side end-to-end encryption, compression and data deduplication. CLI and GUI included.
Kopia is a fast and secure open-source backup/restore tool that allows you to create encrypted snapshots of your data and save the snapshots to remote or cloud storage of your choice, to network-attached storage or server, or locally on your machine. Kopia does not 'image' your whole machine. Rather, Kopia allows you to backup/restore any and all files/directories that you deem are important or critical.
Related contents:
Open-Source, cloud-Native Storage for Kubernetes. Production ready management for File, Block and Object Storage.
Rook is an open source cloud-native storage orchestrator for Kubernetes, providing the platform, framework, and support for Ceph storage to natively integrate with Kubernetes.
Ceph is a distributed storage system that provides file, block and object storage and is deployed in large scale production clusters.
Open Interoperable HCI with Harvester. Harvester is the next generation of hyperconverged infrastructure designed for the modern cloud-native environment. Completely open-source and free to use, Harvester easily integrates into Rancher helping operators consolidate workloads and reduce the complexity of their infrastructure.
XetHub brings speedy access and Git-based collaboration to large scale repositories of data, code, or any combination of files. Our instant mount feature makes it possible to access GBs and TBs of data in seconds at the speed of localhost, while our de-duplication algorithm stores data and differences efficiently to save money and speed up development cycles. XetHub is ideal for teams who already use Git to track their code changes, and want to leverage the power of infinite history, pull requests, and difference-based tracking for larger assets such as datasets or media files. Managing complete projects with familiar Git semantics makes change tracking and continuous integration a breeze, especially for workflows that use code to generate or augment assets.
Most Powerful Cross Browser Testing Tool Online. Cross Browser Testing Cloud. Browser & app testing cloud to perform both exploratory and automated testing across 3000+ different browsers, real devices and operating systems.
XCP-ng is a virtualization platform based on Xen Source and Citrix® Hypervisor (formerly XenServer). XCP-ng stands for Xen Cloud Platform - New Generation and is a tribute to the old Open Source project XCP, which was abandoned when XenServer was open-sourced in 2013.
The Most Widely Deployed Open Source Cloud Software in the World. Deployed by thousands. Proven production at scale. OpenStack is a set of software components that provide common services for cloud infrastructure.
Sylva main objective is to release a cloud native infrastructure stack to host Telco (5G, OpenRAN, CDN, etc.) and Edge use cases.
IT Management Software and Observability Platform. Full-stack observability solutions for cloud, hybrid, and on-premises.
ORAS works similarly to docker. It allows you to push (upload) and pull (download) things to and from an OCI Registry, and also handles login (authentication) and token flow (authorization). What ORAS does differently is shift the focus from container images to other types of artifacts.
Related contents:
Cloud native distributed block storage for Kubernetes. Longhorn is a distributed block storage system for Kubernetes. Longhorn is cloud native storage built using Kubernetes and container primitives.
Related contents:
Detect security threats in real time
Falco is a cloud-native security tool designed for Linux systems. It employs custom rules on kernel events, which are enriched with container and Kubernetes metadata, to provide real-time alerts. Falco helps you gain visibility into abnormal behavior, potential security threats, and compliance violations, contributing to comprehensive runtime security.
Related contents:
- k8s-custom-detections @ GitHub.
- Réagir à temps aux menaces dans Kubernetes avec Falco (Rachid Zarouali, Thomas Labarussias) @ Voxxed Days Luxembourg's YouTube :fr:.
- Extending Falco for Bitcoin @ sysdig.
- Falcoctl: Artifact Management for Falco @ Cloud Native Computing Foundation.
- How Falco and Stratoshark close the gap between open source runtime detection and deep forensic analysis @ sysdig.
- Blueprinting Security in CI/CD: Building Trust Through Open Source @ CD Foundation.
- Episode #540 consacré à Falco @ NoLimitSecu :fr:.
Delta Lake is an open-source storage framework that enables building a Lakehouse architecture with compute engines including Spark, PrestoDB, Flink, Trino, and Hive and APIs for Scala, Java, Rust, Ruby, and Python.
Confidential Containers is an open source community working to enable cloud native confidential computing by leveraging Trusted Execution Environments to protect containers and data.
Responsive browser-based gaming powered by feeds.
Games natively execute within the browser across a wide variety of platforms as directed by cloud-based gaming feeds.
A simple, easy-to-use, elegant open-source home cloud system Community-based open source software focused on delivering simple home cloud experience around Docker ecosystem.
Horizontally scalable, highly available, multi-tenant, long term storage for Prometheus.
Rclone is a command-line program to manage files on cloud storage. It is a feature-rich alternative to cloud vendors' web storage interfaces. Over 40 cloud storage products support rclone including S3 object stores, business & consumer file storage services, as well as standard transfer protocols.
The end-to-end development and testing platform for Kubernetes and Cloud
Garden is an end-to-end cloud delivery platform that accelerates your development, testing and CI/CD workflows.
Get realistic environments on demand, rapidly iterate while coding, and efficiently run tests from anywhere. One tool, one configuration, from source to finish.
GlusterFS is a scale-out network-attached storage file system. It has found applications including cloud computing, streaming media services, and content delivery networks. GlusterFS was developed originally by Gluster, Inc. and then by Red Hat, Inc., as a result of Red Hat acquiring Gluster in 2011.
Related contents:
High Performance, Kubernetes Native Object Storage. MinIO offers high-performance, S3 compatible object storage. Native to Kubernetes, MinIO is the only object storage suite available on every public cloud, every Kubernetes distribution, the private cloud and the edge. MinIO is software-defined and is 100% open source under GNU AGPL v3.
Related contents: