Show HN: Cerberus – Real-time network monitor with eBPF
zrouga Saturday, December 20, 2025
Hi HN! I'm Mo, a platform engineer at Deltaflare working on critical infrastructure protection.
I built Cerberus because traditional packet capture tools (tcpdump, Wireshark) have too much overhead for production CNI environments. eBPF lets us filter and classify packets at the kernel level with near-zero performance impact.
Some interesting challenges: - eBPF verifier is strict - every memory access needs bounds checking - Limited to 32 bytes of L7 payload (tradeoff between inspection depth and overhead) - TC vs XDP decision (chose TC for compatibility)
Looking for contributors, especially on: - Redis backend for distributed deployments - Prometheus metrics export - Anomaly detection
Happy to answer questions!
Summary
Cerberus is an open-source project that provides a framework for building highly available and scalable distributed systems. It offers features such as service discovery, load balancing, and fault tolerance to help developers create resilient and efficient applications.
11
3
Summary
github.com