Flannel runs a small, single binary agent called flanneld on each host, and is responsible for allocating a subnet lease to each host out of a larger, preconfigured address space. Flannel uses either the Kubernetes API or etcd directly to store the network configuration, the allocated subnets, and any auxiliary data (such as the host's public IP). Packets are forwarded using one of several backend mechanisms including VXLAN and various cloud integrations.

flannel - Network fabric for containers, designed for Kubernetes

An open platform to connect, manage, and secure microservices.Istio is an open platform for providing a uniform way to integrate microservices, manage traffic flow across microservices, enforce policies and aggregate telemetry data. Istio's control plane provides an abstraction layer over the underlying cluster management platform, such as Kubernetes, Mesos, etc.

An open platform to connect, manage, and secure microservices. Istio is an open platform for providing a uniform way to integrate microservices, manage traffic flow across microservices, enforce policies and aggregate telemetry data. Istio's control plane provides an abstraction layer over the underlying cluster management platform, such as Kubernetes, Mesos, etc.

Istio - An open platform to connect, manage, and secure microservices

Jib builds optimized Docker and OCI images for your Java applications without a Docker daemon - and without deep mastery of Docker best-practices. It is available as plugins for Maven and Gradle and as a Java library. Jib separates your application into multiple layers, splitting dependencies from classes. Now you don’t have to wait for Docker to rebuild your entire Java application - just deploy the layers that changed. 
 
Rebuilding your container image with the same contents always generates the same image. Never trigger an unnecessary update again. Reduce your CLI dependencies. Build your Docker image from within Maven or Gradle and push to any registry of your choice. No more writing Dockerfiles and calling docker build/push.

Jib builds optimized Docker and OCI images for your Java applications without a Docker daemon - and without deep mastery of Docker best-practices. It is available as plugins for Maven and Gradle and as a Java library.

jib - Build container images for your Java applications.

Skaffold is a command line tool that facilitates continuous development for Kubernetes applications. You can iterate on your application source code locally then deploy to local or remote Kubernetes clusters. Skaffold handles the workflow for building, pushing and deploying your application. It also provides building blocks and describe customizations for a CI/CD pipeline.
 
Skaffold is client-side only. With no on-cluster component, there is no overhead or maintenance burden to your cluster. Skaffold has many essential features for Kubernetes-native development, including policy-based image tagging, resource port-forwarding and logging, file syncing, and much more.

Skaffold is a command line tool that facilitates continuous development for Kubernetes applications. You can iterate on your application source code locally then deploy to local or remote Kubernetes clusters. Skaffold handles the workflow for building, pushing and deploying your application. It also provides building blocks and describe customizations for a CI/CD pipeline.

Skaffold - Local Kubernetes Development

ORY Hydra is a hardened, OpenID Certified OAuth 2.0 Server and OpenID Connect Provider optimized for low-latency, high throughput, and low resource consumption. ORY Hydra is not an identity provider (user sign up, user login, password reset flow), but connects to your existing identity provider through a login and consent app. Implementing the login and consent app in a different language is easy, and exemplary consent apps (Go, Node) and SDKs are provided.

ORY Hydra - OpenID Connect and OAuth Provider written in Go

Moby is an open-source project created by Docker to advance the software containerization movement. It provides a “Lego set” of dozens of components, the framework for assembling them into custom container-based systems, and a place for all container enthusiasts to experiment and exchange ideas.
 
It provides a library of containerized components for all vital aspects of a container system: OS, container runtime, orchestration, infrastructure management, networking, storage, security, build, image distribution, etc. It also provides tools to assemble the components into runnable artifacts for a variety of platforms and architectures: bare metal (both x86 and Arm); executables for Linux, Mac and Windows; VM images for popular cloud and virtualization providers.

Moby is an open-source project created by Docker to advance the software containerization movement. It provides a “Lego set” of dozens of components, the framework for assembling them into custom container-based systems, and a place for all container enthusiasts to experiment and exchange ideas. 

Moby Project - An open framework to assemble specialized container systems

Rook is an open source cloud-native storage orchestrator for Kubernetes, providing the platform, framework, and support for a diverse set of storage solutions to natively integrate with cloud-native environments. Rook turns storage software into self-managing, self-scaling, and self-healing storage services. It does this by automating deployment, bootstrapping, configuration, provisioning, scaling, upgrading, migration, disaster recovery, monitoring, and resource management. Rook uses the facilities provided by the underlying cloud-native container management, scheduling and orchestration platform to perform its duties.

Rook is an open source cloud-native storage orchestrator for Kubernetes, providing the platform, framework, and support for a diverse set of storage solutions to natively integrate with cloud-native environments. 

Rook - Storage Orchestration for Kubernetes

Helios is a Docker orchestration platform for deploying and managing containers across an entire fleet of servers. Helios provides a HTTP API as well as a command-line client to interact with servers running your containers. It also keeps a history of events in your cluster including information such as deploys, restarts and version changes.

Helios - Docker container orchestration platform

Rancher is an open source project that provides a complete platform for operating Docker in production. It provides infrastructure services such as multi-host networking, global and local load balancing, and volume snapshots. It integrates native Docker management capabilities such as Docker Machine and Docker Swarm. It offers a rich user experience that enables devops admins to operate Docker in production at large scale.
 
Rancher is deployed as a set of Docker containers. Running Rancher is as simple as launching two containers. One container as the management server and another container on a node as an agent.

Rancher is an open source project that provides a complete platform for operating Docker in production. It provides infrastructure services such as multi-host networking, global and local load balancing, and volume snapshots. It integrates native Docker management capabilities such as Docker Machine and Docker Swarm. It offers a rich user experience that enables devops admins to operate Docker in production at large scale. 

Rancher - Complete container management platform

HyperContainer is a hypervisor-agnostic technology that allows you to run Docker images on plain hypervisor. HyperContainer combines the best from both worlds: VM and Container. It is fast as containers and isolated as VM. Hyper eliminates the need for Guest OS.
 
<img src="https://camo.githubusercontent.com/83049c2d1b49819c55e341301bb268d1fc00fa62/68747470733a2f2f7472656c6c6f2d6174746163686d656e74732e73332e616d617a6f6e6177732e636f6d2f3535353163343932343639363061333166656162336433352f31353135783934372f35323635613966373262353839656635646266386233373262373138633433652f5061737465645f696d6167655f61745f323031365f30345f31365f30375f33335f504d2e706e67" width="500" />

HyperContainer is a hypervisor-agnostic technology that allows you to run Docker images on plain hypervisor. HyperContainer combines the best from both worlds: VM and Container. It is fast as containers and isolated as VM. Hyper eliminates the need for Guest OS.

hyperd - Hypervisor-agnostic Docker Runtime

Project Harbor is an enterprise-class registry server that stores and distributes Docker images. It extends the open source Docker Distribution by adding the functionalities usually required by an enterprise, such as security, identity and management. As an enterprise private registry, Harbor offers better performance and security. 
 
Harbor supports the setup of multiple registries and has images replicated between them. With Harbor, the images are stored within the private registry, keeping the bits and intellectual properties behind the company firewall. In addition, Harbor offers advanced security features, such as user management, access control and activity auditing.
<ul >
 <li>Role Based Access Control - Users and docker repositories are organized via "projects", a user can have different permission for images under a namespace.</li>
 <li>Image replication - Images can be replicated (synchronized) between multiple registry instances. Great for load balancing, high availability, hybrid and multi-cloud scenarios.</li>
 <li>Graphical user portal - User can easily browse, search docker repositories, manage projects/namespaces.</li>
 <li>AD/LDAP support - Harbor integrates with existing enterprise AD/LDAP for user authentication and management.</li>
 <li>Auditing - All the operations to the repositories are tracked and can be used for auditing purpose.</li>
 <li>Internationalization - Already localized for English, Chinese, German, Japanese and Russian. More languages can be added.</li>
 <li>RESTful API - RESTful APIs are provided for most administrative operations of Harbor. The integration with other management softwares becomes easy.</li>
 <li>Easy deployment - Provide both an online and offline installer. Besides, a virtual appliance for vSphere platform (OVA) is available.</li>
 </ul>

Project Harbor is an enterprise-class registry server that stores and distributes Docker images. It extends the open source Docker Distribution by adding the functionalities usually required by an enterprise, such as security, identity and management. As an enterprise private registry, Harbor offers better performance and security. 

Harbor - An enterprise-class container registry server based on Docker Distribution

Kong is a cloud-native, fast, scalable, and distributed Microservice Abstraction Layer (also known as an API Gateway, API Middleware or in some cases Service Mesh). Backed by the battle-tested NGINX with a focus on high performance, Kong was made available as an open-source platform in 2015. Under active development, Kong is used in production at thousands of organizations from startups, Global 5000 and Government organizations.
 
If you are building for web, mobile or IoT (Internet of Things) you will likely end up needing common functionality to run your actual software. Kong can help by acting as a gateway (or a sidecar) for microservices requests while providing load balancing, logging, authentication, rate-limiting and more through plugins.
 
Its features include: 
<ul>
<li>Cloud-Native: Platform agnostic, Kong can run from bare metal to
Kubernetes.</li>
<li>Dynamic Load Balancing: Load balance traffic across multiple backend
services.</li>
<li>Service Discovery: Resolve SRV records in third-party DNS resolvers like
Consul.</li>
<li>Serverless: Invoke and secure AWS Lambda or OpenWhisk fuctions directly
from Kong.</li>
<li>WebSockets: Communicate to your upstream services via WebSockets.</li>
<li>OAuth2.0: Easily add OAuth2.0 authentication to your APIs.</li>
<li>Logging: Log requests and responses to your system over HTTP, TCP, UDP,
or to disk.</li>
<li>Security: ACL, Bot detection, whitelist/blacklist IPs, etc...</li>
<li>Syslog: Logging to System log.</li>
<li>SSL: Setup a Specific SSL Certificate for an underlying service or API.</li>
<li>Monitoring: Live monitoring provides key load and performance server
metrics.</li>
<li>Authentications: HMAC, JWT, Basic, and more.</li>
<li>Rate-limiting: Block and throttle requests based on many variables.</li>
<li>Transformations: Add, remove, or manipulate HTTP requests and responses.</li>
<li>Caching: Cache and serve responses at the proxy layer.</li>
<li>CLI: Control your Kong cluster from the command line.</li>
<li>REST API: Kong can be operated with its RESTful API for maximum
flexibility.</li>
<li>Geo-Replicated: Configs are always up-to-date across different regions.</li>
<li>Failure Detection &amp; Recovery: Kong is unaffected if one of your Cassandra
nodes goes down.</li>
<li>Clustering: All Kong nodes auto-join the cluster keeping their config
updated across nodes.</li>
<li>Scalability: Distributed by nature, Kong scales horizontally by simply
adding nodes.</li>
<li>Performance: Kong handles load with ease by scaling and using NGINX at
the core.</li>
<li>Plugins: Extendable architecture for adding functionality to Kong and
APIs.</li>
</ul>

Kong is a cloud-native, fast, scalable, and distributed Microservice Abstraction Layer (also known as an API Gateway, API Middleware or in some cases Service Mesh). Backed by the battle-tested NGINX with a focus on high performance, Kong was made available as an open-source platform in 2015. Under active development, Kong is used in production at thousands of organizations from startups, Global 5000 and Government organizations.

Kong - The Microservice API Gateway 

Docker slim minify's and secure's Docker containers. Keep doing what you are doing. No need to change anything. Use the base image you want. Use the package manager you want. Don't worry about hand optimizing your Dockerfile. You shouldn't have to throw away your tools and your workflow to have small container images.
 
docker-slim will optimize and secure your containers by understanding your application and what it needs using various analysis techniques.

Docker slim minify's and secure's Docker containers. Keep doing what you are doing. No need to change anything. Use the base image you want. Use the package manager you want. Don't worry about hand optimizing your Dockerfile. You shouldn't have to throw away your tools and your workflow to have small container images.



DockerSlim (docker-slim) - Optimize and secure your Docker containers

Nuclio is a high-performance "serverless" framework focused on data, I/O, and compute intensive workloads. It is well integrated with popular data science tools, such as Jupyter and Kubeflow; supports a variety of data and streaming sources; and supports execution over CPUs and GPUs. The Nuclio project began in 2017 and is constantly and rapidly evolving; many start-ups and enterprises are now using Nuclio in production.
 
Nuclio is extremely fast: a single function instance can process hundreds of thousands of HTTP requests or data records per second. This is 10-100 times faster than some other frameworks.

Nuclio is a high-performance "serverless" framework focused on data, I/O, and compute intensive workloads. It is well integrated with popular data science tools, such as Jupyter and Kubeflow; supports a variety of data and streaming sources; and supports execution over CPUs and GPUs. The Nuclio project began in 2017 and is constantly and rapidly evolving; many start-ups and enterprises are now using Nuclio in production.

Nuclio - High-Performance Serverless event and data processing platform

kaniko is a tool to build container images from a Dockerfile, inside a container or Kubernetes cluster. kaniko doesn't depend on a Docker daemon and executes each command within a Dockerfile completely in userspace. This enables building container images in environments that can't easily or securely run a Docker daemon, such as a standard Kubernetes cluster.

kaniko - Build Container Images In Kubernetes

Discover open source projects across all platforms

Projects