DevOps & infrastructure: what’s taking off on GitHub
The fastest-growing repositories in “DevOps & infrastructure”: plain-language summaries, use cases and a check on star quality. Updated every 30 minutes.
-
6.2
zeabur-oss/zeabur
Self-hosted PaaS on your own Kubernetes: shows the cluster as projects and services, explains problems in plain words and lets you change things safely. Keeps no state of its own — no database, no custom resources.
-
3.9
clash-verge-rev/clash-verge-rev
A cross-platform proxy GUI client built on Tauri with the Clash Meta (mihomo) core, continuing Clash Verge. It manages routing rules, configurations and system proxy on Windows, macOS and Linux.
-
3.9
tailscale/tailscale
Open-source core of Tailscale: the tailscaled daemon and tailscale CLI that build private WireGuard-based mesh networks with SSO and 2FA for Linux, Windows, macOS and BSD.
-
3.2
MHSanaei/3x-ui
Web control panel for managing Xray-core servers: deploys and configures proxy and VPN protocols (VLESS, VMess, Trojan, Shadowsocks, WireGuard, Hysteria2, MTProto, etc.) with per-client traffic accounting. Intended for…
-
3.0
tailscale/tailcat
A CLI and Go library that works like netcat over Tailscale's data plane (magicsock/WireGuard) without the control plane: one side listens and prints a short address, the other connects to it, with connection metadata…
-
2.9
VictoriaMetrics/VictoriaMetrics
VictoriaMetrics is a fast, cost-effective time series database and monitoring solution compatible with Prometheus and Graphite. It suits long-term metric storage and large volumes of telemetry data.
-
2.8
XTLS/Xray-core
Xray-core is an open Go platform of network proxy tools that develops the XTLS protocol and REALITY, used for censorship circumvention and building secure tunnels.
-
2.8
coollabsio/coolify
Self-hostable open-source PaaS: deploys applications, databases and 360+ one-click services on your own servers over SSH, as an alternative to Vercel, Heroku and Netlify.
-
2.7
mirkobrombin/raven
Raven runs Windows applications on Linux without a virtual machine: the program's code executes directly on the CPU in a sandbox, while Raven answers its system calls, playing the part of the Windows kernel. Graphics…
-
2.6
henrygd/beszel
Lightweight server monitoring platform with historical metrics, Docker container stats, and alerts. Consists of a PocketBase web hub and agents installed on monitored systems.
-
2.5
kubernetes/kubernetes
Kubernetes is an open source container orchestration system for deploying, scaling, and managing containerized applications across multiple hosts.
-
2.4
louislam/uptime-kuma
Uptime Kuma is a self-hosted monitoring tool for uptime of services: HTTP(s), TCP, Ping, DNS, Docker containers and more, with notifications and status pages.
-
2.3
EasyTier/EasyTier
A decentralized mesh VPN written in Rust with WireGuard support, NAT traversal, and P2P connections without a central server.
-
2.3
caddyserver/caddy
Extensible multi-platform web server written in Go with automatic HTTPS by default, HTTP/1.1, HTTP/2 and HTTP/3 support, and configuration via Caddyfile, JSON or API.
-
2.3
openobserve/openobserve
Open-source observability platform for logs, metrics, traces, RUM and LLM monitoring, using Parquet-on-S3 storage and single-binary deployment. Positioned as a cheaper alternative to Datadog, Splunk and Elasticsearch.
-
2.1
net-merge/net-merge
A cross-platform tool that aggregates multiple internet connections at once, load-balancing each new connection across Wi-Fi, Ethernet and tethers. It is a free alternative to Speedify, without any account, server or…
-
2.1
prometheus/prometheus
A monitoring system and time series database: it scrapes metrics from configured targets, evaluates rule expressions, graphs results, and fires alerts. Used to observe services and infrastructure.
-
2.1
eliasbiondo/antirion
Open-source AI gateway in Rust: a single binary with a built-in console that routes, secures, budgets and observes LLM calls across OpenAI, Anthropic, Gemini, Bedrock and more.
-
2.1
Dokploy/dokploy
Self-hostable PaaS that simplifies deploying and managing applications and databases on your own VPS. An open-source alternative to Vercel, Netlify, and Heroku.
-
2.0
ansible/ansible
Ansible is an agentless IT automation platform that handles configuration management, application deployment, cloud provisioning and network automation over SSH using YAML playbooks.
-
2.0
hashicorp/terraform
Terraform is a source-available tool that turns cloud and service APIs into declarative configuration files, letting teams version, review and reuse infrastructure as code and apply changes through execution plans.
-
1.9
docker/compose
Docker Compose is a tool for running multi-container Docker applications defined in a compose.yaml file. It lets you start all services of an application in an isolated environment with a single `docker compose up`…
-
1.9
open-telemetry/opentelemetry-collector
Vendor-agnostic telemetry collector that receives, processes and exports traces, metrics and logs in OTLP and other formats, replacing multiple separate agents.
-
1.8
dagger/dagger
A platform for automating software delivery: build, test and ship code in containers with caching and tracing. Runs identically locally, in CI and in the cloud, with SDKs for 8 languages.
-
1.8
traefik/traefik
HTTP reverse proxy and load balancer that automatically configures routes to microservices via Docker, Kubernetes, Consul, Etcd and other orchestrators.
-
1.8
alchemy-run/alchemy
Infrastructure-as-Effects framework for describing cloud infrastructure and application logic in TypeScript as a single type-safe Effect program. Supports AWS (S3, SQS, DynamoDB, Lambda, EC2) and Cloudflare (Workers,…
-
1.8
ai-dynamo/dynamo
Dynamo is an open-source datacenter-scale inference orchestration layer above SGLang, TensorRT-LLM and vLLM that turns a GPU cluster into a coordinated system with disaggregated serving, KV-aware routing and autoscaling.
-
1.7
netdata/netdata
Open-source real-time infrastructure monitoring platform that collects per-second metrics, auto-discovers services, and uses ML for anomaly detection. Runs on servers, Kubernetes, containers, and IoT with zero…
-
1.7
bytecodealliance/wasmtime
A standalone WebAssembly runtime in Rust with the Cranelift JIT compiler, WASI support, and sandboxing. It runs wasm modules and components outside the browser from many languages.
-
1.6
cloudflare/cloudflared
Cloudflare Tunnel client: a daemon that proxies traffic from the Cloudflare network to your origins without opening firewall ports. It also provides access to Layer 4 TCP services (SSH, RDP) via `cloudflared access`.
-
1.6
fleetdm/fleet
Open-source device management platform: MDM, patching, software deployment, and compliance checks via API, GitOps, and webhooks. Built for IT and security teams managing thousands of computers across Linux, macOS,…
-
1.5
harness/harness
An open-source DevOps platform combining code hosting, CI/CD pipelines, hosted developer environments (Gitspaces) and artifact registries in one self-hosted service. It succeeds Drone as a broader solution for teams…
-
1.5
helm/helm
Helm is the Kubernetes package manager: it manages Charts, packages of pre-configured Kubernetes resources. It lets you install, upgrade and roll back applications in a cluster using manifest templates.
-
1.5
argoproj/argo-cd
Argo CD is a declarative GitOps continuous delivery tool for Kubernetes that keeps cluster state in sync with configuration stored in a Git repository.
-
1.5
grafana/alloy
An OpenTelemetry Collector distribution with programmable pipelines written in an expression-based syntax for collecting metrics, logs, traces, and profiles. Supports integrations with Prometheus, Loki, Pyroscope, and…
-
1.4
byJoey/cfnew-panel
A control panel for the CFnew proxy kernel that runs on Vercel: it manages Worker configuration, generates client subscriptions and deploys via one click.
-
1.4
moby/moby
Moby is Docker's open-source project offering a modular toolkit of components for assembling container-based systems: image builds, registry, orchestration, runtime. Aimed at engineers and integrators, not end users.
-
1.4
envoyproxy/envoy
Envoy is a cloud-native high-performance edge/middle/service proxy written in C++ and hosted by the CNCF. It serves as a data plane in service meshes and as a load balancer/gateway for microservices.
-
1.4
deepseek-ai/3FS
3FS is a distributed file system from DeepSeek for AI training and inference workloads, using SSDs and RDMA networks as a shared storage layer.
-
1.3
perplexityai/SPACE
A platform for running code in isolated Firecracker microVMs. Applications use its HTTP API to create Linux environments, execute commands, and manage sandbox lifecycles.
-
1.3
goharbor/harbor
Harbor is a CNCF open source cloud native registry that stores, signs, and scans container images and Helm charts. It extends Docker Distribution with RBAC, replication, LDAP/OIDC auth, and auditing.
-
1.2
open-telemetry/opentelemetry-collector-contrib
Repository of additional components (receivers, processors, exporters, extensions) for the OpenTelemetry Collector that are not part of the core. Used to collect, process, and export telemetry (traces, metrics, logs)…
-
1.2
microsoft/WSL
Windows Subsystem for Linux lets you run Linux command-line tools and applications directly on Windows without a virtual machine or dual boot. This repository hosts the WSL source code, documentation and issue tracker.
-
1.1
eooce/Cloudflare-Tunnel-Panel
A single-file Cloudflare Worker panel for managing Argo/Cloudflare Tunnels across multiple accounts: create or delete tunnels, edit ingress routes and DNS, view tokens and status, with optional Telegram up/down alerts.
-
1.1
argoproj/argo-workflows
Container-native workflow engine for Kubernetes that orchestrates parallel jobs as Kubernetes CRDs, defining each step as a container and modeling dependencies via DAGs or sequences.
-
1.1
kopia/kopia
Cross-platform backup tool that creates encrypted, compressed, deduplicated snapshots of selected files and directories, stored locally or in cloud storage. Includes CLI and GUI.
-
1.0
ossrs/srs
SRS is a real-time media server for live streaming that supports RTMP, WebRTC, HLS, HTTP-FLV, SRT, MPEG-DASH, and GB28181 with codecs H.264, H.265, AV1, VP9, AAC, Opus, and G.711. It is used to set up live broadcasts…
-
1.0
open-telemetry/opentelemetry-go
The Go implementation of OpenTelemetry: API and SDK for collecting distributed traces, metrics, and logs and exporting them to observability platforms.
-
1.0
ROCm/rocm-systems
Super-repo consolidating ROCm systems projects (HIP, rocprofiler, amdsmi, etc.) to unify build, CI and integration; the first set of components targets building PyTorch for AMD GPUs.
-
1.0
CLoaKY233/siltop
Terminal system monitor for Apple Silicon Macs: shows CPU and GPU load, power, temperatures, fans, network, disk and processes without root.
-
1.0
NVIDIA/nccl
NCCL is a standalone C++ library of collective communication primitives (all-reduce, all-gather, broadcast, reduce-scatter, send/receive) optimized for high-bandwidth inter-GPU communication over PCIe, NVLink,…
-
1.0
kedacore/keda
KEDA is a Kubernetes-based event-driven autoscaling component. It scales containers (including from/to zero) based on external event source metrics via a Kubernetes Metrics Server and CRD.
-
0.9
istio/istio
An open source service mesh that transparently layers onto distributed applications, providing a uniform way to connect, secure and monitor microservices with little or no code changes.
-
0.9
free-dam-man/homeline-residential-exit-skill
An AI-oriented deployment skill that builds a residential-IP exit VLESS+Reality proxy chain on your own VPS using only free components (VPN Gate, Xray, Docker).
-
0.9
DataDog/datadog-agent
Source code of Datadog Agent v6 and v7 — an agent that collects metrics, logs and traces from hosts and containers and ships them to the Datadog platform.
-
0.9
bealesh/neckbeard
A plugin for coding agents that turns an app repo into reviewable cloud infrastructure and a monthly cost estimate, rendering tested OpenTofu modules for AWS, GCP, or Azure. The agent analyzes and explains, while…
-
0.8
oscarlosu-lab/USBAnywhere
An open-source VirtualHere alternative that turns a Linux or Windows machine into a USB-over-IP server, letting Windows 10/11 connect unlimited USB devices over LAN, Wi-Fi, or the internet.
-
0.8
free-dam-man/warp-zerotrust-masque-skill
A set of instructions and scripts for setting up Cloudflare WARP via your own Zero Trust account with the MASQUE protocol, packaged as a step-by-step skill for an AI assistant. Helps bypass WireGuard blocking and speed…
-
0.7
ZLMediaKit/ZLMediaKit
A cross-platform C++11 streaming framework providing server and client support for RTSP, RTMP, HLS, HTTP-FLV, WebSocket-FLV, GB28181, WebRTC, SRT and STUN/TURN. It handles real-time video ingest, protocol conversion…
-
0.7
axernel-labs/stackdome
Open-source, self-hostable application delivery platform and alternative to Railway, Render and Heroku. It takes an app from git push or container image to a live release, with builds, managed Postgres, TLS, per-branch…
-
0.6
Mailu/Mailu
Mailu is a full-featured mail server distributed as a set of Docker images. It provides IMAP/SMTP, webmail, antispam, and security without proprietary components.
-
0.3
decdn/decdn
A decentralized CDN where bonded operators cache and serve BLAKE3-addressed blobs over iroh QUIC, and clients pay per megabyte in USDC via off-chain vouchers backed by a shared on-chain pool on Arbitrum.
-
0.3
amazonlinux/amazon-linux-2023
AWS's Fedora-based Linux distribution for running cloud applications on EC2, offering long-term support, quarterly updates, repository version locking and a hardened security posture. Available at no charge as AMIs for…
-
0.0
Rajkumar-21/azure-mcp-server
A Python MCP server that exposes Azure resource management (resource groups, storage accounts) to MCP clients with multiple authentication methods.
-
0.0
frocher/botnbot_mcp
MCP server for monitoring website availability and performance, and tracking their carbon footprint (CO2). Connects to the Botnbot API and provides metrics for 24 hours, 7 or 30 days.
-
0.0
devopness/devopness
DevOps platform with an MCP server for AI agents: provisions apps and cloud infrastructure on AWS, Azure, GCP, DigitalOcean and Hetzner, replacing Terraform, Ansible, CI/CD and PaaS. The repo holds SDKs (JS/TS,…
-
0.0
Samsara-1999/Bursar
Self-hosted platform for governing shared Linux GPU servers: central accounting of GPU/CPU usage, quotas, points, account mapping and access policies, while users keep their normal SSH workflow.
-
0.0
t4t5/owly
Radio backend for omdrop that brings AirDrop to non-Apple Wi-Fi cards. It runs AWDL in userspace via OWL on a monitor interface, targeting the MediaTek MT7925 while Wi-Fi stays connected.
-
0.0
DataDog/dd-trace-go
Go client libraries for Datadog APM, continuous profiling, and application security monitoring, letting you trace requests across services and profile Go apps.