Topics / #infrastructure
Infrastructure projects on GitHub
Platforms and tooling for managing infrastructure and internal developer services.
As of , the most-starred Infrastructure projects on GitHub are kubernetes (128.3K stars), daytona (71.5K stars) and ansible (71K stars). GitHub.Locker tracks 90 Infrastructure repositories with 1.7M stars combined. The fastest-growing on October 16 was SPACE, with +529 stars in a day.
Hot right now
Most stars gained in a day · Oct 16
+529SPACE
perplexityai/SPACE · ★ 1.1KSPACE (Sandboxed Platform for Agentic Code Execution) is a sandbox platform that runs agent and user code inside isolated Firecracker microVMs, controlled through an HTTP API.
+34kryvora-node
kryvora-network/kryvora-node · ★ 1.4KIt's the official client daemon for Kryvora Network, a decentralized physical infrastructure network (DePIN). Running it turns your machine into a verification worker that connects to the Kryvora Hub, executes telemetry probes, verifies peer state, and reports proof of availability.
+21open-compute
elliothux/open-compute · ★ 2Kopen-compute is a self-hosted platform that runs Cloudflare Workers code unchanged on hardware you control, reimplementing Workers, KV, D1, R2, Durable Objects, Queues, Workflows, Cron, Cache, Images, Vectorize and AI Search as a single Rust binary.
+20kubernetes
kubernetes/kubernetes · ★ 128.3KKubernetes (K8s) is an open source system for managing containerized applications across multiple hosts, handling the deployment, maintenance, and scaling of those applications.
The all-time top
90 projects · by stars
- 128.3K
#1 · kubernetes/kuberneteskubernetes
Kubernetes (K8s) is an open source system for managing containerized applications across multiple hosts, handling the deployment, maintenance, and scaling of those applications.
- 71.5K
#2 · daytonaio/daytonadaytona
Daytona is a secure, elastic infrastructure runtime for running AI-generated code inside isolated sandboxes, used by agents and developers through SDKs, an API, and a CLI.
- 71K
#3 · ansible/ansible
ansible
Ansible is a radically simple IT automation system for configuration management, application deployment, cloud provisioning, ad-hoc tasks, network automation, and multi-node orchestration.
- 4

node
68.3Kbase/node · ShellA Docker build for running a Base node. Base is a secure, low-cost, developer-friendly Ethereum L2 built on Optimism's OP Stack, with base-reth-node as the execution client and base-consensus as the consensus client.
- 5
etcd
52.4Ketcd-io/etcd · GoA distributed, reliable key-value store for the most critical data of a distributed system, written in Go and kept consistent across machines with the Raft consensus algorithm.
- 6

kubernetes-the-hard-way
50.4Kkelseyhightower/kubernetes-the-hard-wayA step-by-step tutorial that walks you through bootstrapping a Kubernetes cluster manually, without any automation scripts, so you learn how every component actually works.
- 7

diagrams
42.7Kmingrammer/diagrams · PythonDiagrams is a Python library that draws cloud system architecture as code: you describe your AWS, Azure, GCP or Kubernetes setup in Python and get a rendered diagram. It was built for prototyping architecture designs without design tools.
- 8
novu
40.2Knovuhq/novu · TypeScriptNovu is open-source communication infrastructure that lets products and AI agents send messages to users across Inbox, Email, SMS, Push, Chat, Slack, Microsoft Teams, Telegram, WhatsApp and more through one API and one unified conversation model.
- 9

compose
38.4Kdocker/compose · GoDocker Compose is a tool for defining and running multi-container Docker applications, configured through a single Compose file (compose.yaml).
- 10

firecracker
37.4Kfirecracker-microvm/firecracker · RustFirecracker is an open-source virtualization technology for creating and managing secure, multi-tenant microVMs for container and function-based serverless workloads.
- 11

og-aws
36.5Kopen-guides/og-aws · ShellA free, community-maintained practical guide to Amazon Web Services — a living reference that consolidates links, tips, gotchas, and best practices, written by engineers who use AWS.
- 12

k9s
34.8Kderailed/k9s · GoK9s is a terminal UI that lets you navigate, observe and manage Kubernetes clusters in real time instead of typing raw kubectl commands.
- 13

backstage
34.6Kbackstage/backstage · TypeScriptAn open source framework for building developer portals — one centralized place for your microservices, infrastructure tooling and documentation. Originally built at Spotify, now hosted by the CNCF.
- 14
k3s
34.2Kk3s-io/k3s · GoK3s is a lightweight, fully conformant, production-ready Kubernetes distribution packed into a single binary under 100 MB that runs with roughly half the memory of standard Kubernetes.
- 15
kafka
34Kapache/kafka · JavaApache Kafka is an open-source distributed event streaming platform used by thousands of companies for high-performance data pipelines, streaming analytics, data integration, and mission-critical applications.
- 16

signoz
32.4KSigNoz/signoz · TypeScriptSigNoz is an open-source observability platform built on OpenTelemetry: logs, metrics, traces, alerts, and dashboards in one tool for debugging production apps and monitoring AI agents.
- 17

minikube
32.2Kkubernetes/minikube · GoMinikube runs a local Kubernetes cluster on macOS, Linux, or Windows so developers can build and test Kubernetes applications on their own machine.
- 18

dokku
32.2Kdokku/dokku · GoDokku is a Docker-powered PaaS (Platform as a Service) - a self-hosted, minimal Heroku alternative that helps you build and manage the lifecycle of applications on your own server.
- 19

linera-protocol
32.1Klinera-io/linera-protocol · RustLinera is a decentralized blockchain infrastructure built for highly scalable, secure, low-latency Web3 applications, using a microchain architecture where each user can own their own chain.
- 20
consul
30.1Khashicorp/consul · GoConsul is a distributed, highly available, data center aware solution for connecting and configuring applications across dynamic, distributed infrastructure. It is built to be datacenter aware and can support any number of regions without complex configuration.
- 21

envoy
29.1Kenvoyproxy/envoy · C++Envoy is a cloud-native, high-performance proxy for edge, middle, and service-to-service traffic. It is an open-source project hosted by the CNCF.
- 22
nixpkgs
26.5KNixOS/nixpkgs · NixNixpkgs is a collection of over 140,000 software packages that can be installed using the Nix package manager, and it also implements NixOS, a purely-functional Linux distribution built on top of those packages.
- 23

prefect
24KPrefectHQ/prefect · PythonPrefect is a Python workflow orchestration framework for turning ordinary scripts into resilient, production-grade data pipelines with scheduling, retries, caching, and event-based automations.
- 24
netbox
21.7Knetbox-community/netbox · PythonNetBox is the open-source source of truth for network infrastructure: it models and documents everything networked — racks, cables, IP addresses — and serves that data to your automation tools.
- 25

containerd
21.4Kcontainerd/containerd · Gocontainerd is an industry-standard container runtime — a daemon for Linux and Windows that manages the complete container lifecycle of its host: image transfer and storage, container execution and supervision, and low-level storage and network attachments. It's a CNCF graduated project.
- 26

sonic
21.4Kvaleriansaliou/sonic · RustSonic is a fast, lightweight and schema-less search backend written in Rust — a simple alternative to heavyweight systems like Elasticsearch, built to answer search queries in microseconds.
- 27

teleport
21Kgravitational/teleport · GoTeleport is an open-source access platform for infrastructure: connectivity, authentication, access controls and audit for servers, Kubernetes, databases, desktops and web apps — without long-lived keys or passwords.
- 28
ingress-nginx
19.5Kkubernetes/ingress-nginx · Goingress-nginx was an Ingress controller for Kubernetes that used NGINX as a reverse proxy and load balancer to route traffic into clusters. The project is now retired.
- 29

cat
18.9Kdianping/cat · JavaCAT is an open-source real-time application monitoring platform (APM) written in Java at Meituan-Dianping. It collects performance metrics, health status and alerts from your services and turns them into live reports.
- 30

kubespray
18.8Kkubernetes-sigs/kubespray · JinjaKubespray is a set of Ansible playbooks that deploys a production-ready, highly available Kubernetes cluster on cloud VMs or your own bare-metal servers.
- 31

telegraf
17.9Kinfluxdata/telegraf · GoTelegraf is an open-source agent for collecting, processing, aggregating, and writing metrics, logs, and other arbitrary data. It ships with 300+ plugins covering system monitoring, cloud services, and messaging.
- 32

ctop
17.8Kbcicen/ctop · Goctop is a terminal tool that shows a top-like, real-time overview of metrics for all your running containers, plus a detailed single-container view.
- 33

chaosmonkey
17.2KNetflix/chaosmonkey · GoChaos Monkey is a resiliency tool from Netflix that randomly terminates virtual machine instances and containers in your production environment, so engineers face failures often enough that they build services able to tolerate them.
- 34
ceph
17.1Kceph/ceph · C++Ceph is an open-source distributed storage platform: it pools a cluster of servers into one scalable storage system that serves object, block, and file storage at the same time.
- 35

coder
17.1Kcoder/coder · GoCoder is a self-hosted platform for creating cloud development environments and running AI coding agents on your own infrastructure.
- 36
nomad
17Khashicorp/nomad · GoNomad is a workload orchestrator from HashiCorp that deploys and manages containers, non-containerized apps, and virtual machines across on-prem and cloud infrastructure at scale.
- 37

postal
16.9Kpostalserver/postal · RubyPostal is a complete, fully featured mail server and delivery platform for websites and web servers, handling both incoming and outgoing e-mail.
- 38
kubeflow
15.9Kkubeflow/kubeflowKubeflow is the foundation of tools for building AI platforms on Kubernetes, covering every stage of the AI lifecycle through a set of composable, Kubernetes-native subprojects.
- 39
packer
15.8Khashicorp/packer · GoPacker is a tool for creating identical machine images for multiple platforms from a single source configuration. It is lightweight, runs on every major OS, and builds images for multiple platforms in parallel.
- 40

salt
15.7Ksaltstack/salt · PythonSalt is an event-driven automation engine built on Python to deploy, configure and manage complex IT systems at scale — and keep every component of your infrastructure in a consistent desired state.
- 41

xg2xg
15.7Kjhuangtw/xg2xgA cheatsheet-style lookup table mapping Google internal technologies and services to their open source, cloud or SaaS equivalents, built by an ex-Googler to help ex-Googlers survive the real world.
- 42

fabric
15.5Kfabric/fabric · PythonFabric is a high-level Python library for executing shell commands on remote servers over SSH and getting back useful Python objects, built for automation and deployment tasks.
- 43

zitadel
15.3Kzitadel/zitadel · GoZITADEL is an open-source identity and access management platform: a single server that handles sign-in, SSO, MFA, passkeys and permissions for your apps, self-hosted or as a cloud service.
- 44

kamal
14.6Kbasecamp/kamal · RubyKamal is a deployment tool that lets you ship web apps packaged as Docker containers to any server, from bare metal machines to cloud VMs, with zero downtime.
- 45

thanos
14.2Kthanos-io/thanos · GoThanos is a set of components that turn existing Prometheus deployments into a highly available metric system with unlimited storage capacity. It is a CNCF Incubating project written in Go.
- 46

cert-manager
14.1Kcert-manager/cert-manager · Gocert-manager adds certificates and certificate issuers as resource types in Kubernetes, automating the process of obtaining, renewing, and using TLS certificates for workloads in a cluster.
- 47

nginx-rtmp-module
14Karut/nginx-rtmp-module · Cnginx-rtmp-module turns NGINX into a media streaming server, adding RTMP, HLS and MPEG-DASH live streaming plus RTMP video-on-demand playback of FLV/MP4 files.
- 48

opennhp
13.9KOpenNHP/opennhp · GoOpenNHP is a lightweight, cryptography-powered, open-source Zero Trust toolkit: it hides server ports, IP addresses, and domain names so your infrastructure stays invisible until a client is cryptographically authorized.
- 49
node_exporter
13.8Kprometheus/node_exporter · Gonode_exporter is a Prometheus exporter that exposes hardware and OS metrics (CPU, memory, disk, network, filesystem, etc.) from Unix-like kernels so Prometheus can scrape and monitor them.
- 50
rook
13.7Krook/rook · GoRook is an open-source storage orchestrator for Kubernetes: it deploys and manages Ceph inside your cluster, turning Kubernetes itself into your storage platform.
- 51
fluentd
13.6Kfluent/fluentd · RubyFluentd is an open-source log collector that sits at the center of your logging setup: it gathers events from many data sources and writes them to files, RDBMS, NoSQL, IaaS, SaaS, Hadoop and more.
- 52
runc
13.5Kopencontainers/runc · Gorunc is a command-line tool for spawning and running containers on Linux according to the OCI (Open Container Initiative) specification.
- 53

runner-images
13.5Kactions/runner-images · PowerShellIt's the source code GitHub uses to build the VM images behind GitHub-hosted Actions runners and Microsoft-hosted Azure Pipelines agents — Ubuntu, macOS and Windows machines pre-loaded with development tools.
- 54

komodo
12.7Kmoghtech/komodo · RustKomodo is a self-hosted platform for building and deploying software across many servers, giving teams a central dashboard to manage builds, deployments and server automation with no hard limit on scale.
- 55
ubicloud
12.3Kubicloud/ubicloud · RubyUbicloud is an open source cloud platform that runs on bare metal servers, offering elastic compute, non-replicated block storage, firewall and load balancer, managed Postgres, Kubernetes, AI inference, and IAM services as an open alternative to AWS.
- 56

crossplane
12.2Kcrossplane/crossplane · GoCrossplane is a framework for building cloud native control planes without writing code. It orchestrates applications and infrastructure across any environment through a declarative, Kubernetes-style API.
- 57

LMCache
12.1KLMCache/LMCache · PythonLMCache is a KV cache management layer for LLM inference that turns the KV cache from a temporary, per-process state into reusable, persistent 'AI-native knowledge' that can be shared across serving engines, reducing time-to-first-token and boosting throughput for long-context, multi-turn, and RAG workloads.
- 58

linkerd2
11.5Klinkerd/linkerd2 · GoLinkerd is an ultralight, security-first service mesh for Kubernetes that adds encryption, observability, and reliability features to your cluster's traffic without requiring any code changes to your apps.
- 59

wireguard-install
11.4Kangristan/wireguard-install · ShellA bash script that sets up a WireGuard VPN on a Linux server, forwarding all your traffic through an encrypted tunnel and NATing it so you appear to browse with the server's IP.
- 60
talos
11.4Ksiderolabs/talos · GoTalos is a modern Linux-based operating system built specifically for running Kubernetes: secure, immutable, and minimal, with all system management done through an API instead of a shell.
- 61

vcluster
11.4Kloft-sh/vcluster · GovCluster creates Tenant Clusters: fully isolated virtual Kubernetes clusters, each with its own API server, CRDs, and RBAC, running on top of an existing Kubernetes cluster or standalone on bare metal.
- 62

chalice
11.1Kaws/chalice · PythonChalice is a Python framework for writing serverless apps: you write ordinary Python functions, and it creates and deploys the AWS Lambda functions and REST APIs behind them.
- 63
Checkmate
11Kbluewave-labs/Checkmate · TypeScriptCheckmate is an open-source, self-hosted tool that monitors server uptime, response times, hardware (CPU, RAM, disk), and incidents in real time with dashboards and status pages.
- 64
distribution
10.7Kdistribution/distribution · GoThe open source registry implementation for storing and distributing container images and other content — the toolkit to pack, ship, store, and deliver container content, built on the OCI Distribution Specification.
- 65

Reloader
10.5Kstakater/Reloader · GoReloader is a Kubernetes controller that watches ConfigMaps and Secrets and automatically triggers rolling restarts of the workloads that reference them — Deployments, StatefulSets, DaemonSets and more.
- 66
nezha
10.4Knezhahq/nezha · GoNezha Monitoring is a self-hosted, lightweight tool for monitoring your servers and websites and handling O&M from one dashboard: status checks, alerts, scheduled tasks and a web terminal.
- 67

metaflow
10.3KNetflix/metaflow · PythonMetaflow is an open-source Python framework for building, managing and deploying real-life AI and ML systems — from quick prototyping in notebooks to reliable production deployments.
- 68

3FS
10.3Kdeepseek-ai/3FS · C++3FS (Fire-Flyer File System) is a high-performance distributed file system built by DeepSeek to handle AI training and inference storage workloads at scale, pooling thousands of SSDs and hundreds of storage nodes behind RDMA networking into one shared storage layer.
- 69
CKAD-exercises
10.2Kdgkanatsios/CKAD-exercisesA curated set of hands-on exercises to help you prepare for the Certified Kubernetes Application Developer (CKAD) exam from the Cloud Native Computing Foundation.
- 70
openbao
8.5Kopenbao/openbao · GoOpenBao is a software solution to manage, store, and distribute sensitive data such as secrets, certificates, and keys, including on-demand generation of dynamic credentials and encryption-as-a-service.
- 71

tart
7.5Kopenai/tart · SwiftTart lets you create and run macOS and Linux virtual machines directly on Apple Silicon Macs, built specifically for use in CI pipelines and other automated workflows.
- 72

awesome-opensource-ai
4.9Kalvinreal/awesome-opensource-ai · PythonA curated, daily-updated list of truly open-source AI projects, models, tools, and infrastructure.
- 73

fleetbase
4.4Kfleetbase/fleetbase · JavaScriptFleetbase is an open-source, modular operating system for logistics and supply chain operations. It covers dispatch, fleet management, live tracking, commerce, warehousing, and finance in one platform, with a REST API, webhooks, and an extension system.
- 74

zsvirt
2KZSvirt/zsvirt · JavaZSvirt is an open-source IaaS virtualization engine that brings ZStack's enterprise ZSphere technology to the community, letting you run and manage virtual machines on KVM-based hosts without vendor lock-in.
- 75

open-compute
2Kelliothux/open-compute · Rustopen-compute is a self-hosted platform that runs Cloudflare Workers code unchanged on hardware you control, reimplementing Workers, KV, D1, R2, Durable Objects, Queues, Workflows, Cron, Cache, Images, Vectorize and AI Search as a single Rust binary.
- 76

kryvora-node
1.4Kkryvora-network/kryvora-node · GoIt's the official client daemon for Kryvora Network, a decentralized physical infrastructure network (DePIN). Running it turns your machine into a verification worker that connects to the Kryvora Hub, executes telemetry probes, verifies peer state, and reports proof of availability.
- 77

golive-skill
1.3Kmikehasa/golive-skill · TypeScriptGoLive is an open-source Agent Skill plus a zero-dependency Node CLI that takes an agent-built app live by detecting what it needs, planning the exact changes, asking for your approval, applying them with your own accounts, and verifying what actually works - covering hosting, databases, domains, email and payments.
- 78

SPACE
1.1Kperplexityai/SPACE · RustSPACE (Sandboxed Platform for Agentic Code Execution) is a sandbox platform that runs agent and user code inside isolated Firecracker microVMs, controlled through an HTTP API.
- 79
awesome-hosting
943dalisoft/awesome-hostingA curated directory of hosting providers — from VPS and static hosts to databases, GPU clouds and AI inference — comparing each one by the price of its cheapest plan.
- 80

openframe-cli
907flamingo-stack/openframe-cli · GoAn interactive command-line tool for managing OpenFrame Kubernetes clusters and development workflows — cluster lifecycle, chart installs via ArgoCD, service intercepts and scaffolding.
- 81
memcode
603memcode-in/memcode · TypeScriptMemCode is memory infrastructure for AI: it gives agents, copilots, applications and workflows persistent memory that survives sessions, context windows, and even model changes.
- 82

openclaw-enterprise
415openclaw/openclaw-enterprise · JavaScriptOpenClaw Enterprise (OCE) is an open-source, vendor-neutral control plane for deploying and managing AI agents, described by its authors as being like 'Kubernetes for agents'.
- 83

allox-os
313AlloxOrg/allox-os · PythonA dedicated runtime for AI agents: it runs multiple agents and sessions inside a Kata-isolated VM and adds workspace isolation, checkpointing, rollback and observability on top of it.
- 84
labtether
249labtether/labtether · GoLabTether is a self-hosted control plane that unifies monitoring and control of your homelab (Proxmox, TrueNAS, Docker, Home Assistant, etc.) into one dashboard with remote terminal, remote desktop, alerts, and an AI-operable interface.
- 85

walshadow
242ClickHouse/walshadow · Rustwalshadow replicates PostgreSQL rows into ClickHouse by reading the physical WAL — initial load, continuous changes, schema evolution, restarts, and planned source switchover are all part of the flow.
- 86

nodelume
203chenb1522/nodelume · GoNodeLume is a lightweight multi-node Linux server monitoring and management tool made up of a static Go Server, a static Go Agent, and a native Web UI, built for low resource usage, simple deployment, and strict remote-control boundaries.
- 87

busbar
194GetBusbar/busbar · RustBusbar is a self-hosted execution control plane that sits between AI applications and the AI providers they call, letting operators verify, govern, route, and record every model request, MCP tool call, and A2A agent delegation before it reaches its destination.
- 88

marzban-node
171x4gpanell/marzban-node · DockerfileA Dockerfile that builds and deploys the 'Marzban-node' VPN node service on Railway, patching it at build time so it fits Railway's networking model instead of shipping a copied fork of the source.
- 89

walgithub
134rgodha24/walgithub · Rustwalgit is a self-hosted git server that runs as a single binary in front of an S3 or GCS bucket instead of a database or local disk. The bucket is the repository, and every running instance is just a disposable cache, so you can add or kill servers without coordination.
- 90

BloomBeacon
83vinamega/BloomBeacon · PythonBloomBeacon is a Python tool for real-time data processing and auto-scaling of cloud-based systems, built to be cloud-agnostic rather than tied to one provider.
Related topics
Often tagged together
- linux4,184
- open-source5,666
- devops455
- self-hosted1,929
- docker1,660
- server1,459
- go681
- apache-2.01,434
- kubernetes316
- cli2,227
- cloud443
- developer-tools2,924
- macos3,544
- cloud-native122
- windows3,403
- api1,094
- automation1,183
- monitoring418
- sysadmin205
- containers121
- networking565
- security976
- distributed-systems270
- observability236