Infrastructure and DevOps projects from Show HN — deployment tools, monitoring, orchestration, and cloud infra.
Free, open-source AWS emulator. LocalStack alternative: 41 services, 3,704 operations, true 100% Smithy conformance (124,255/124,255 variants pass). No account, no auth token, no paid tier.
LocalStack went proprietary—this AGPL binary fills the gap with 54k test variants.
Idle VMs snapshot to disk and wake in 3.7ms, making serverless VMs actually viable.
Novel TCP simultaneous open algorithm and plugin cascade beat WebRTC and libp2p complexity.
Repurposes BOINC for AI-driven science where agents design and verify physics experiments autonomously.
Aion — AI self-healing microkernel. Detects crashes, analyzes them via AI, hot-patches the kernel in under 2 seconds.
AI daemon hot-patches crashes in 2 seconds—nobody's done self-healing OS like this.
Dual-signed transaction records where neither party controls the authoritative copy.
Entire CDMA2000 stack in Rust lets you run a private cellular network on an SDR.
Entire OS—kernel, sources, docs—fits on one ISO. Rebuild offline on your laptop. True sovereignty.
Full C runtime in a 510-byte bootloader—genuinely impressive constraint engineering.
Human-in-the-loop API with 12-minute latency specifically designed for AI agent fallbacks.
First protocol letting AI agents buy things without humans—WooCommerce integration already works.
Compiles human-written amendment acts into executable law without rewriting legislation as code.
Replaces supercomputer-hour PDE solvers with <100ms browser math. Validated against NIST and peer review.
HIC: A hierarchical isolation kernel reference architecture. Unifying security, performance, and modularity in a single design, enabling deployment from embedded to cloud with full lifecycle evolution.
Same-ring isolation using MMU hardware to block addresses instead of software privilege switches.
WebAssembly contracts defining merge operations solve decentralized consistency without servers.
SQLite extension + bindings for Postgres NOTIFY/LISTEN semantics with durable queues, streams, pub/sub, and scheduler
WAL-based push semantics eliminate polling—Redis queues without the Redis.
Zero-code sharding proxy with cross-shard aggregates in production, serving millions QPS today.
SQLite VFS with sub-100ms cold JOIN queries from S3 + page-level compression and encryption
Beats Neon's 500ms cold starts by architecting SQLite around S3 constraints.
Distributed WASM runtime. Workloads place themselves over a zero-trust mesh. One static binary.
Leaderless WASM cluster where nodes self-organize via local state, no control plane needed.
Dual-architecture microkernel that boots on real hardware with zero AI in the kernel.
FreeRDP RemoteApp over Docker makes Windows apps feel native on Linux without Wine.
Identity-aware VPN and tunneled reverse proxy for remote access based on WireGuard®.
P2P WireGuard VPN beats Twingate's central-server model without mesh VPN's flat-network mess.
Unmaintained libxml2 replaced with memory-safe Rust, 1727/1727 W3C tests pass, C API compatible.
Experimental thread-like processes, multiple executables in one address space
Zero-copy pointer sharing between independent binaries via ASLR manipulation.
User-space TCP/IP stack means VPN works in containers without privileged mode.
A Redis-compatable key-value store. Up to 10x faster. Native vector support.
1MB Docker image beats Redis 30MB while hitting 10M ops/sec.
3.9s cold starts vs 45s+ for quantized models—real infra pain solved tangibly.
Rivet Actors are the primitive for stateful workloads. Built for AI agents, collaborative apps, and durable execution.
Per-actor SQLite eliminates single-table DynamoDB pain—real schema flexibility at scale.
SNKV — a lightweight key-value store focused on simplicity, security and performance file based database , written using b-tree directly. Now supports vector HNSW , Join the discussion: https://discord.gg/EUb4Y5qE
SQLite B-tree without SQL: 57–68% faster KV ops, single-header drop-in.
Centralized circuit breakers fix the per-instance state problem Opossum, Resilience4j miss.
Sub-millisecond VM sandboxes for AI agents via copy-on-write forking
0.79ms VM spawn time beats E2B's 150ms using CoW memory forking on real KVM isolation.
VPC-deployed AI SRE that beats Datadog on cost while keeping logs inside your trust boundary.
RabbitMQ alternative in Crystal that runs on a fraction of the hardware.
30MB memory and instant startup vs Chrome's 200MB and 2-second load.
C++ search engine inside SereneDB claiming to outperform Lucene and Tantivy on benchmarks.
Per-user agent environments with persistent DB and storage that pause when idle.
Docker server monitoring without the stack. Metrics, logs, and alerts from your terminal. Single binary, zero exposed ports, SSH-only.
Grafana+Prometheus replacement in one Go binary over SSH—zero HTTP, pure pragmatism.
Free SMS and email verification for AI agent fleets at scale.
Firecracker-like microVMs for Proxmox VE — KVM isolation, under 200 ms boot.
Unlocks QEMU microvm isolation in Proxmox without switching to Firecracker or Kubernetes.
Shadow Clone forks VMs in 20ms with container-like memory efficiency.
Three protocols from one process with POSIX tests in CI—s3fs and goofys can't match this verification.
Open-source event streaming platform built on S3. Kafka-compatible APIs, built-in SQL engine, schema registry — one Rust binary replaces Kafka + ZooKeeper + KSQL. Retention costs pennies, not thousands
Removes broker disk complexity entirely—S3 as durable log cuts Kafka ops burden and cost dramatically.
Sorted heap table AM for PostgreSQL with zone map scan pruning
Zone-mapped sorted heap with 30x smaller IVF index than HNSW, no pgvector limits.
Swaps MinIO binary to RustFS without migrating petabytes of data.
htop for the airwaves — a live 802.11 (Wi-Fi) RF dashboard in your terminal
eBPF kernel tracing lets you sniff Wi-Fi without monitor mode or disconnecting.
AI-powered SRE platform — read-only infrastructure diagnostics with deep investigation, security governance, and team collaboration
Hypothesis-driven SRE agent with memory—read-only safety and real-world incident tooling.
CLI-first metrics for AI agents—Metabase and Looker still need dashboards to query data.
Datomic-style immutability in a SQLite-sized embedded library — genuinely novel combination.
813 projects
