# Qtap

> Qtap is a self-hosted, open-source eBPF agent capturing network traffic before TLS encryption for HTTPS payload visibility without app changes.

- **Category:** Network Monitoring
- **Licence:** Apache-2.0
- **Latest version:** v0.17.1
- **Open source:** oss
- **Languages:** C, Go
- **Platforms:** Docker, Kubernetes, Linux, Helm
- **Tags:** Security, Observability, Developer Tools, Network Monitoring, Tls, Kubernetes, Docker, Go, Golang, Linux, Debugging, Containers, Ebpf, Traffic analysis, Pre Encryption, Process Attribution, Libbpf

## Description

Qtap is an eBPF-based network traffic analysis agent that hooks into TLS libraries to capture traffic before encryption and after decryption. It runs on Linux with kernel 5.10+ and BTF enabled, and can be deployed as a standalone binary, Docker container, Helm chart, or Kubernetes DaemonSet. The agent provides process and container attribution for each connection, a flexible plugin system for traffic processing, and multiple output destinations including stdout and S3-compatible storage. It includes a built-in DevTools web UI accessible on port 10001 for live HTTP/S traffic inspection, plus Prometheus metrics endpoints and OpenTelemetry tracing support. The project is in early development (version 0.17.x) and licensed under Apache-2.0.

## Links

- [Homepage](https://github.com/qpoint-io/qtap)
- [Website](https://qpoint.io/products/qtap)
- [Docker](us-docker.pkg.dev/qpoint-edge/public/qtap:v0)
- [Documentation](https://docs.qpoint.io/qtap)
- [GitHub Repository](https://github.com/qpoint-io/qtap)
- [GitHub Discussions](https://github.com/qpoint-io/qtap/discussions)

---
Source: https://selfhost.directory/project/qtap