Open-source infrastructure-as-code software
668 open-source libraries, tools and applications tagged infrastructure-as-code, ranked by how closely infrastructure-as-code is their primary purpose, then by adoption and maintenance health. Each entry links to a page with sources, use cases and when to choose or avoid it.
668 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| frameable/aviary.sh A minimal distributed configuration management tool written entirely in bash, serving as a tiny alternative to Ansible, Chef, or Puppet. Ea… | 23 | 1310 | maintenance |
| jippi/hashi-ui Hashi UI is a web-based user interface for HashiCorp Consul and Nomad, shipped as a single binary or Docker image. It provides live-updatin… | 10 | 1223 | maintenance |
| kudobuilder/kudo KUDO (Kubernetes Universal Declarative Operator) is a framework and CLI for building production-grade Kubernetes operators declaratively, c… | 23 | 1217 | maintenance |
| Netflix/rend Rend is a memcached-compatible proxy server written in Go that manages data chunking and coordinates L1 (RAM) and L2 (SSD-backed) cache tie… | 32 | 1192 | maintenance |
| nat-henderson/terraform-provider-dominos A Terraform provider plugin that lets you order Domino's Pizza through HashiCorp Terraform configuration files. It defines data sources for… | 32 | 1181 | maintenance |
| rumpkernel/rumprun Rumprun is a unikernel built on rump kernels that runs unmodified POSIX applications on hypervisors (KVM, Xen) and bare metal. It includes … | 32 | 1177 | maintenance |
| shinken-solutions/shinken Shinken is a Nagios-compatible monitoring framework written in Python, designed with a flexible, distributed architecture that scales to la… | 32 | 1135 | maintenance |
| ehazlett/stellar Stellar is a simplified container runtime cluster system built on containerd, written in Go. It joins one or more nodes into an eventually … | 23 | 1131 | maintenance |
| hashivim/vim-terraform A Vim plugin providing Terraform integration, including a :Terraform command with tab completion, syntax highlighting for HCL/Terraform fil… | 39 | 1106 | maintenance |
| gaia-app/gaia Gaia is a self-hosted web application providing a UI for Terraform modules and self-service infrastructure. It lets teams import modules fr… | 23 | 1081 | maintenance |
| Berkshelf Berkshelf is a CLI tool for managing Chef Infra cookbooks and their dependencies, resolving and fetching them from sources like the Chef Su… | 23 | 1070 | maintenance |
| voilet/cmdb A Django-based CMDB (Configuration Management Database) web application with integrated SaltStack UI for IT asset management. It provides a… | 32 | 1063 | maintenance |
| lework/kainstall A single-file shell script that installs Kubernetes high-availability clusters based on kubeadm with one command, including server initiali… | 23 | 1056 | maintenance |
| 0xPolygon/polygon-edge Polygon Edge is a modular, extensible framework written in Go for building Ethereum-compatible (EVM) blockchain networks with custom consen… | 10 | 1051 | maintenance |
| ljacobsson/cfn-diagram cfn-diagram is a Node.js CLI tool that visualizes AWS CloudFormation, SAM, and CDK templates as diagrams. It can generate draw.io files, in… | 23 | 1022 | maintenance |
| zhaofengli/attic Attic is a self-hostable, multi-tenant Nix binary cache server backed by S3-compatible storage, written in Rust. It provides global dedupli… | 76 | 2093 | experimental |
| nubskr/walrus Walrus is a distributed log streaming engine written in Rust, built on a high-performance write-ahead-log storage engine with segment-based… | 57 | 1933 | experimental |
| Aurae Aurae is a memory-safe distributed systems runtime daemon written in Rust that acts as a process manager and PID-1 initialization system fo… | 66 | 1914 | experimental |
| GoogleCloudPlatform/terraformer Terraformer is a Go CLI tool that generates Terraform configuration (tf/) and tfstate files from existing cloud infrastructure, effectively… | 10 | 14543 | abandoned |
| rebuy-de/aws-nuke A Go CLI tool that deletes all resources from an AWS account, with dry-run defaults and multiple safety confirmations. This original rebuy-… | 10 | 5793 | abandoned |
| tenable/terrascan Terrascan is a static code analyzer for Infrastructure as Code that detects compliance and security violations across Terraform, CloudForma… | 10 | 5214 | abandoned |
| hashicorp/terraform-cdk CDK for Terraform (CDKTF) is a framework for defining infrastructure as code using general-purpose programming languages (TypeScript, Pytho… | 10 | 5066 | abandoned |
| KubeOperator KubeOperator is an open-source lightweight Kubernetes distribution that helps enterprises plan (Day 0), deploy (Day 1), and operate (Day 2)… | 10 | 4970 | abandoned |
| dtan4/terraforming Terraforming is a Ruby CLI gem that exports existing AWS resources into Terraform configuration files (.tf) and state files (.tfstate). It … | 10 | 4250 | abandoned |
| weaveworks/ignite Weave Ignite is a VM manager that runs Firecracker microVMs from OCI/Docker images with a container-like UX and declarative GitOps manageme… | 10 | 3529 | abandoned |
| rancher/k3os k3OS is a minimal Linux distribution purpose-built to run Kubernetes via k3s, designed so the entire OS is managed and upgraded through kub… | 10 | 3477 | abandoned |
| google/lmctfy lmctfy (Let Me Contain That For You) is the open-source version of Google's container stack, providing Linux application containers with re… | 10 | 3400 | abandoned |
| Doozer Doozer is a highly-available, fully consistent distributed data store for small amounts of critical in-memory data, built on a consensus al… | 32 | 3248 | abandoned |
| ConsoleMe ConsoleMe is a web service from Netflix that centralizes AWS IAM permission management, offering console login, self-service permission req… | 10 | 3197 | abandoned |
| Sensu Go Sensu 1.x (Sensu Core) is a Ruby-based, scalable monitoring framework for composing infrastructure monitoring systems with checks, handlers… | 10 | 2864 | abandoned |
| kubernetes-retired/external-storage A retired Kubernetes incubator project containing community-maintained out-of-tree dynamic PersistentVolume provisioners and a helper libra… | 10 | 2688 | abandoned |
| lg/murder Murder is a Ruby-based deploy tool from Twitter that uses BitTorrent (via BitTornado) to distribute files to hundreds or tens of thousands … | 10 | 2509 | abandoned |
| coreos/fleet fleet is a distributed init system that ties together systemd and etcd to schedule systemd units across a cluster of Linux machines. It is … | 10 | 2413 | abandoned |
| docker-archive/deploykit InfraKit is a Go-based toolkit for declarative, self-healing infrastructure orchestration, built from small pluggable components that activ… | 10 | 2253 | abandoned |
| Netflix/asgard Asgard is a web-based tool from Netflix for managing application deployments and cloud infrastructure in Amazon Web Services. It is depreca… | 10 | 2225 | abandoned |
| Blueprint Blueprint is a Python CLI tool that reverse-engineers server configuration by inspecting package managers, config file changes, and source-… | 32 | 2154 | abandoned |
| hyperhq/hyperd HyperContainer daemon (hyperd) with a companion CLI (hyperctl) that runs Docker images on plain hypervisors like QEMU and Xen. It combines … | 10 | 2005 | abandoned |
| systeminit/si System Initiative is an AI-native infrastructure automation platform where AI agents discover infrastructure, propose changes, and execute … | 10 | 1806 | abandoned |
| lyft/clutch Clutch is an extensible open-source web UI and API platform from Lyft for simplifying, accelerating, and de-risking common infrastructure m… | 10 | 1770 | abandoned |
| coreos/torus Torus is a distributed storage system written in Go that pools resources across multiple nodes, coordinated consistently through etcd using… | 10 | 1753 | abandoned |
| faucetsdn/ryu Ryu is a component-based software defined networking (SDN) framework written in Python, providing well-defined APIs for building network ma… | 32 | 1605 | abandoned |
| jeremykross/konstellate Konstellate is a free, open-source GUI for visualizing, creating, and editing Kubernetes resources and their relationships. It lets users b… | 32 | 1457 | abandoned |
| nanopack/yoke Yoke is a Postgres high-availability cluster manager written in Go that provides automatic failover and automated cluster recovery across a… | 10 | 1339 | abandoned |
| cloudavail/aws-missing-tools A suite of shell scripts that extends the AWS command line tools with utilities for managing EC2, EBS, RDS, IAM, CloudFormation, Auto Scali… | 32 | 1331 | abandoned |
| Cloud Foundry (VCAP) VCAP is the original open-source Cloud Foundry platform-as-a-service codebase, comprising core components such as the cloud controller, rou… | 10 | 1302 | abandoned |
| heketi/heketi Heketi is a RESTful volume management framework for GlusterFS that automates the lifecycle of GlusterFS volumes, including brick placement … | 10 | 1257 | abandoned |
| alibaba/tfs TFS (Taobao File System) is a distributed file system developed by Taobao, designed similar to Google File System. It is optimized for stor… | 10 | 1244 | abandoned |
| open-falcon-archive/of-release Open-Falcon (of-release) is an open-source, enterprise-level monitoring system originally developed at Xiaomi, providing metric collection,… | 23 | 1242 | abandoned |
| briefercloud/layerform Layerform is a Terraform wrapper CLI that lets engineers build reusable environment stacks from plain .tf files by stacking infrastructure … | 10 | 1207 | abandoned |
| mozilla/mig MIG (Mozilla InvestiGator) is a distributed platform for real-time digital forensics and endpoint investigation, using agents installed acr… | 10 | 1203 | abandoned |
| brandonhilkert/fucking_shell_scripts A Ruby-based server configuration management tool that provisions cloud servers (via the fog gem) and configures them by running plain shel… | 32 | 1200 | abandoned |
| apache/trafficcontrol Apache Traffic Control is an open-source implementation of a full Content Delivery Network, built around Apache Traffic Server as the cachi… | 10 | 1155 | abandoned |
| dokku-alt/dokku-alt Dokku Alternative is a Docker-powered mini-Heroku PaaS, forked from Dokku, that bundles stable plugins for databases, TLS, zero-downtime de… | 10 | 1153 | abandoned |
| kubernetes-retired/bootkube Bootkube is a Go CLI tool for launching self-hosted Kubernetes clusters by running a temporary control plane that bootstraps a permanent, s… | 10 | 1145 | abandoned |
| klothoplatform/klotho Klotho is an open-source CLI tool that transforms plain application code into cloud-native code using in-code annotations, generating infra… | 48 | 1143 | abandoned |
| sprinkle-tool/sprinkle Sprinkle is a Ruby-based software provisioning tool that builds remote servers via a domain-specific language for defining packages, depend… | 32 | 1143 | abandoned |
| newcontext-oss/kitchen-terraform A set of Test Kitchen plugins that enable converging Terraform configurations and verifying the resulting infrastructure with InSpec contro… | 10 | 1123 | abandoned |
| kubernetes-retired/kube-aws kube-aws is a command-line tool for declaratively creating, updating, and destroying Kubernetes clusters on AWS using CloudFormation. The p… | 10 | 1111 | abandoned |
| awslabs/aws-cfn-template-flip A command-line tool and Python library that converts AWS CloudFormation templates between JSON and YAML formats, using YAML's short functio… | 10 | 997 | abandoned |
| Tailscale Tailscale is an open‑source zero‑trust networking platform built on WireGuard that provides secure, identity‑based connectivity across devi… | 98 | 37016 | active |
| SeaweedFS SeaweedFS is a fast distributed storage system written in Go that provides S3-compatible object storage, a POSIX-compliant distributed file… | 95 | 35551 | active |
| JumpServer JumpServer is an open-source Privileged Access Management (PAM) platform and bastion host that provides secure, audited access to SSH, RDP,… | 100 | 31794 | stable |
| NetBird NetBird is an open-source zero-trust networking platform that builds WireGuard-based peer-to-peer overlay networks with centralized access … | 92 | 29443 | active |
| slackhq/nebula Nebula is a scalable overlay networking tool (mesh VPN) built on the Noise Protocol Framework, using certificates and security groups for m… | 93 | 18399 | stable |
| Coder Coder is a self-hosted platform for provisioning cloud development environments (workspaces) defined with Terraform, accessible via VS Code… | 95 | 17074 | active |
| cloudflare/cloudflared cloudflared is the command-line client and daemon for Cloudflare Tunnel, which creates outbound-only connections from your origin servers t… | 98 | 16080 | stable |
| JuiceFS JuiceFS is a high-performance, POSIX-compatible distributed file system that stores file data in object storage (e.g., Amazon S3) and metad… | 96 | 14549 | stable |
| Netmaker Netmaker is an open-source platform that automates the creation and management of WireGuard-based virtual mesh networks, from homelab to en… | 93 | 11826 | active |
| SkyPilot SkyPilot is an open-source AI compute platform that unifies fragmented infrastructure (Kubernetes, Slurm, VMs, 20+ clouds) into a single po… | 100 | 10724 | active |
| TechnitiumSoftware/DnsServer Technitium DNS Server is an open-source, cross-platform authoritative and recursive DNS server built on .NET, designed for self-hosting wit… | 97 | 10032 | stable |
| FreeBSD The official publish-only Git mirror of the FreeBSD source tree, containing the complete kernel, userland, libraries, boot loader, and buil… | 77 | 9398 | stable |
| FastDFS FastDFS is an open-source high-performance distributed file system written in C, providing file storing, syncing, uploading, and downloadin… | 94 | 9260 | stable |
| smallstep/certificates step-ca is an online private certificate authority (X.509 and SSH) and ACME server for secure, automated certificate management in DevOps e… | 84 | 8939 | active |
| turbot/steampipe Steampipe is a zero-ETL CLI tool that exposes APIs and cloud services as relational database tables so they can be queried live with standa… | 97 | 7968 | active |
| openmediavault openmediavault is a network attached storage (NAS) operating system solution based on Debian Linux, providing a web-based administration in… | 77 | 7010 | active |
| kvcache-ai/Mooncake Mooncake is a KVCache-centric disaggregated serving platform for LLM inference, originally built to serve Kimi by Moonshot AI. It separates… | 90 | 6835 | active |
| derailed/popeye Popeye is a read-only CLI tool that scans live Kubernetes clusters and reports potential issues with deployed resources and configurations.… | 56 | 6397 | active |
| vllm-project/semantic-router vLLM Semantic Router is an open-source programmable routing and control layer for building Mixture-of-Models systems across heterogeneous L… | 80 | 6243 | active |
| AidLux (AidLearning) AidLux (originally AidLearning) is an AIoT development platform that runs a native Ubuntu Linux environment with GUI, deep learning tooling… | 63 | 5812 | active |
| Mountpoint for Amazon S3 Mountpoint for Amazon S3 is a high-throughput FUSE file client that mounts an Amazon S3 bucket as a local file system. It translates file o… | 92 | 5781 | stable |
| cubefs/cubefs CubeFS is a CNCF-graduated, cloud-native distributed file and object storage system written in Go. It supports S3, HDFS, and POSIX access p… | 87 | 5674 | stable |
| tonarino/innernet innernet is a self-hosted private network (overlay VPN) system built on WireGuard, with a coordination server and client CLI written in Rus… | 80 | 5554 | active |
| winglang/wing Wing is an open-source, cloud-oriented programming language that unifies infrastructure definitions and application runtime code in a singl… | 78 | 5402 | active |
| facebookincubator/katran Katran is a C++ library and BPF program for building a high-performance layer 4 load balancing forwarding plane. It leverages the Linux ker… | 77 | 5372 | active |
| tsuru Tsuru is an open-source, extensible Platform as a Service (PaaS) that simplifies application deployment and management on top of Kubernetes… | 96 | 5311 | active |
| ministackorg/ministack MiniStack is a free, MIT-licensed local AWS emulator that mimics 60+ AWS services (S3, SQS, SNS, DynamoDB, Lambda, EC2, RDS, ElastiCache, E… | 79 | 4996 | active |
| llm-d llm-d is a Kubernetes-native distributed LLM inference serving stack that orchestrates model servers like vLLM and SGLang across clusters. … | 83 | 4891 | active |
| Hyperlight Hyperlight is a lightweight Virtual Machine Manager (VMM) library, written in Rust, that embeds micro virtual machines into applications fo… | 90 | 4740 | active |
| OPNsense OPNsense is an open-source, FreeBSD-based firewall and routing platform with a web GUI, REST API, and extensible plugin system. It provides… | 75 | 4696 | active |
| Cloudflare MCP Server A collection of Model Context Protocol (MCP) servers from Cloudflare that let MCP clients like Cursor or Claude manage Cloudflare services … | 81 | 4365 | active |
| octelium/octelium Octelium is a free, open-source, self-hosted unified zero trust secure access platform built on Kubernetes. It can operate as a remote acce… | 87 | 4107 | active |
| Kuma Kuma is a CNCF Sandbox, Envoy-based service mesh that provides L4-L7 connectivity, discovery, security (mTLS), observability, and traffic c… | 95 | 4015 | stable |
| spdk/spdk SPDK is a set of C libraries, drivers, and tools for building high-performance, scalable user-mode storage applications. It moves storage d… | 89 | 3683 | stable |
| ascending-llc/jarvis-registry Jarvis Registry is an open-source, enterprise-grade MCP and A2A agent gateway and workflow orchestration platform that gives AI copilots an… | 84 | 3531 | active |
| iamlive A Go CLI tool that generates IAM policies by monitoring AWS, Azure, or GCP API calls via client-side monitoring or an embedded proxy. It ob… | 77 | 3416 | active |
| PatchMon/PatchMon PatchMon is a self-hostable, AGPL-licensed Linux patch management and server monitoring platform with a lightweight outbound-only agent and… | 78 | 3368 | active |
| zalando/skipper Skipper is an HTTP router and reverse proxy written in Go, designed for service composition with support for hundreds of thousands of dynam… | 94 | 3332 | stable |
| envoyproxy/gateway Envoy Gateway is an open-source control plane that manages Envoy Proxy as a standalone or Kubernetes-based application gateway, using Kuber… | 99 | 3091 | stable |
| kubernetes-sigs/kueue Kueue is a Kubernetes-native job queueing system providing APIs and controllers that decide when batch, HPC, and AI/ML workloads should be … | 95 | 3086 | active |
| cruise-control-for-kafka/cruise-control Cruise Control is a Java-based service that automates dynamic workload rebalancing and self-healing for Apache Kafka clusters. It tracks br… | 90 | 3046 | active |