Rivora — eBPF-native load balancing for every environment

Own the traffic-delivery layer

Rivora attaches its own XDP/TCX programs and pins maps under /sys/fs/bpf/rivora-lb. It does not require Cilium or any particular CNI. Drive VIPs from static YAML on a single node, or from Kubernetes Service/EndpointSlice (and optional Gateway API) via rivorad -kubernetes with rivora-controller handling AddressPool IPAM.

IPv6 is a peer of IPv4 across the dataplane, sparse IPAM, NDP speaker, and BGP /128 advertisements — covered by CI selftests on every push.

XDP / TCX dataplane

Own programs and maps under /sys/fs/bpf/rivora-lb — DSR and full-NAT, Maglev, draining, optional SYN rate limiting. No CNI dependency.

IPv4 and IPv6

First-class dual-stack: sparse /64 IPAM, NDP speaker, BGP /128 ads, and CI selftests on every push.

Kubernetes LB

Service/EndpointSlice reconciler plus AddressPool IPAM. Works with Pods, KubeVirt VMIs, and hand-authored external EndpointSlices.

Gateway API (L4)

Gateway + TCPRoute/UDPRoute alongside Services. HTTPRoute deliberately out of scope — no L7 in XDP.

BGP / BFD HA

Opt-in active/active ECMP: health-gated /32 and /128 host routes, dual AFI/SAFI, per-peer BFD.

Helm chart

DaemonSet + controller + AddressPool CRD. Dual-stack pools, speaker, Gateway API, and BGP values.

Open core, tested in CI

Apache-2.0. Every push runs Go -race, Helm render (including IPv6 pools and Gateway API), AddressPool CRD checks, BPF compile, and root selftests for DSR/NAT, Maglev, rate limit, IPv6 dataplane, and NDP.

See the selftest and CI matrix →

Need production support or SLAs?

Rivora's core is Apache-2.0 and free to run in production. Zyvor Enterprise adds support contracts, SLAs, and additional products for teams that need them.

Contact sales@zyvor.dev