NATS JetStream

tsnet is an open-source Tailscale library for building applications that can join a tailnet. It lets those applications use the Tailscale network and see the identity of the caller on the other side of a connection. Aperture, Tailscale's AI gateway, uses tsnet for tailnet-based identity.

KurrentDB is an event-native database for event-sourced and event-driven systems. It appends typed events to named streams, preserves the complete event history, streams changes in real time, and supports replaying, rewinding, or rebuilding state from past events. The service provides client libraries for Java, .NET, Go, Python, Node.js, Rust, and TypeScript, with Cloud, Enterprise, and Community deployment options.

Istio is an open-source service mesh for integrating microservices, managing traffic, enforcing policies, and collecting telemetry with few or no service-code changes. Its control plane, Istiod, provides service discovery, configuration, and certificate management, while Envoy proxies handle service traffic and provide routing, circuit breaking, policy enforcement, and telemetry. In Ambient mesh mode, the Rust-based Ztunnel data-plane proxy provides secure connectivity and observability without sidecar proxies; the videos describe this mode as providing encrypted, mutually authenticated networking between agents and tools.

Agent Substrate is an open-source runtime and control plane for running agent-like workloads at high density. It manages the lifecycle of sandboxed actors, including creation, destruction, suspension, and resumption, and assigns them to a smaller pool of worker pods while routing traffic to the active workers. The system uses Kubernetes for infrastructure provisioning and pod lifecycle management, with support for sandbox technologies including microVMs and gVisor. It preserves actors' volatile memory and filesystem state through full-state snapshots, enabling sub-second suspend and resume operations and multiplexing many stateful actors across shared infrastructure. It manages standard OCI containers at the kernel level and is designed to support different agent frameworks and harnesses, including ADK-compatible actors, LangChain agents, coding environments, and MCP servers. Agent Substrate is intended for running agents at scale rather than building them, and its workloads do not have to be literal AI agents. The repository notes that the project is not an officially supported Google product.

NetBird is an open-source, WireGuard-based overlay networking and Zero Trust Network Access platform for connecting remote users, cloud and on-premises resources, edge devices, containers, and agents through peer-to-peer encrypted tunnels. Its agents manage WireGuard connections, obtain peer candidates through ICE and STUN, exchange connection information through a signaling service, and use a relay when direct connections fail. A centralized management service maintains network state, peer addresses, access policies, and configuration updates, while the admin interface supports identity-based access control, network segmentation, SSO, MFA, device posture checks, private DNS, routes, exit nodes, SSH, reverse proxying, activity logging, and integrations such as Terraform and Ansible. NetBird can run as a hosted cloud service or be self-hosted; its repository includes the client, management, signal, and relay components, with most code licensed under BSD-3-Clause and the management, signal, and relay directories under AGPLv3.