Advanced Network Protocol Visibility

Insights into workload communications on a protocol level

• Traditional Network Observability

  • From performance to security, application owners need full visibility into and control of the data flows.
  • Many products focus only on the network, and have no application level insight into the data flow.
  • Fine-grained observability and security requires native understanding of the protocols used.

• Cilium Network Observability

  • Native understanding of various protocols, such as TLS, gRPC, Kafka, DNS and HTTP.
  • Insight into protocols enables observability of API specific endpoints.
  • Enforce policies on protocol and on API endpoint level.
  • All policies are cloud native identity aware: based on Kubernetes labels for pods and DNS-identities for external endpoints.

Enable cloud native, identity-aware insights

• Provide application owners with deep insight into their application’s traffic - from errors to performance data.
• Zoom in on individual services, get detailed, cloud native and identity aware insight.
• Enable micro-segmentation down to the level of individual API endpoints.
• Enable detailed network policies even for external endpoints.

Hubble - eBPF-based Observability for Kubernetes

Troubleshooting network issues in Kubernetes often requires deep insight into different layers of your stack. Hubble is a new open-source observability platform that aims to assist you in understanding what is going on in all layers of your Kubernetes network. Based on the Cilium CNI and the Linux kernel eBPF technology, it is able to obtain fine-grained visibility into network traffic and applications behavior, with low overhead and without having to modify applications.

In this talk, you will get an introduction into Hubble, and the technologies that power it, the Cilium CNI and eBPF. You will be presented with practical examples of how Hubble can be used to interactively troubleshoot complex network issues. The talk will show how to write custom Hubble metrics which allow you to benefit from eBPF's superpowers without having to write or understand any kernel code.

• Hubble - eBPF Based Observability for Kubernetes - Sebastian Wicki, Isovalent Youtube

Palantir Case Study

“With Hubble, we are able to get easy traceability of network calls associated to a Kubernetes pod."

-- Vlad Ungureanu - Backend Software Developer

• The Past, Present and Future of Cilium and Hubble at Palantir - Vlad Ungureanu, Palantir - Full