Advanced Network Protocol Visibility
Insights into workload communications on a protocol level
Traditional Network Observability
- From performance to security, application owners need full visibility into and control of the data flows.
- Many products focus only on the network, and have no application level insight into the data flow.
- Fine-grained observability and security requires native understanding of the protocols used.
Cilium Network Observability
- Native understanding of various protocols, such as TLS, gRPC, Kafka, DNS and HTTP.
- Insight into protocols enables observability of API specific endpoints.
- Enforce policies on protocol and on API endpoint level.
- All policies are cloud native identity aware: based on Kubernetes labels for pods and DNS-identities for external endpoints.
Enable cloud native, identity-aware insights
- Provide application owners with deep insight into their application’s traffic - from errors to performance data.
- Zoom in on individual services, get detailed, cloud native and identity aware insight.
- Enable micro-segmentation down to the level of individual API endpoints.
- Enable detailed network policies even for external endpoints.
Hubble - eBPF-based Observability for Kubernetes
Troubleshooting network issues in Kubernetes often requires deep insight into different layers of your stack. Hubble is a new open-source observability platform that aims to assist you in understanding what is going on in all layers of your Kubernetes network. Based on the Cilium CNI and the Linux kernel eBPF technology, it is able to obtain fine-grained visibility into network traffic and applications behavior, with low overhead and without having to modify applications.
In this talk, you will get an introduction into Hubble, and the technologies that power it, the Cilium CNI and eBPF. You will be presented with practical examples of how Hubble can be used to interactively troubleshoot complex network issues. The talk will show how to write custom Hubble metrics which allow you to benefit from eBPF's superpowers without having to write or understand any kernel code.
Want to learn more?
There is plenty more material available if you'd like to learn more.