k8spacket/k8spacket — k8spacket - collects TCP traffic and TLS connection met

k8spacket - packets traffic visualization for kubernetes

k8spacket doesn't use the gopacket library nowadays and is fully based on docs/ebpf.png now!
Read the article on medium.com k8spacket — a fully based on eBPF right now

It uses

inet_sock_set_state tracepoint to get information about TCP connections inside the cluster
traffic control and queueing discipline filters on ingress and egress to collect information about TLS handshake process

To use k8spacket v2.x.x, the minimum required kernel version is 5.4 with enabled BTF.
See e2e tests README

New features:

Dashboard k8spacket - TLS certificate expiration shows the remaining time until the certificates expire. By variable Past interval to analyze, you can narrow or expand the scope of data to analyze. Data sorted by expiring earliest first. It's easy to build alerts based on the certificate expiration date. See more raw metrics in the dashboard k8spacket - TLS metrics

docs/expiration.gif

Two principal k8spacket dashboards (k8spacket - node graph and k8spacket - TLS connections & certificates) are sensitive to Grafana time range control now. You can show cluster TCP traffic or TLS connections, f.e., for the last 5 minutes

docs/timerange1.gif

docs/timerange2.gif