Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Retina – eBPF distributed networking observability tool for Kubernetes

github.com

Post reply on HN
Print view View original

11–20 of 31 posts

Re: Retina – eBPF distributed networking observability tool for Kubernetes

#12

Post by [deleted] »

candiddevmike wrote: post #9
hosh wrote: post #6

Earlier quoted context omitted.

Cillium has been bought out by Cisco, so its monetization is only a matter of time. Also, not everyone needs to implement a service mesh.

Cillium is a CNCF project and Apache 2 licensed. Isovalent and their enterprise product were bought by Cisco.

[deleted]

Re: Retina – eBPF distributed networking observability tool for Kubernetes

#13

Post by hacker_newz »

p_l wrote: post #3
maxboone wrote: post #2

Probably this means it's not for me, but what is this useful for? Anyone using this in their prod set-up and has a scenario where they found this useful?

Just today at $DAYJOB we had a complaint that one teams Azure Kubernetes clusters was "slow". About only metric out of norm was network traffic - but lack of detailed instrumentation meant we couldn't really isolate the cause to specific container or process

If the only explanation someone can provide is that "a cluster is slow", the issue isn't with network observability. They need to do at least the minimum level of analysis before escalating.

Re: Retina – eBPF distributed networking observability tool for Kubernetes

#14

Post by p_l »

hacker_newz wrote: post #13
p_l wrote: post #3

Earlier quoted context omitted.

Just today at $DAYJOB we had a complaint that one teams Azure Kubernetes clusters was "slow". About only metric out of norm was network traffic - but lack of detailed instrumentation meant we couldn't really isolate the cause to specific container or process

If the only explanation someone can provide is that "a cluster is slow", the issue isn't with network observability. They need to do at least the minimum level of analysis before escalating.

Unfortunately we were the right team for escalation before escalating to network team.

Re: Retina – eBPF distributed networking observability tool for Kubernetes

#17

Post by xyst »

Speaking of observability tools. Anybody here know how to gather more in-depth metrics on mTLS requests? Have an internal (self signed) CA and just want to know which issued certs are presented to nodes. Would be nice to get cert serial number and other metadata as well

Re: Retina – eBPF distributed networking observability tool for Kubernetes

#18

Post by jookat »

Red Hat has a similar eBPF based tool https://github.com/netobserv/network-observability-operator (Disclaimer: i work on it) - the cool thing imho with retina or redhat netobserv or pixie is they aren't tied to a specific CNI. Now one of the problems that arises is potential conflicts and lack of collaboration between eBPF based tools, as there are more and more. Something called bpfman aims to address this aspect
Post reply on HN