⚡ Lightning Talk: Don't Get Blown up! Avoiding Configuration Gotchas for Tetragon Newbies
Lightningat Cilium + eBPF Day North America 2024 · on Tuesday, 2024-11-12· at 17:00· Salt Palace | Level 1 | Grand Ballroom B·
summary
Five configuration pitfalls and concrete fixes: default logging floods clusters (observed 100 GB/day on a test cluster) so restrict namespaces and event types; skip full network monitoring early or pair with Hubble for aggregation; avoid noisy process exit events in production and prefer kprobes/uprobes/Tracepoint; use metrics (Grafana plugin) for bandwidth and DNS anomaly detection; pull logs via grpc endpoint instead of JSON. Start small and test policies—bad probes can break production.
AI-written summary · about
chapters (8)
- 0:00Introduction and background
- 1:38Tetragon primer
- 3:30Avoiding log noise
- 4:52Network monitoring challenges
- 5:55Optimizing process events
- 7:22Metrics for detection
- 8:21Efficient log retrieval
- 9:25Takeaways and Q&A
related talks
17mLightning Talk: Avoiding Chaotic Dysfunction: The ‘Don’t Do This’ Guide T...
11mLightning Talk: Beyond Billions: Operating Thanos, Prometheus & OpenTelemetry...
08m⚡ Lightning Talk: The Hidden Gems of Kubernetes: Lesser-Known Features You Should Be Using
46mLightning Talks
01h 12mTutorial: Sailing the Security Seas with Tetragon
13mLightning Talk: Taming Metric Cardinality: Practical Cost Reduction Wit...
10mLightning Talk: Is OpenTelemetry Too Complicated to Get Started?
13mLightning Talk: Observability-First DevSecOps: Building Resilient Multi-Cloud P...