Network Observability with Calico
summary
Calico Whisker is an open-source flow observability tool bundled with Calico (used to secure over 8 million nodes and manage 1M+ workloads) that streams cluster-wide flows with Kubernetes identity, labels, ports, verdicts and the exact policy that allowed or denied traffic. It batches live flows every 15s from Felix through the Goldmain flow API to a lightweight backend and UI, lets you export JSON, and supports staged network policy testing. The pipeline is data-plane agnostic and requires enabling the flow logs API.
AI-written summary · about
chapters (9)
- 0:00Introduction and speaker intro
- 1:10Kubernetes network visibility gap
- 2:35What is Calico Whisker
- 4:00How Calico Whisker works
- 5:24Live flow observability demo
- 8:11Debugging with Calico Whisker
- 9:58Installation and resources
- 12:25Key benefits and summary
- 13:08Q&A session
related talks
52mImplementing holistic security for containers and Kubernetes
23mContainer and Kubernetes security policy design: 10 critical best practices
32mUsing Open-Source Software to Secure Cloud-Native Applications
32mCalico Networking with eBPF
44mUnderstanding Calico's eBPF data-plane
30mAll You Can Eat Networking. Kubernetes Goodness for the Hungriest Workloads
29mOpening the Black Box: Understanding and Troubleshooting Calico’s eBPF Data Plane
33mNavigating the Container Jungle