Caretta: Mapping Services With eBPF
summary
Caretta is an open source tool that uses eBPF programs attached to tcp_data_queue to capture sock objects and extract source/destination IPs, ports and throughput, aggregates millions of connections down to service-to-service flows, and resolves IPs to Kubernetes names via the Kubernetes API. It exports counts and rates as Prometheus metrics + Grafana node graph panels, deploys as a DaemonSet container with near-zero footprint, and the demo shows a working visual map that reveals unexpected external calls and kubelet health probes.
AI-written summary · about
chapters (6)
related talks
27mStep By Step Kubernetes Observability with eBPF
35mSidecarless Mesh Monitoring with eBPF and Grafana
31mA High-Schooler’s Guide to Kubernetes Network Observability
31mBridging Dev and Ops with eBPF: Extending Observability Upwards and Downwards
42mMonitoring Kubernetes Traffic with eBPF
29mUsing eBPF for Non-invasive, Performant, Instant Network Monitoring
37mMonitoring Service Architecture and Health with BPF
34mNetwork Observability with eBPF and OpenTelemetry