Network Flow Monitoring in Kubernetes with Contiv/VPP CNI and the Elastic Stack
summary
Describes a concrete pipeline for Kubernetes network flow monitoring using Contiv/VPP CNI which emits VPP IPFIX flow records via FD.io VPP; Logstash ingests and normalizes those records; and Elasticsearch with Kibana store and visualize them. Covers deployment artifacts, sample Logstash parsing rules, index/retention strategy, and live dashboards used to trace a real networking bug and find a throughput bottleneck during cluster-scale testing.
AI-written summary · about
chapters (7)
- 0:00Kubernetes network monitoring
- 4:55Traditional monitoring limits
- 10:11Contiv VPP CNI intro
- 17:35Contiv VPP with Elastic Stack
- 27:10Live demo: network flow monitoring
- 32:15Key takeaways and best practices
- 34:33Q&A
related talks
35mNetwork Flow Monitoring in Kubernetes with Contiv/VPP CNI and Elastic Stack
26mNetwork monitoring with FOSS
29mFinding the Needle in a Haystack: Tenant-Level Network...
42mFiltering Network Flows from Kubernetes Clusters: Why and How?
49mRelational Observability for Cloud-Native Security and Data Science
16mNetwork Flow Data in the Cloud
46mNetworking in Kubernetes: can we make it clearer?
24mNetwork Data Analysis With Elastic Stack