eunomia-bpf / eunomia-bpf/bpf-developer-tutorial

Best practices for real-time streaming of eBPF SSL/TLS capture data in Kubernetes?

Open
#187 1 comment 0 reactions 0 assignees View on GitHub
question
Dominant language
C
Stars
4.3k
Forks
602
Avg merge
1d 10h
Merged PRs (30d)
1

Description

I'm working on a Kubernetes-native SSL/TLS monitoring system using eBPF (similar to your lesson 30-sslsniff).

Current Setup:
- Using eCapture (eBPF-based SSL capture tool) as a DaemonSet
- Need to stream captured HTTP data in real-time to create Kubernetes CRDs
- Facing issues with buffered stdout - data doesn't appear until process exits

Questions:
1. What's the recommended approach for real-time streaming of eBPF capture data (perf buffers, ring buffers, or something else)?
2. Have you seen any examples of integrating eBPF capture tools with Kubernetes for observability?
3. Are there alternatives to stdout for getting immediate output from eBPF programs in daemon mode?

Any guidance or pointers to relevant lessons would be appreciated!

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.