eBPF-based TLS connections tracing for applications using OpenSSL

coroot / coroot-node-agent

A Prometheus exporter based on eBPF that gathers comprehensive container metrics

https://coroot.com/docs/metrics/node-agent

Apache License 2.0

311 stars 55 forks source link

eBPF-based TLS connections tracing for applications using OpenSSL #29

Closed apetruhin closed 1 year ago

apetruhin commented 1 year ago

This PR introduces the capability to capture Layer 7 requests within TLS connections for applications using OpenSSL. The agent uses eBPF uprobes to attach to the following libssl functions:

SSL_write (SSL_write_ex)
SSL_read (SSL_read_ex)