Network Observability - Githubissues

giantswarm / roadmap

Giant Swarm Product Roadmap

https://github.com/orgs/giantswarm/projects/273

Apache License 2.0

3 stars 0 forks source link

Network Observability #3148

Open weatherhog opened 6 months ago

weatherhog commented 6 months ago

We want to empower our customers to understand what is going on on the network. Therefor we need to find out what would be helpful and which problems our customers are facing. At least one customer is asking for metrics to see dropped connections.

### Tasks
- [ ] https://github.com/giantswarm/roadmap/issues/3149
- [ ] Come Up with Usecases what Customers would like to see
- [ ] Check out Hubble Metrics
- [ ] Check which metrics we already offer - for example in our Kubernetes / Networking Dashboard
- [ ] Cooperate with Team Atlas on tracing
- [ ] https://github.com/giantswarm/roadmap/issues/3097
- [ ] create basic test that shows that ingress, certmanager and external dns are working

mcharriere commented 6 months ago

create basic test that shows that ingress, certmanager and external dns are working

This is already done for CAPI.

I'd also add:

Review net-exporter as a provider of health indicators (extending it or considering a replacement).
Network policy analytics for status/enforcement. This is more on the Security spectrum, but it'd be quite cool to have a panoramic view of the network policies on a cluster. (https://github.com/hardbyte/netchecks)

hardbyte commented 2 months ago

Let me know if you'd like some help getting setup with netchecks, or if you need any modifications if its not quite fit for purpose.

LolloneS commented 1 week ago

A few things to investigate as discussed privately with Lucas.

These are things we could investigate once monitoring has been figured out and we could even pair with customers on them so that they upskill themselves on K8s networking and we get their direct feedback on the topic.

Cilium's support for Topology Aware Hints (aka Topology Aware Routing): https://docs.cilium.io/en/stable/network/kubernetes/kubeproxy-free/#topology-aware-hints for performance improvement and cost savings
Cilium's support for Wireguard Encryption: https://docs.cilium.io/en/latest/security/network/encryption-wireguard/ for security
Analysing https://kubernetes.io/docs/reference/networking/virtual-ips/#traffic-distribution again for performance improvement and cost savings