google / cadvisor

Analyzes resource usage and performance characteristics of running containers.
Other
16.9k stars 2.31k forks source link

Proposal: Container Outbound connections #1549

Open andrestc opened 7 years ago

andrestc commented 7 years ago

Cadvisor could expose metrics about outbound connections for each container. We can parse conntrack output and create a time series for each combination of container and destination-ip. This could be an opt-in metric as, for some cases (like a webcrawler for instance) the number of series could get pretty large.

This kind of metric can be used to track down connection leakage.

If this makes sense, I would be happy to submit a PR with a WIP.

szuecs commented 3 years ago

I think important is not only outbound connections, but the insert_failed and other errors that you can get from conntrack -S.