Open dthaler opened 2 years ago
In triage meeting Tracepoints over VFP (Virtual Filtering Platform) was brought up as an important area we should talk about for observability in the context of Kubernetes and Windows containers. We will want to distill this down into what aspects of VFP would need observability to be lit up.
Some references:
https://blogs.oracle.com/linux/post/bpf-a-tour-of-program-types section 4.2
https://lwn.net/Articles/683504/
https://blogs.oracle.com/linux/post/taming-tracepoints-in-the-linux-kernel
https://sysdig.com/blog/the-art-of-writing-ebpf-programs-a-primer/
https://www.kernel.org/doc/Documentation/trace/tracepoints.rst
[ ] Tracepoints over WFP
[ ] Tracepoints over ETW