News for hackers. Stuff that matters.

A comment on How Netflix Accurately Attributes eBPF Flow Logs. Parent comment

Re:How Netflix Accurately Attributes eBPF Flow Logs by slt2021 on Tuesday April 08, 2025 @08:09PM (#43627703)
If the goal of gathering and attributing VPC flows is to have a workload granularity flow logs, then imho gathering mesh level logs is more direct and atraight forward approach, because mesh(and workload orchestrator) are uniquely qualified to know when workload A is running on a host X and is trying to connect to workload B.

Looking at Envoy access logs for example is more straightforward and simple aplroach, than running distributed ebpf and memory intensive large spark streaming job

[ Parent | on HN ]
Re:How Netflix Accurately Attributes eBPF Flow Logs by nptr on Tuesday April 08, 2025 @08:44PM (#43627867)
The blog post mentioned that "The eBPF flow logs provide a comprehensive view of service topology and network health across Netflix’s extensive microservices fleet, regardless of the programming language, RPC mechanism, or application-layer protocol used by individual workloads."

Service mesh may have restrictions on the network protocols and may not cover all network traffic (like connections to Kafka and databases).

[ Parent | on HN ]