from Hacker News

Kyanos: eBPF-based network issue analysis tool

by lijunhao on 11/16/24, 5:34 AM with 14 comments

• by burnt-resistor on 11/16/24, 1:38 PM

  Speaking of network debugging tools, I really miss the network connectivity troubleshooting tool (and supporting network configuration database service) at Meta that has panopticon-like awareness of all networks, network rules, host firewall rules, and user/service user privileges. It ran with syntax paraphrased like the following:

      {{whatever_it_was_called}} {{src_ip_or_host[:src_port]}} {{dest_ip_or_host_or_network}}:{{dest_port}} [service_or_user_privileged_membership_group]
  

  It walks every hop and identifies any misconfiguration.

  Sadly, sysadmin and netadmin tools, responsibilities, and skills are withering trades that have been subsumed or ignored in the modern SWE/SRE enterprise almost as afterthoughts.

• by bigcat12345678 on 11/16/24, 4:35 PM

  The author of this repo here, AMA

• by jnck on 11/16/24, 11:09 AM

  Great. Now we could gain detailed insights into how our system is behaving in real time, which is invaluable for troubleshooting and optimizing performance. For those who just heard eBPF, there is the fun-damental source about it [0].

  Links: [0]: https://ebpf.io/books/buzzing-across-space-illustrated-child...

• by butterNaN on 11/16/24, 12:13 PM

  Really cool, I remember a specific incident six odd years ago where I had to wade through tcpdump files to investigate an issue, and wished I could create something like this. I suppose you get more control over data if you're doing it the "hard" way (e.g I don't see an option to use `median`s in here) but I am guessing you likely dont need it in 90% of the cases

• by sva_ on 11/16/24, 2:44 PM

  Seems like it currently only supports protocols http, mysql, redis?

  Also, when you let it run through some wireguard vpn, the information is a lot more limited.

• by faded242 on 11/16/24, 7:33 PM

  So.. like trafshow.