Daan created GSOC-292: ------------------------- Summary: eBPF-based Network Observability for CloudStack Key: GSOC-292 URL: https://issues.apache.org/jira/browse/GSOC-292 Project: Comdev GSOC Issue Type: Improvement Reporter: Daan
CloudStack’s network monitoring is mostly based on logs and external agents, making real-time traffic analysis difficult. This project will integrate *eBPF-based network observability* to capture per-VM traffic metrics, detect anomalies, and improve tenant isolation. h2. Benefits to CloudStack * {*}Enhanced security{*}: Detect suspicious activity at the kernel level. * {*}Real-time traffic monitoring{*}: Gain deep insights into VM networking. * {*}Better tenant isolation{*}: Identify cross-tenant traffic issues. h2. Deliverables * Develop eBPF probes to capture: ** Per-VM network traffic metrics (packets, bytes, latency) ** Connection tracking for detecting unauthorized access patterns ** Packet drops and retransmission rates * Expose network metrics via CloudStack’s API. * Provide visualization through Prometheus/Grafana. * Document setup, usage, and performance benchmarks. h2. Expected Outcome An eBPF-based solution that improves network observability in CloudStack, providing security and performance insights with minimal resource usage. -- This message was sent by Atlassian Jira (v8.20.10#820010) --------------------------------------------------------------------- To unsubscribe, e-mail: gsoc-unsubscr...@community.apache.org For additional commands, e-mail: gsoc-h...@community.apache.org