Hello, Yes, there is several activity in this regards, I was involved in one which was demoed recently at Openstack Summit [1] for security monitoring of containers.
The Cilium project [2] is another place focusing specifically on container networking. Affan [1] https://github.com/akhayam/conmon [2] https://opensource.googleblog.com/2016/11/cilium-networking-and-security.html On Mon, Nov 28, 2016 at 11:08 AM, 张维(贤维) via iovisor-dev < [email protected]> wrote: > Hi guys, > > I'm a new-bie to IO visor project, so excited to know the effort like > this. > https://github.com/iovisor/bcc > (I've been working on Linux dynamic tracing for many years, so quite > familiar with Linux kernel and ebpf.) > > As container is been popular deployed in modern infrastructures, I would > like to know if there have any plan or ideas to support container oriented > tracing/debugging in IO-Visor bcc project. For example: > 1. Trace the syscalls of all processes in a container.(currently we have > too add CAP_PTRACE when we start conatiner, then use strace in container) > 2. Trace the disk/volume activity in a container. > 3. Trace the network packet activity in a container. > > There requirements is quite simple if target is a normal Linux process, as > infrastrcture changes, container is the new modern type process nowadays > IMO, container oritented support would be a general demands for many > Linux tools. > > Best Regards. > > _______________________________________________ > iovisor-dev mailing list > [email protected] > https://lists.iovisor.org/mailman/listinfo/iovisor-dev > >
_______________________________________________ iovisor-dev mailing list [email protected] https://lists.iovisor.org/mailman/listinfo/iovisor-dev
