How to trace traffic of GCP kubernetes service? I would like to see who access the service and volume of traffic.
Related Questions in KUBERNETES
- Golang == Error: OCI runtime create failed: unable to start container process: exec: "./bin": stat ./bin: no such file or directory: unknown
- I can't create a pod in minikube on windows
- Oracle setting up on k8s cluster using helm charts enterprise edition
- Retrieve the Dockerfile configuration from the Kubernetes and also change container Java parameter?
- Summarize pods not running, by Namespace and Reason - I'm having trouble finding the reason
- How to get Java running parameters from Spring Boot running inside container in pod where no ps exist
- How do we configure prometheus server to scrape metrics from a pod with Istio sidecar proxy?
- In rke kube-proxy pod is not present
- problem with edge server registration in Eureka
- Unable to Access Kubernetes LoadBalancer Service from Local Device Outside Cluster
- Kubernetes cluster on GCE connection refused error
- Based on my experience, I've outlined the Kubernetes request flow. Could someone please add or highlight any points I might have overlooked?
- how to define StackGres helm chart "restapi" values to use internal LoadBalancer - AWS EKS
- Python3.11 can't open file [Errno 2] No such file or directory
- Cannot find remote pod service - SERVICE_UNAVAILABLE
Related Questions in GOOGLE-KUBERNETES-ENGINE
- Golang == Error: OCI runtime create failed: unable to start container process: exec: "./bin": stat ./bin: no such file or directory: unknown
- Kubectl command throws error when executed from python script but manual execution works fine
- Unable to add TLS certificate to GKE from Google Secret Manager
- GKE Clusters no indication within metrics or logs after failure
- Getting connection refused to Private GKE Internal point. Autopilot private cluster
- Can I have the Google managed service range on a standard gke cluster created with Terraform- non auto-pilot
- Configure Lens with GKE cluster - gke_gcloud_auth_plugin issue
- Having issues joining my kubernetes worker noed to a controller node
- How to deploy airflow in kubernetes cluster that uses istio
- GKE cluster shutdown
- Artifactory 404 error from virtual repository where docker pulls fine but crictl does not
- Scraping from Mexico in GCP EKG?
- not able to connect via cloud sql proxy
- SQL connection throws error when adding DistributedSession, SessionMiddleware
- CronJob pod repeats pending forever even after deleting it
Related Questions in HTTP-TRACE
- How does the tracing spec define a "vendor"?
- In SBA UI I cannot find the WEB menu or HttpTrace menu how to enable it
- How to execute custom code when any outgoing HTTP request is initiated in .Net 4.5 console application
- How to implement the response to the TRACE request in express.js?
- Troubleshooting 404 errors form a specific IP only on Websphere
- How to import actuator httptrace in actuator prometheus? (actuator, spring boot, grafana)
- How can I log the Content-Type that Spring rejects with a 415 Unknown Media Type?
- How to trace traffic to GCP kubernetes Services
- Spring boot 2x actuator http trace not tracing body
- Spring Boot: getting query string parameters and request body in AuditApplicationEvent listener
- How can I disable HTTP TRACE in embedded untertow of a Spring boot application
- Spring Boot: enable HTTP TRACE method for embedded Tomcat
- HTTP TRACE / TRACK Methods Enabled vulnerability in Coldfusion server
- Disable web.py HTTP TRACE
- How to disable TRACE/TRACK HTTP in JBoss Wildfly?
Popular Questions
- How do I undo the most recent local commits in Git?
- How can I remove a specific item from an array in JavaScript?
- How do I delete a Git branch locally and remotely?
- Find all files containing a specific text (string) on Linux?
- How do I revert a Git repository to a previous commit?
- How do I create an HTML button that acts like a link?
- How do I check out a remote Git branch?
- How do I force "git pull" to overwrite local files?
- How do I list all files of a directory?
- How to check whether a string contains a substring in JavaScript?
- How do I redirect to another webpage?
- How can I iterate over rows in a Pandas DataFrame?
- How do I convert a String to an int in Java?
- Does Python have a string 'contains' substring method?
- How do I check if a string contains a specific word?
Popular Tags
Trending Questions
- UIImageView Frame Doesn't Reflect Constraints
- Is it possible to use adb commands to click on a view by finding its ID?
- How to create a new web character symbol recognizable by html/javascript?
- Why isn't my CSS3 animation smooth in Google Chrome (but very smooth on other browsers)?
- Heap Gives Page Fault
- Connect ffmpeg to Visual Studio 2008
- Both Object- and ValueAnimator jumps when Duration is set above API LvL 24
- How to avoid default initialization of objects in std::vector?
- second argument of the command line arguments in a format other than char** argv or char* argv[]
- How to improve efficiency of algorithm which generates next lexicographic permutation?
- Navigating to the another actvity app getting crash in android
- How to read the particular message format in android and store in sqlite database?
- Resetting inventory status after order is cancelled
- Efficiently compute powers of X in SSE/AVX
- Insert into an external database using ajax and php : POST 500 (Internal Server Error)
Make sure your service that is exposing your pods is configured with
externalTrafficPolicy: localto ensure that requests that reach you pod maintain their clientIP.Next, ensure your application logs incoming connections (nginx does this by default). Ensure that you have logging enabled (either stackdriver or a 3rd party tool like ELK) so that you can export the logs (the k8s cluster won't hold the container logs for very long).
If you are using Stackdriver, you can then create a log-based metric based off of the logs you collected. As long as you collect the logs by container, the metric should aggregate logs from each of your pods. You can then use Stackdriver Monitoring to watch the network load the pods receive and Stackdriver Logging to review the source IPs of the requests.
If you can't get your application to log connections, an alternative would be to create a DaemonSet that runs a TCPdump to stream connections to your service (how you configure this sepcifically will depend on which service you are using).