{"id":19268552,"url":"https://github.com/moolen/juno","last_synced_at":"2026-05-05T01:42:32.406Z","repository":{"id":57521819,"uuid":"249553767","full_name":"moolen/juno","owner":"moolen","description":":satellite: Network Observability for Kubernetes","archived":false,"fork":false,"pushed_at":"2020-04-02T15:06:09.000Z","size":21365,"stargazers_count":2,"open_issues_count":0,"forks_count":1,"subscribers_count":2,"default_branch":"master","last_synced_at":"2025-01-05T12:41:53.559Z","etag":null,"topics":["ebpf","kubernetes","networking","observability","tracing"],"latest_commit_sha":null,"homepage":"","language":"C","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/moolen.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2020-03-23T22:00:50.000Z","updated_at":"2022-03-02T06:53:41.000Z","dependencies_parsed_at":"2022-08-26T23:40:36.008Z","dependency_job_id":null,"html_url":"https://github.com/moolen/juno","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moolen%2Fjuno","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moolen%2Fjuno/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moolen%2Fjuno/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moolen%2Fjuno/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/moolen","download_url":"https://codeload.github.com/moolen/juno/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":240371742,"owners_count":19790888,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["ebpf","kubernetes","networking","observability","tracing"],"created_at":"2024-11-09T20:16:39.396Z","updated_at":"2026-05-05T01:42:27.369Z","avatar_url":"https://github.com/moolen.png","language":"C","funding_links":[],"categories":[],"sub_categories":[],"readme":"# Juno\nNetwork tracing and auditing for Kubernetes.\n\n## TODO\n\nPoc #1\n* [x] run kprobe for tcp connect/accept\n* [x] draw dependency graph based on observed connections (see /tmp/graph.svg)\n\nPoC #2\n* [x] run eBPF program on veth to extract traffic flow information\n* [x] implement auditing use-case: implement event buffer map per veth interface\n* [x] implement central component to collect traffic information\n\nPoc #3\n* [ ] derive service graph from collected traces (potentially configurable via label selectors)\n* [ ] export metrics in agents\n\n## Limitations\n\n* ~~this supports only a fixed number of CPUs (currently 2) see `tcptracker-sock-bpf.c` / `MAX_CPU`~~ *fixed*\n\n## Notes\n\n* docker/moby does not support cgroup2 (we can not inject eBPF into cgroup2 netns)\n* [tcptracer-bpf](https://github.com/weaveworks/tcptracer-bpf) kinda does exactly this BUT runs as `kprobe/tcp_v4_connect` with the limitation that it only supports tcp AND it does not get all connect calls.\n\n## Installation\n\n```\nkubectl apply -k config/default/\n```\n\n## Example\n\nPreprequisites:\n* have juno installed\n\n\nfollow hubble example:\n\n```\nkubectl create namespace jobs-demo\nkubectl -n jobs-demo apply -f https://app.isovalent.com/demos/jobs.yaml\n```\n\nOnce the pods are up generate some traffic:\n\n```\ncurl -sLO https://app.isovalent.com/demos/jobs-traffic.sh \u0026\u0026 bash jobs-traffic.sh jobs-demo\n```\n\n## Development\n```sh\n$ minikube start\n# build bpf bytecode and protobuf defs\n$ make all\n\n# build docker container in minikube\n$ eval $(minikube docker-env)\n$ docker build . -t quay.io/moolen/juno:test\n$ kubectl apply -k config/default\n\n# test server locally\n$ kubectl port-forward svc/juno 3000:3000\n$ ./bin/juno server\nINFO[0002] received trace: trace:\u003ctime:\u003cseconds:29 \u003e IP:\u003csource:\"172.17.0.1\" destination:\"172.17.0.3\" ipVersion:IPv4 \u003e l4:\u003cTCP:\u003csource_port:35252 destination_port:8181 flags:\u003cPSH:true ACK:true \u003e \u003e \u003e l7:\u003chttp:\u003cmethod:\"GET\" url:\"/ready\" protocol:\"HTTP/1.1\" \u003e \u003e \u003e\nINFO[0000] received trace: trace:\u003ctime:\u003cseconds:22 \u003e IP:\u003csource:\"172.17.0.1\" destination:\"172.17.0.2\" ipVersion:IPv4 \u003e l4:\u003cTCP:\u003csource_port:50774 destination_port:8080 flags:\u003cPSH:true ACK:true \u003e \u003e \u003e l7:\u003chttp:\u003cmethod:\"GET\" url:\"/health\" protocol:\"HTTP/1.1\" \u003e \u003e \u003e\n\n# install demo app\n$ kubectl apply -f ./hack/microservices-demo.yaml\n\n\n```\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fmoolen%2Fjuno","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fmoolen%2Fjuno","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fmoolen%2Fjuno/lists"}