aggregator

Documentation

Index

• Constants
• func IntToIPv4(ipaddr uint32) net.IP
• type AddressPair
• type Aggregator
  • func NewAggregator(parentCtx context.Context, ct *cri.CRITool, k8sChan chan interface{}, ...) *Aggregator
  • func (a *Aggregator) AdvertiseDebugData()
  • func (a *Aggregator) Run()
• type ClusterInfo
  • func (ci *ClusterInfo) SignalSocketMapCreation(pid uint32)
• type Fd
• type FrameArrival
• type KafkaMessage
• type SockInfo
• type SocketLine
  • func NewSocketLine(ctx context.Context, pid uint32, fd uint64, fetch bool) *SocketLine
  • func (nl *SocketLine) AddValue(timestamp uint64, sockInfo *SockInfo)
  • func (nl *SocketLine) ClearAll()
  • func (nl *SocketLine) DeleteUnused()
  • func (nl *SocketLine) GetValue(timestamp uint64) (*SockInfo, error)
• type SocketMap
  • func (sm *SocketMap) ProcessSocketLineCreationRequests()
  • func (sm *SocketMap) SignalSocketLine(ctx context.Context, fd uint64)
• type TcpSocket
• type TimestampedSocket

Constants

const (
	POD      = "pod"
	SVC      = "service"
	OUTBOUND = "outbound"
)

const (
	KAFKA = "kafka" // LOG_CONTEXT_KEY should match
	REDIS = "redis"
)

const (
	ADD    = "ADD"
	UPDATE = "UPDATE"
	DELETE = "DELETE"
)

Functions

func IntToIPv4

func IntToIPv4(ipaddr uint32) net.IP

IntToIPv4 converts IP address of version 4 from integer to net.IP representation.

Types

type AddressPair

type AddressPair struct {
	Saddr string `json:"saddr"`
	Sport uint16 `json:"sport"`
	Daddr string `json:"daddr"`
	Dport uint16 `json:"dport"`
}

type Aggregator

type Aggregator struct {
	// contains filtered or unexported fields
}

func NewAggregator

func NewAggregator(parentCtx context.Context, ct *cri.CRITool, k8sChan chan interface{},
	events chan interface{},
	procEvents chan interface{},
	tcpEvents chan interface{},
	tlsAttachSignalChan chan uint32,
	ds datastore.DataStore) *Aggregator

func (*Aggregator) AdvertiseDebugData

func (a *Aggregator) AdvertiseDebugData()

func (*Aggregator) Run

func (a *Aggregator) Run()

type ClusterInfo

type ClusterInfo struct {
	PodIPToPodUid         map[string]types.UID `json:"podIPToPodUid"`
	ServiceIPToServiceUid map[string]types.UID `json:"serviceIPToServiceUid"`

	// Pid -> SocketMap
	// pid -> fd -> {saddr, sport, daddr, dport}
	SocketMaps []*SocketMap // index symbolizes pid
	// contains filtered or unexported fields
}

func (*ClusterInfo) SignalSocketMapCreation

func (ci *ClusterInfo) SignalSocketMapCreation(pid uint32)

type Fd

type Fd struct {
	Fd   uint64
	Dest string

	SocketInode string
}

type FrameArrival

type FrameArrival struct {
	ClientHeadersFrameArrived bool
	ServerHeadersFrameArrived bool
	ServerDataFrameArrived    bool
	// contains filtered or unexported fields
}

type KafkaMessage

type KafkaMessage struct {
	TopicName string
	Partition int32
	Key       string
	Value     string
	Type      string // PUBLISH or CONSUME
}

type SockInfo

type SockInfo struct {
	Pid   uint32 `json:"pid"`
	Fd    uint64 `json:"fd"`
	Saddr string `json:"saddr"`
	Sport uint16 `json:"sport"`
	Daddr string `json:"daddr"`
	Dport uint16 `json:"dport"`
}

We need to keep track of the following in order to build find relationships between connections and pods/services

type SocketLine

type SocketLine struct {
	Values []*TimestampedSocket
	// contains filtered or unexported fields
}

func NewSocketLine

func NewSocketLine(ctx context.Context, pid uint32, fd uint64, fetch bool) *SocketLine

func (*SocketLine) AddValue

func (nl *SocketLine) AddValue(timestamp uint64, sockInfo *SockInfo)

func (*SocketLine) ClearAll

func (nl *SocketLine) ClearAll()

clears all socket history

func (*SocketLine) DeleteUnused

func (nl *SocketLine) DeleteUnused()

func (*SocketLine) GetValue

func (nl *SocketLine) GetValue(timestamp uint64) (*SockInfo, error)

type SocketMap

type SocketMap struct {
	M map[uint64]*SocketLine `json:"fdToSockLine"` // fd -> SockLine
	// contains filtered or unexported fields
}

type SocketMap

func (*SocketMap) ProcessSocketLineCreationRequests

func (sm *SocketMap) ProcessSocketLineCreationRequests()

only one worker can create socket lines for a particular process(socketmap)

func (*SocketMap) SignalSocketLine

func (sm *SocketMap) SignalSocketLine(ctx context.Context, fd uint64)

type TcpSocket

type TcpSocket struct {
	Inode  string
	SAddr  netaddr.IPPort
	DAddr  netaddr.IPPort
	Listen bool
}

type TimestampedSocket

type TimestampedSocket struct {
	Timestamp uint64    // unix timestamp in milliseconds
	LastMatch uint64    // last time this socket was matched on user space (request_time + process_latency)
	SockInfo  *SockInfo // write as nil on socket close
}