-
Notifications
You must be signed in to change notification settings - Fork 290
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Do not trace processes spawned by internal shell command executor #6927
Merged
nikita-tkachenko-datadog
merged 1 commit into
master
from
nikita-tkachenko/do-not-trace-shell-command-executor
Apr 18, 2024
Merged
Do not trace processes spawned by internal shell command executor #6927
nikita-tkachenko-datadog
merged 1 commit into
master
from
nikita-tkachenko/do-not-trace-shell-command-executor
Apr 18, 2024
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
nikita-tkachenko-datadog
added
type: bug
comp: ci visibility
Continuous Integration Visibility
labels
Apr 18, 2024
nikita-tkachenko-datadog
changed the title
Do not trace processes spawned by internal shell comman executor
Do not trace processes spawned by internal shell command executor
Apr 18, 2024
BenchmarksStartupParameters
See matching parameters
SummaryFound 0 performance improvements and 0 performance regressions! Performance is the same for 48 metrics, 15 unstable metrics. Startup time reports for insecure-bankgantt
title insecure-bank - global startup overhead: candidate=1.34.0-SNAPSHOT~e9efadbee0, baseline=1.33.0-SNAPSHOT~a1463c6bf3
dateFormat X
axisFormat %s
section tracing
Agent [baseline] (1.081 s) : 0, 1080659
Total [baseline] (8.588 s) : 0, 8587964
Agent [candidate] (1.082 s) : 0, 1082323
Total [candidate] (8.554 s) : 0, 8553701
section iast
Agent [baseline] (1.198 s) : 0, 1197976
Total [baseline] (9.002 s) : 0, 9001806
Agent [candidate] (1.206 s) : 0, 1205667
Total [candidate] (9.029 s) : 0, 9028979
section iast_HARDCODED_SECRET_DISABLED
Agent [baseline] (1.199 s) : 0, 1199491
Total [baseline] (9.054 s) : 0, 9054415
Agent [candidate] (1.198 s) : 0, 1197742
Total [candidate] (9.013 s) : 0, 9013194
section iast_TELEMETRY_OFF
Agent [baseline] (1.196 s) : 0, 1195698
Total [baseline] (8.993 s) : 0, 8993021
Agent [candidate] (1.196 s) : 0, 1196087
Total [candidate] (8.996 s) : 0, 8995590
gantt
title insecure-bank - break down per module: candidate=1.34.0-SNAPSHOT~e9efadbee0, baseline=1.33.0-SNAPSHOT~a1463c6bf3
dateFormat X
axisFormat %s
section tracing
BytebuddyAgent [baseline] (676.894 ms) : 0, 676894
BytebuddyAgent [candidate] (677.647 ms) : 0, 677647
GlobalTracer [baseline] (311.152 ms) : 0, 311152
GlobalTracer [candidate] (311.784 ms) : 0, 311784
AppSec [baseline] (49.742 ms) : 0, 49742
AppSec [candidate] (49.76 ms) : 0, 49760
Remote Config [baseline] (664.566 µs) : 0, 665
Remote Config [candidate] (668.862 µs) : 0, 669
Telemetry [baseline] (7.634 ms) : 0, 7634
Telemetry [candidate] (7.706 ms) : 0, 7706
section iast
BytebuddyAgent [baseline] (793.917 ms) : 0, 793917
BytebuddyAgent [candidate] (798.687 ms) : 0, 798687
GlobalTracer [baseline] (287.7 ms) : 0, 287700
GlobalTracer [candidate] (289.527 ms) : 0, 289527
AppSec [baseline] (49.37 ms) : 0, 49370
AppSec [candidate] (50.639 ms) : 0, 50639
Remote Config [baseline] (572.081 µs) : 0, 572
Remote Config [candidate] (588.019 µs) : 0, 588
Telemetry [baseline] (7.294 ms) : 0, 7294
Telemetry [candidate] (8.946 ms) : 0, 8946
IAST [baseline] (24.765 ms) : 0, 24765
IAST [candidate] (22.748 ms) : 0, 22748
section iast_HARDCODED_SECRET_DISABLED
BytebuddyAgent [baseline] (793.405 ms) : 0, 793405
BytebuddyAgent [candidate] (792.924 ms) : 0, 792924
GlobalTracer [baseline] (289.74 ms) : 0, 289740
GlobalTracer [candidate] (287.966 ms) : 0, 287966
AppSec [baseline] (49.755 ms) : 0, 49755
AppSec [candidate] (51.186 ms) : 0, 51186
Remote Config [baseline] (609.102 µs) : 0, 609
Remote Config [candidate] (570.675 µs) : 0, 571
Telemetry [baseline] (7.41 ms) : 0, 7410
Telemetry [candidate] (7.423 ms) : 0, 7423
IAST [baseline] (24.232 ms) : 0, 24232
IAST [candidate] (23.207 ms) : 0, 23207
section iast_TELEMETRY_OFF
BytebuddyAgent [baseline] (791.363 ms) : 0, 791363
BytebuddyAgent [candidate] (791.298 ms) : 0, 791298
GlobalTracer [baseline] (288.247 ms) : 0, 288247
GlobalTracer [candidate] (288.307 ms) : 0, 288307
AppSec [baseline] (50.227 ms) : 0, 50227
AppSec [candidate] (49.02 ms) : 0, 49020
Remote Config [baseline] (597.375 µs) : 0, 597
Remote Config [candidate] (589.6 µs) : 0, 590
Telemetry [baseline] (7.379 ms) : 0, 7379
Telemetry [candidate] (8.139 ms) : 0, 8139
IAST [baseline] (23.436 ms) : 0, 23436
IAST [candidate] (24.29 ms) : 0, 24290
Startup time reports for petclinicgantt
title petclinic - global startup overhead: candidate=1.34.0-SNAPSHOT~e9efadbee0, baseline=1.33.0-SNAPSHOT~a1463c6bf3
dateFormat X
axisFormat %s
section tracing
Agent [baseline] (1.076 s) : 0, 1075645
Total [baseline] (10.339 s) : 0, 10338960
Agent [candidate] (1.082 s) : 0, 1081675
Total [candidate] (10.349 s) : 0, 10349037
section appsec
Agent [baseline] (1.191 s) : 0, 1191018
Total [baseline] (10.51 s) : 0, 10510471
Agent [candidate] (1.186 s) : 0, 1186428
Total [candidate] (10.549 s) : 0, 10548790
section iast
Agent [baseline] (1.196 s) : 0, 1196450
Total [baseline] (10.783 s) : 0, 10782895
Agent [candidate] (1.2 s) : 0, 1199758
Total [candidate] (10.747 s) : 0, 10747343
section profiling
Agent [baseline] (1.267 s) : 0, 1267265
Total [baseline] (10.575 s) : 0, 10574905
Agent [candidate] (1.267 s) : 0, 1266870
Total [candidate] (10.63 s) : 0, 10629839
gantt
title petclinic - break down per module: candidate=1.34.0-SNAPSHOT~e9efadbee0, baseline=1.33.0-SNAPSHOT~a1463c6bf3
dateFormat X
axisFormat %s
section tracing
BytebuddyAgent [baseline] (674.096 ms) : 0, 674096
BytebuddyAgent [candidate] (677.379 ms) : 0, 677379
GlobalTracer [baseline] (309.304 ms) : 0, 309304
GlobalTracer [candidate] (311.482 ms) : 0, 311482
AppSec [baseline] (49.623 ms) : 0, 49623
AppSec [candidate] (49.917 ms) : 0, 49917
Remote Config [baseline] (656.693 µs) : 0, 657
Remote Config [candidate] (666.681 µs) : 0, 667
Telemetry [baseline] (7.575 ms) : 0, 7575
Telemetry [candidate] (7.605 ms) : 0, 7605
section appsec
BytebuddyAgent [baseline] (696.686 ms) : 0, 696686
BytebuddyAgent [candidate] (693.952 ms) : 0, 693952
GlobalTracer [baseline] (291.841 ms) : 0, 291841
GlobalTracer [candidate] (291.037 ms) : 0, 291037
AppSec [baseline] (149.915 ms) : 0, 149915
AppSec [candidate] (149.359 ms) : 0, 149359
Remote Config [baseline] (626.993 µs) : 0, 627
Remote Config [candidate] (619.62 µs) : 0, 620
Telemetry [baseline] (7.856 ms) : 0, 7856
Telemetry [candidate] (7.526 ms) : 0, 7526
IAST [baseline] (19.355 ms) : 0, 19355
IAST [candidate] (19.201 ms) : 0, 19201
section iast
BytebuddyAgent [baseline] (792.939 ms) : 0, 792939
BytebuddyAgent [candidate] (794.108 ms) : 0, 794108
GlobalTracer [baseline] (287.133 ms) : 0, 287133
GlobalTracer [candidate] (288.03 ms) : 0, 288030
AppSec [baseline] (50.159 ms) : 0, 50159
AppSec [candidate] (50.016 ms) : 0, 50016
Remote Config [baseline] (568.19 µs) : 0, 568
Remote Config [candidate] (586.761 µs) : 0, 587
Telemetry [baseline] (8.025 ms) : 0, 8025
Telemetry [candidate] (7.398 ms) : 0, 7398
IAST [baseline] (23.274 ms) : 0, 23274
IAST [candidate] (25.2 ms) : 0, 25200
section profiling
BytebuddyAgent [baseline] (677.187 ms) : 0, 677187
BytebuddyAgent [candidate] (676.856 ms) : 0, 676856
GlobalTracer [baseline] (380.07 ms) : 0, 380070
GlobalTracer [candidate] (379.467 ms) : 0, 379467
AppSec [baseline] (49.976 ms) : 0, 49976
AppSec [candidate] (50.391 ms) : 0, 50391
Remote Config [baseline] (708.63 µs) : 0, 709
Remote Config [candidate] (694.746 µs) : 0, 695
Telemetry [baseline] (7.453 ms) : 0, 7453
Telemetry [candidate] (7.448 ms) : 0, 7448
ProfilingAgent [baseline] (95.594 ms) : 0, 95594
ProfilingAgent [candidate] (95.683 ms) : 0, 95683
Profiling [baseline] (95.618 ms) : 0, 95618
Profiling [candidate] (95.707 ms) : 0, 95707
LoadParameters
See matching parameters
SummaryFound 1 performance improvements and 0 performance regressions! Performance is the same for 10 metrics, 17 unstable metrics.
Request duration reports for petclinicgantt
title petclinic - request duration [CI 0.99] : candidate=1.34.0-SNAPSHOT~e9efadbee0, baseline=1.33.0-SNAPSHOT~a1463c6bf3
dateFormat X
axisFormat %s
section baseline
no_agent (1.326 ms) : 1305, 1346
. : milestone, 1326,
appsec (1.714 ms) : 1690, 1738
. : milestone, 1714,
appsec_no_iast (1.733 ms) : 1708, 1758
. : milestone, 1733,
iast (1.505 ms) : 1482, 1527
. : milestone, 1505,
profiling (1.551 ms) : 1526, 1576
. : milestone, 1551,
tracing (1.492 ms) : 1468, 1515
. : milestone, 1492,
section candidate
no_agent (1.324 ms) : 1305, 1343
. : milestone, 1324,
appsec (1.714 ms) : 1689, 1738
. : milestone, 1714,
appsec_no_iast (1.699 ms) : 1674, 1724
. : milestone, 1699,
iast (1.475 ms) : 1452, 1498
. : milestone, 1475,
profiling (1.481 ms) : 1457, 1506
. : milestone, 1481,
tracing (1.463 ms) : 1440, 1486
. : milestone, 1463,
Request duration reports for insecure-bankgantt
title insecure-bank - request duration [CI 0.99] : candidate=1.34.0-SNAPSHOT~e9efadbee0, baseline=1.33.0-SNAPSHOT~a1463c6bf3
dateFormat X
axisFormat %s
section baseline
no_agent (358.69 µs) : 339, 379
. : milestone, 359,
iast (476.322 µs) : 455, 497
. : milestone, 476,
iast_FULL (534.509 µs) : 514, 555
. : milestone, 535,
iast_GLOBAL (491.486 µs) : 470, 513
. : milestone, 491,
iast_HARDCODED_SECRET_DISABLED (474.359 µs) : 453, 496
. : milestone, 474,
iast_INACTIVE (438.226 µs) : 418, 459
. : milestone, 438,
iast_TELEMETRY_OFF (464.606 µs) : 443, 486
. : milestone, 465,
tracing (434.1 µs) : 414, 454
. : milestone, 434,
section candidate
no_agent (360.65 µs) : 341, 380
. : milestone, 361,
iast (464.563 µs) : 444, 485
. : milestone, 465,
iast_FULL (531.34 µs) : 510, 553
. : milestone, 531,
iast_GLOBAL (494.686 µs) : 473, 517
. : milestone, 495,
iast_HARDCODED_SECRET_DISABLED (467.404 µs) : 446, 488
. : milestone, 467,
iast_INACTIVE (447.445 µs) : 427, 468
. : milestone, 447,
iast_TELEMETRY_OFF (465.147 µs) : 444, 486
. : milestone, 465,
tracing (438.093 µs) : 418, 459
. : milestone, 438,
DacapoParameters
See matching parameters
SummaryFound 0 performance improvements and 0 performance regressions! Performance is the same for 12 metrics, 0 unstable metrics. Execution time for biojavagantt
title biojava - execution time [CI 0.99] : candidate=1.34.0-SNAPSHOT~e9efadbee0, baseline=1.33.0-SNAPSHOT~a1463c6bf3
dateFormat X
axisFormat %s
section baseline
no_agent (15.013 s) : 15013000, 15013000
. : milestone, 15013000,
appsec (14.84 s) : 14840000, 14840000
. : milestone, 14840000,
iast (18.872 s) : 18872000, 18872000
. : milestone, 18872000,
iast_GLOBAL (17.869 s) : 17869000, 17869000
. : milestone, 17869000,
profiling (15.902 s) : 15902000, 15902000
. : milestone, 15902000,
tracing (14.953 s) : 14953000, 14953000
. : milestone, 14953000,
section candidate
no_agent (15.367 s) : 15367000, 15367000
. : milestone, 15367000,
appsec (15.049 s) : 15049000, 15049000
. : milestone, 15049000,
iast (18.953 s) : 18953000, 18953000
. : milestone, 18953000,
iast_GLOBAL (17.958 s) : 17958000, 17958000
. : milestone, 17958000,
profiling (15.122 s) : 15122000, 15122000
. : milestone, 15122000,
tracing (14.951 s) : 14951000, 14951000
. : milestone, 14951000,
Execution time for tomcatgantt
title tomcat - execution time [CI 0.99] : candidate=1.34.0-SNAPSHOT~e9efadbee0, baseline=1.33.0-SNAPSHOT~a1463c6bf3
dateFormat X
axisFormat %s
section baseline
no_agent (1.46 ms) : 1449, 1472
. : milestone, 1460,
appsec (2.2 ms) : 2166, 2233
. : milestone, 2200,
iast (1.871 ms) : 1836, 1905
. : milestone, 1871,
iast_GLOBAL (1.91 ms) : 1875, 1945
. : milestone, 1910,
profiling (1.844 ms) : 1810, 1878
. : milestone, 1844,
tracing (1.812 ms) : 1781, 1843
. : milestone, 1812,
section candidate
no_agent (1.46 ms) : 1448, 1471
. : milestone, 1460,
appsec (2.205 ms) : 2171, 2239
. : milestone, 2205,
iast (1.872 ms) : 1838, 1906
. : milestone, 1872,
iast_GLOBAL (1.912 ms) : 1877, 1946
. : milestone, 1912,
profiling (1.84 ms) : 1808, 1872
. : milestone, 1840,
tracing (1.826 ms) : 1794, 1858
. : milestone, 1826,
|
romainkomorndatadog
approved these changes
Apr 18, 2024
nikita-tkachenko-datadog
deleted the
nikita-tkachenko/do-not-trace-shell-command-executor
branch
April 18, 2024 17:18
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
What Does This Do
Updates
ShellCommandExecutor
component so that it mutes tracing for the processes that it spawns.Motivation
If not muted, the processes may show up as spans in the user's traces, which is incorrect since those processes are started by the tracer and not by the traced application.
Jira ticket: CIVIS-9821