Skip to content

v52.3.68

Latest
Latest
Compare
Choose a tag to compare
@github-actions github-actions released this 17 Jun 01:44
· 1 commit to master since this release
v52.3.68
ba1254f
This commit was signed with the committer’s verified signature.
mertyildiran M. Mert Yildiran
GPG key ID: DA5D6DCBB758A461
Learn about vigilant mode.

v52.3.68 (2024-06-16)

Release Highlights

Keywords: BPF, Multus, network interfaces, CNIs, SCTP, traffic debugging, PCAP Dumper

This version primarily focuses on increasing support for multiple network interfaces and CNIs such as Multus. Prior to this version, Kubeshark targeted only the default network interface, discarding traffic from additional interfaces if they were used (e.g., by Multus). This release brings support for Multus and multiple network interfaces, capturing all traffic across all interfaces and VLANs.

In addition, two new debug tools have been added to help identify traffic issues and answer questions such as why traffic is not appearing on the dashboard.

Additionally, we have improved the traffic recorder based on real usage feedback and added initial support for the SCTP protocol.

Lastly, in this version, we extended Kubeshark's TLS capture capabilities. Prior versions captured TLS traffic only on port 443. This version extends this ability, and now Kubeshark captures TLS traffic on any port.

New Features & Bug Fixes

  • Added a traffic debugging capability that enables users to explicitly add a BPF expression, focusing on specific traffic. This capability is useful for observing traffic based on network characteristics (e.g., IP, subnet, etc.). For example, observing traffic on a secondary interface or a VLAN. This BPF filter overrides any other pod targeting rules. Read more about it here.
  • The PCAP Dumper is akin to running tcpdump on the node. It dumps the raw traffic into a named pipe directly from the node before any processing is done. This capability is particularly useful for debugging traffic when it isn't visible on the dashboard. Read more about it here.
  • Identified duplicate API calls captured both on the client and server, for example, when the client and server are on different nodes. The duplicate traffic is marked with a dup badge.
  • Added partial SCTP protocol support.
  • Support for Multus and multiple interfaces. Kubeshark now captures traffic across all network interfaces and VLANs.
  • Capture TLS traffic on ports other than 443.
  • Improved Traffic Recorder capabilities to capture traffic in situations when the PCAP file has already expired due to a short TTL, which is common in busy clusters.
  • Added the ability to extend the PCAP TTL using configuration. Read more here.
  • Increased TLS OpenSSL support in situations where OpenSSL is used under custom names. (kubeshark/tracer@147a184)

Download Kubeshark for your platform

Mac (x86-64/Intel)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.68/kubeshark_darwin_amd64 && chmod 755 kubeshark

Mac (AArch64/Apple M1 silicon)

rm -f kubeshark && curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.68/kubeshark_darwin_arm64 && chmod 755 kubeshark

Linux (x86-64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.68/kubeshark_linux_amd64 && chmod 755 kubeshark

Linux (AArch64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.68/kubeshark_linux_arm64 && chmod 755 kubeshark

Windows (x86-64)

curl -LO https://github.com/kubeshark/kubeshark/releases/download/v52.3.68/kubeshark.exe

Checksums

SHA256 checksums available for compiled binaries.
Run shasum -a 256 -c kubeshark_OS_ARCH.sha256 to verify.

Assets 14