OVS flow-based sampling seems to be the best way to enable more fine-tuned sampling of OVS.

It could be interesting to:

• adapt sampling rate to TCP flags (e.g. keep all SYN, sample others)
• additional filtering such as namespace-based, or labels-based filtering
• ACL / network policy correlation

There's a PoC done by amorenoz@redhat.com , cf https://docs.google.com/document/d/1y4e_qzbiJz1qpjpwsUJnePjDMDELvftVbZgIqrECAXI/edit#