• Icon: Epic Epic
    • Resolution: Unresolved
    • Icon: Normal Normal
    • None
    • None
    • eBPF, FLP
    • None
    • network-policies-correlation
    • BU Product Work
    • False
    • None
    • False
    • Not Selected
    • To Do
    • OCPSTRAT-488 - OVN Observability with Sampling (tech preview)
    • OCPSTRAT-488OVN Observability with Sampling (tech preview)
    • 7% To Do, 7% In Progress, 86% Done
    • M
    • NetObserv - Sprint 234

      We should be able to correlate flows with network policies:

      • which policy allowed that flow?
      • what's the dropped flows?
      • provide global stats on dropped / accepted traffic

       

      PoC doc: https://docs.google.com/document/d/14Y3YYFxuOs3o-Lkipf-d7ZZp5gpbk6-01ZT_fTraCu8/edit

      There are two possible approaches in terms of implementation:

      • Add new "netpolicy flows" on top of existing flows
      • Enrich existing flows with netpolicy info.

      The PoC describes the former, however it is probably most interesting to aim the latter. (95% of the PoC is valid in both cases, ie. all the "low level" parts: OvS, OVN). The latter involves more work in FLP.

              mmahmoud@redhat.com Mohamed Mahmoud
              jtakvori Joel Takvorian
              Mehul Modi Mehul Modi
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

                Created:
                Updated: