We have 2 network observability use cases with different posture on sampling:

1. North-South traffic - For compliance reasons, we need to log all outgoing connections to the public internet. No sampling allowed.
2. East-West traffic - We want to observe network flows inside the corporate network (and inside the OpenShift cluster) to identify and analyze various network issues, but this traffic can be sampled.

Those are busy environments. Logging all traffic or filtering it above eBPF layer is likely not an option for us. We need an efficient solution.