You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/aks/advanced-container-networking-services-overview.md
+4-120Lines changed: 4 additions & 120 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -11,9 +11,6 @@ ms.date: 05/10/2024
11
11
12
12
# What is Advanced Container Networking Services?
13
13
14
-
Kubernetes is a powerful tool for managing containerized applications. As your deployments grow, ensuring smooth network operation becomes more challenging.
15
-
Identifying and resolving network issues within a complex Kubernetes cluster can be a time-consuming task.
16
-
17
14
Advanced Container Networking Services is a comprehensive suite built upon existing Azure Kubernetes Services (AKS) networking solutions. Designed to address the evolving demands of modern containerized applications, Advanced Container Networking Services tackles complex challenges in observability, security, and compliance.
18
15
19
16
## What is included in Advanced Container Networking Services?
@@ -24,128 +21,15 @@ The first feature in this suite is Advanced Network Observability. This provides
24
21
25
22
Advanced Network Observability is the foundation of the Advanced Container Networking Services suite. It equips you with next-level monitoring and diagnostics tools, providing unparalleled visibility into your containerized workloads. These tools empower you to pinpoint and troubleshoot network issues with ease, ensuring optimal performance for your applications.
26
23
27
-
Advanced Network Observability offers compatibility across all Linux workloads. It seamlessly integrates with Hubble, regardless of the underlying data planes.
28
-
29
-
Advanced Container Networking Services offers support for both Cilium and non-Cilium data planes, ensuring flexibility for your container networking needs.
30
-
31
-
* Cilium Data plane: This is a high-performance, eBPF-based data plane specifically designed for Kubernetes environments. This data plane Powered by Open-source project [Cilium](https://cilium.io/).
32
-
33
-
* Non-Cilium Data plane: Powered by the open-source project [Retina](https://retina.sh), this data plane provides a compatible alternative for users not using Cilium. Retina is also built using eBPF technology.
34
-
35
-
:::image type="content" source="./media/advanced-container-networking-services/advanced-network-observability.png" alt-text="Diagram of Advanced Network Observability.":::
36
-
37
-
> [!NOTE]
38
-
> For deployments leveraging Cilium data planes, Advanced Network Observability is readily available starting with Kubernetes version 1.29.
39
-
> For Non-Cilium Linux data planes, Advanced Network Observability is supported on all Linux distributions. Azure Linux is supported starting with version 2.0 and greater.
40
-
41
-
### Features of Advanced Network Observability
42
-
43
-
Advanced Network Observability offers the following capabilities to monitor network-related issues in your cluster:
44
-
45
-
-**Node-Level Metrics:** Understanding the health of your container network at the node-level is crucial for maintaining optimal application performance. These metrics indicate traffic volume, dropped packets, number of connections, etc. by node. Since they are Prometheus metrics, you can view them in Grafana or create custom alerts.
46
-
47
-
-**Hubble Metrics (DNS and Pod-Level Metrics):** These Prometheus metrics include source/destination Pod information, empowering you to pinpoint network-related issues at a granular level. Metrics cover traffic volume, dropped packets, TCP resets, L4/L7 packet flows, etc. There are also DNS metrics (currently only for Non-Cilium data planes), covering DNS errors and DNS requests missing responses.
48
-
49
-
-**Hubble Flow Logs:** Flow logs unlock deep visibility into your cluster's network activity. All communications to/from Pods are logged, allowing you to investigate connectivity issues and more. Flow logs help answer questions such as: did the server receive the client's request? What is the round-trip latency between the client's request and server's response?
50
-
51
-
-**Hubble CLI:** The Hubble Command-Line Interface (CLI) provides a means to retrieve flow logs from across the cluster with customizable filtering and formatting.
52
-
53
-
-**Hubble UI:** Hubble UI is a user-friendly web-browser interface for exploring your cluster's network activity. It creates a service-connection graph based on Flow logs, and it also displays flow logs for the selected namespace. You're responsible for provisioning and managing the infrastructure required to run Hubble UI.
54
-
55
-
### Key Benefits of Advanced Network Observability
56
-
57
-
***CNI-Agnostic**: Supported on kubenet and all Azure CNI modes.
58
-
59
-
***Cilium and Non-Cilium**: Uniform and seamless experience across Cilium and Non-Cilium data planes.
60
-
61
-
***eBPF-Based Network Observability:** Identify potential bottlenecks and congestion issues before they impact application performance. Gain insights into key network health indicators, including traffic volume, dropped packets, and connection information.
62
-
63
-
***Deep Visibility into Network Activity:** Understand how your applications are communicating with each other through detailed network flow logs.
***Azure Managed Prometheus and Grafana**: With this option, Azure manages the infrastructure and maintenance, allowing you to focus on configuring and visualizing metrics.
67
-
***Bring your own (BYO) Prometheus and Grafana**: With this option, you set up your own instances and manage the underlying infrastructure.
68
-
69
-
### Metrics
70
-
71
-
#### Node-Level Metrics
72
-
73
-
The following metrics are aggregated per Node. All metrics include the labels:
74
-
75
-
-`cluster`
76
-
-`instance` (Node name)
77
-
78
-
# [**Non-Cilium**](#tab/non-cilium)
79
-
80
-
On Non-Cilium data plane, the Network Observability add-on provides metrics in both Linux and Windows platforms.
81
-
The below table outlines the different metrics generated.
82
-
83
-
| Metric Name | Description | Extra Labels | Linux | Windows |
|**hubble_dns_queries_total**| Total DNS requests by query |`source` or `destination`, `query`, `qtypes` (query type) | ✅ | ❌ |
125
-
|**hubble_dns_responses_total**| Total DNS responses by query/response |`source` or `destination`, `query`, `qtypes` (query type), `rcode` (return code), `ips_returned` (number of IPs) | ✅ | ❌ |
126
-
|**hubble_drop_total**| Total dropped packet count |`source` or `destination`, `protocol`, `reason`| ✅ | ❌ |
127
-
|**hubble_tcp_flags_total**| Toctal TCP packets count by flag. |`source` or `destination`, `flag`| ✅ | ❌ |
128
-
|**hubble_flows_processed_total**| Total network flows processed (L4/L7 traffic) |`source` or `destination`, `protocol`, `verdict`, `type`, `subtype`| ✅ | ❌ |
129
-
130
-
### Limitations
131
-
132
-
- Pod-level metrics available only on Linux.
133
-
- Cilium data plane is supported starting with Kubernetes version 1.29.
134
-
- Metric labels may have subtle differences between Cilium and Non-Cilium clusters.
135
-
- Cilium data plane does not currently support DNS metrics.
136
-
137
-
### Scale
138
-
139
-
Certain scale limitations apply when you use Azure managed Prometheus and Grafana. For more information, see [Scrape Prometheus metrics at scale in Azure Monitor](/azure/azure-monitor/essentials/prometheus-metrics-scrape-scale)
24
+
For more information about Advanced Network Observability, see [What is Advanced Network Observability?](/azure/aks/intro-kubernetes).
140
25
141
26
## Pricing
142
-
143
-
This feature is going to be charged starting 28th May 2024. More details will be shared in few days.
27
+
> [!IMPORTANT]
28
+
> This feature is going to be charged starting 28th May 2024. More details will be shared in few days.
144
29
145
30
## Next steps
146
31
147
32
- For more information about Azure Kubernetes Service (AKS), see [What is Azure Kubernetes Service (AKS)?](/azure/aks/intro-kubernetes).
148
33
149
-
-To create an AKS cluster with Advanced Network Observability and Azure managed Prometheus and Grafana, see [Setup Advanced Network Observability for Azure Kubernetes Service (AKS) Azure managed Prometheus and Grafana](advanced-network-observability-cli.md).
34
+
-For more information about Advanced Network Observability, see [What is Advanced Network Observability?](advanced-network-observability-concepts.md).
150
35
151
-
- To create an AKS cluster with Advanced Network Observability and BYO Prometheus and Grafana, see [Setup Advanced Network Observability for Azure Kubernetes Service (AKS) BYO Prometheus and Grafana](advanced-network-observability-byo-cli.md).
# Setup of Advanced Network Observability for Azure Kubernetes Service (AKS) (Preview)
13
+
# Set up Advanced Network Observability for Azure Kubernetes Service (AKS) (Preview)
14
14
15
15
This article shows you how to set up Advanced Network Observability for Azure Kubernetes Service (AKS) and use bring your own (BYO) Prometheus and Grafana to visualize the scraped metrics.
# Setup of Advanced Network Observability for Azure Kubernetes Service (AKS) - Azure managed Prometheus and Grafana
13
+
# Set up Advanced Network Observability for Azure Kubernetes Service (AKS) - Azure managed Prometheus and Grafana
14
14
15
15
This article shows you how to set up Advanced Network Observability for Azure Kubernetes Service (AKS) using Managed Prometheus and Grafana to visualize the scraped metrics.
0 commit comments