Skip to content

Commit 9201e64

Browse files
committed
Add ipsec ebpf packet processing diagram
Signed-off-by: Mohamed S. Mahmoud <mmahmoud2201@gmail.com>
1 parent 66dd77e commit 9201e64

File tree

2 files changed

+5
-0
lines changed

2 files changed

+5
-0
lines changed

content/posts/2025-07-07-ipsec/index.md

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -44,6 +44,11 @@ To monitor decryption:
4444
- Set a **`kprobe`** on the `xfrm_input` function to trace when decryption is triggered.
4545
- Use a **`kretprobe`** on `xfrm_input` to capture the return code and associated flow information, helping determine success or failure.
4646

47+
The following diagram shows how IPsec packets is processed at ebpf layers and how the netobserv flow been created and updated to reflect ipsec packet processing status
48+
49+
50+
![IPsec eBPF packet processing](ipsec.png)
51+
4752
---
4853

4954
## Network Observability Enrichment
69.8 KB
Loading

0 commit comments

Comments
 (0)