Technology1 min read

What's new in network observability 1.12

By · Published by Everything Blog

In short

Red Hat has released version 1.12 of the Network Observability operator to provide traffic insights and troubleshooting capabilities aligned with OpenShift Container Platform 4.22. A major security addition includes an optional eBPF-level TLS tracking feature that captures cipher suites, cryptographic curves, and protocol versions for compliance verification. The update also protects internal communication between the eBPF agents and the flowlogs-pipeline using native OpenShift annotations by default. Additionally, the release improves pipeline efficiency by introducing Kafka compression alongside a shared cache component.

Key points

  • Administrators can verify cluster compliance against security policies using newly captur…: Administrators can verify cluster compliance against security policies using newly captured TLS metadata displayed in web console graphs and topology views.
  • Operators have the flexibility to disable internal pipeline encryption or supply custom s…: Operators have the flexibility to disable internal pipeline encryption or supply custom security certificates as needed.
  • Data processing performance is boosted through the introduction of Kafka compression and…: Data processing performance is boosted through the introduction of Kafka compression and a shared cache component for the flowlogs-pipeline.

Sources checked by our analysis pipeline: 1

Network observability is an optional operator for Red Hat OpenShift web console for insight into your network traffic and help with troubleshooting. With release 1.12, it aligns with Red Hat OpenShift Container Platform 4.22 and is backwards-compatible to 4.14.

At its core, network observability uses extended Berkeley packet filter (eBPF) agent to collect and aggregate network flow data. A flowlogs-pipeline (FLP) component processes and enriches the data with Kubernetes metadata, such as its pod name and namespace. They are stored as Loki logs and Prometheus metrics. When you install the operator, it adds a UI plug-in to OpenShift to provide visualization in the form of graphs, a flow table, and a topology view.

To try out the features in this version, you need an OpenShift cluster and access to the oc

command. Start by following the instructions to install the network observability operator. For an overview of features and the list of issues fixed, see the release notes.

There is an upstream version, but this article focuses on using Red Hat OpenShift, including:

- Security improvements

- TLS tracking

-…

Technology