Barun Acharya
Barun Acharya
@toadzhou We have been pondering about it for a while. The main blocker for implementing this has been lack of support for these matching in AppArmor. But we are now...
- How would KubeArmor daemonset attach a profile to itself? - Failed admission if annotation added and no profile found Potential Solution - Snitch has the intelligence to load the...
- Seccomp Loading - Try running all other KA Components with Seccomp RuntimeDefault
- Remove skipping kubearmor-app logic from KubeArmor. - Have snitch generate apparmor profile just for kubearmor daemonset with a privileged default profile - annotate kubearmor daemonset if snitch successful -...
Hey @dejavudwh, We have worked towards improving our performance on BPF Enforcer. The numbers are much different now as well as much more in favour of BPFLSM. The updated benchmarking...
@dejavudwh It's anywhere between 1% to 8% depending on what kind of policies and what kind of workloads. Process Only Policies have least overhead Process and Network Moderate If we...
@dejavudwh Anytime 😁 Anything else we can help with? If something is not clear, Feel free to join us on our [Slack](https://join.slack.com/t/kubearmor/shared_invite/zt-2bhlgoxw1-WTLMm_ica8PIhhNBNr2GfA) [](https://join.slack.com/t/kubearmor/shared_invite/zt-2bhlgoxw1-WTLMm_ica8PIhhNBNr2GfA) Also It would be great to know,...
@dejavudwh Here's the final Benchmarking datasheet https://github.com/kubearmor/KubeArmor/wiki/KubeArmor-Performance-Benchmarking-Data The benchmarking is based on actual operational environment. https://github.com/GoogleCloudPlatform/microservices-demo/ It involves scaled applications. And performance differences are measured on throughput. We did not...
Can we look for ways, why is it that the website cannot generate our report? (It's probably due our repository structure) But it would be best to report to the...