container-hive
container-hive copied to clipboard
Docker Orchestration Support (Swarm + Kubernetes)
- Use ansible to deploy privileged docker agents on each node
- Agents can be based on https://github.com/nicolaka/netshoot
- Agents only care about received packets per container
- Agents send tcp traces to a centralized backend server via UDP
- Backend cleans up data and updates its state in memory, then, sends current state to the frontend
- Backend dynamically adds nodes as new ips show up
- Periodically, IPs are mapped to container metadata every say 10s
- Side-effect: Decouple project from sysdig