Inspektor Gadget

The Inspektor has arrived

All the tools you need to investigate your cluster’s toughest issues

Expanding BPF usage from single nodes to across the entire cluster

Maps low-level Linux resources to high-level Kubernetes concepts

Use stand-alone or integrate into your own tooling

eBPF-based tooling for investigating the toughest Kubernetes issues

Inspektor Gadget provides a wide selection of BPF tools to dig deep into your Kubernetes cluster

The Gadgets

Find information about all the Inspektor Gadget gadgets organized into their corrosponding categories

Go to the docs »

Advise Gadgets (2)

Advise gadgets suggest different system configurations by capturing and analyzing data from the host

network-policy

Monitors the network activity in the specified namespaces and records a summary of TCP and UDP traffic in a file

seccomp-profile

Records syscalls that are issued in a specified pod and then uses this information to generate the corresponding seccomp profile

Audit Gadgets (1)

Audit gadgets help to audit specific functionalities or security settings

seccomp

Provides a stream of events with syscalls that had their seccomp filters generating an audit log

Profile Gadgets (2)

Profile gadgets provide a way to measure the performance of a sub-system. These gadgets capture system events for a period and print a report

block-io

Gathers information about the usage of the block device I/O, generating a histogram distribution of I/O latency

cpu

Takes samples of the stack traces

Snapshot Gadgets (2)

Snapshot gadgets capture and print the status of a system at a specific point in time

process

Gathers information about running processes

socket

Gathers information about TCP and UDP sockets

Top Gadgets (4)

Top gadgets show the current activity sorted by the highest to the lowest in the resource being observed, generating the output every few seconds

block-io

Track the containers generating the most block device input/output

bpf

Track the usage and performance of eBPF programs

file

Track reads and writes by file, with container details

tcp

Track active TCP connections

Trace Gadgets (13)

Trace gadgets capture and output a stream system events

bind

Trace the kernel functions performing socket binding

capabilities

Trace security capability checks

dns

Trace DNS requests events

exec

Trace process invocation events

fsslower

Trace open, read, write and fsync operations slower than a threshold

mount

Trace mount and umount system calls

network-graph

Monitors the network activity in the specified pods and records the list of TCP connections and UDP streams

oomkill

Trace when OOM killer is triggered and kills a process

open

Trace open system calls.

signal

Trace signals received by processes

sni

Trace Server Name Indication (SNI) from TLS requests

tcp

Trace tcp gadget can be used to monitor tcp connections, as it shows connect, accept and close events related to TCP connections

tcpconnect

Trace connect system calls

Latest Posts

Feb 13, 2023

Leveraging OCI Runtime Annotations for Kubernetes Tooling

Oct 21, 2022