1c:I[23184,["4935","static/chunks/e37a0b60-b7062aeb3e077701.js","7396","static/chunks/7396-5eede9192cffda4c.js","4231","static/chunks/4231-ff6a283451a0d49a.js","5772","static/chunks/5772-540eb640d54b1892.js","7294","static/chunks/7294-b1de21a134456890.js","4262","static/chunks/4262-07b214f870c59abc.js","2834","static/chunks/2834-7daad507186269e4.js","1611","static/chunks/1611-23d9ce45dc44b0d3.js","6458","static/chunks/6458-0257f5ca7e6e5a4b.js","1785","static/chunks/1785-e4260c080013d64f.js","7195","static/chunks/7195-3b13726365c6e878.js","3368","static/chunks/3368-8e0ccce09b34091c.js","5761","static/chunks/5761-0fb60d57c907c452.js","5635","static/chunks/5635-ee03b2f09051cfc4.js","2215","static/chunks/2215-22e2203467860ce9.js","633","static/chunks/633-70259b95e13ad875.js","6546","static/chunks/6546-79a1270fef573162.js","6776","static/chunks/app/(auth)/(consumer)/guides/page-a12eaae77269295e.js"],"default"] 1d:T757,kind: DaemonSet apiVersion: apps/v1 metadata: name: apiwiz-tracer-ds namespace: cbq2-ocu-apiwiz spec: selector: matchLabels: name: apiwiz-tracer-ds template: metadata: labels: name: apiwiz-tracer-ds spec: nodeSelector: node-role.kubernetes.io/app-worker: '' restartPolicy: Always hostPID: true schedulerName: default-scheduler hostNetwork: true terminationGracePeriodSeconds: 30 securityContext: {} containers: - resources: limits: cpu: 300m memory: 650Mi requests: cpu: 100m memory: 200Mi terminationMessagePath: /dev/termination-log name: apiwiz-tracer env: - name: LOGLEVEL value: INFO - name: LOGMODE value: console - name: LOGBACKUP value: '1' securityContext: privileged: true imagePullPolicy: IfNotPresent volumeMounts: - name: config-properties readOnly: true mountPath: /app/config.properties subPath: config.properties - name: usr-src readOnly: true mountPath: /usr/src - name: lib-modules readOnly: true mountPath: /lib/modules terminationMessagePolicy: File image: '' serviceAccountName: kong-apiwiz-sa volumes: - name: config-properties configMap: name: apiwiz-tracer-configmap - name: usr-src hostPath: path: /usr/src type: Directory - name: lib-modules hostPath: path: /lib/modules type: Directory dnsPolicy: ClusterFirst1e:T11c0,kind: ConfigMap apiVersion: v1 metadata: name: apiwiz-tracer-configmap namespace: immutable: false data: config.properties: |- [DEFAULT] ############################ # Required APIwiz settings ############################ api_endpoint=https:///v1/events x_client_id= x_client_secret= index_name= ############################ # Required trace/header aliases ############################ alias_trace_id=traceid alias_span_id=spanid alias_parent_span_id=parentspanid alias_request_timestamp=requestTimestamp alias_response_timestamp=responseTimestamp alias_gateway_type=gatewayType ############################ # Required host/network settings ############################ server_cluster_ip= ############################ # Optional tracer/runtime settings ############################ # Default: 10 idle_threshold=10 # Default: empty / None # For HTTPS/nginx tracing. Can use a static path or PID template like: # /proc/[PID]/root/usr/lib64/libssl.so.3 #ssl_lib_path=/proc/[PID]/root/usr/local/kong/lib/libssl.so.3 ssl_lib_path=/usr/local/kong/lib/libssl.so.3 # Default: false enable_outbound=false # Default: empty list outbound_paths= # Default: 4096 max_data_size=4096 ############################ # Interface/path filters ############################ # Default: empty list exclude_interfaces=lo # Default: empty list exclude_paths=/health,/metrics,/internal,/ready,/readyz,/v1/apiwiz-runtime-agent,/raft/probing,/v1/cluster,/ContainerLiveness,/ContainerReadiness,/version,/api_version,/v3/events/biz_txn_v1,/api/ping,/dsf-iris/api,/itorix,/livesz,/indexer/api/v1/index_state,/liveness,/readiness,/v1/data/apiwiz,/static/js,/livez,/v1/osd-volumes,/T5CloudService,/secscan,/api/v1/query,/admin/user,/apiv2/socket,/api/upgrades_info,/status,/irf-rp-services,/containerid,/v1/stats/collect,/apiwiz/execute,/ip-api/json,/v1/logger-agent,/leases,/applications,/Browser,/Browser/ # Default: empty list include_paths=/issuer # Default: empty list microservice_exclude_paths= # Default: empty list #nic_override=eth0 ############################ # De-dup cache settings ############################ # Default: false use_sharded_cache=true # Default: 300000 cache_max_size=300000 # Default: 30 cache_ttl_secs=30 # Default: 1024 cache_num_shards=1024 # Default: 512 cache_cleanup_every=512 ############################ # APIwiz metadata ############################ # Default: x_client_id environment= # Default: index_name application_name= # Default: index_name service_name= service_type= # Default: MICROSERVICE service_category=GATEWAY # Default: socket.gethostname() host_name= # Default: detected server IP or server_cluster_ip host_ip= ############################ # Feature flags ############################ # Default: true capture_payload=true # Default: false security=true # Default: true compliance=true # Default: false monetization=false ############################ # Batching settings ############################ # Default: true batching_enabled=true # Default: 100 batch_max_size=100 # Default: 2000 batch_flush_interval_ms=2000 # Default: 10000 batch_queue_capacity=1000 # Default: 2 batch_worker_count=2 # Default: true batch_drop_oldest=true ############################ # Sampling settings ############################ # Default: false sampling_enabled=false # Default: 1.0 # 1.0 = send all matching events # 0.1 = send ~10% sampling_rate=1.0 # Default: empty list # Examples: 2xx,3xx,4xx,5xx,200,500 sampling_status_codes= # Default: empty list # Examples: application/json,text/xml,text/plain sampling_content_types= # Default: 0 sampling_min_content_length=0 # Default: -1 # -1 means no upper limit sampling_max_content_length=-112:["$","$L1c",null,{"initialPage":{"pageId":"6a67230669d1ae9705725f07","title":"Capture traffic using eBPF ","blocks":[{"id":"40b997ef-8852-4f47-990e-e1e7281da275","type":"paragraph","props":{"backgroundColor":"default","textColor":"default","textAlignment":"left"},"content":[{"type":"text","text":"eBPF (Extended Berkeley Packet Filter) is a traffic-capture mode in APIwiz that observes live API traffic directly at the operating system kernel level. By using eBPF, APIwiz captures request and response flows without requiring changes to application code, SDKs, or API gateways.","styles":{}}],"children":[]},{"id":"028210ad-1955-4f5c-90ca-159d2af728dd","type":"paragraph","props":{"backgroundColor":"default","textColor":"default","textAlignment":"left"},"content":[{"type":"text","text":"This approach enables deep API observability, including logging, tracing, and monitoring, by passively observing network traffic as it passes through the server kernel.","styles":{}}],"children":[]},{"id":"0365a125-b63a-437b-ba91-5dbd47d81da3","type":"paragraph","props":{"backgroundColor":"default","textColor":"default","textAlignment":"left"},"content":[{"type":"text","text":"eBPF is particularly useful in:","styles":{}}],"children":[]},{"id":"ddf74866-b89b-4d4e-9a41-4aa7cbfebf62","type":"bulletListItem","props":{"backgroundColor":"default","textColor":"default","textAlignment":"left"},"content":[{"type":"text","text":"Brownfield environments","styles":{}}],"children":[]},{"id":"49a601f0-7ad8-4aa0-b71e-2ab5488c8dd7","type":"bulletListItem","props":{"backgroundColor":"default","textColor":"default","textAlignment":"left"},"content":[{"type":"text","text":"Legacy systems","styles":{}}],"children":[]},{"id":"3c414309-3cb2-46fc-9b4b-4d3ee03394ef","type":"bulletListItem","props":{"backgroundColor":"default","textColor":"default","textAlignment":"left"},"content":[{"type":"text","text":"Platforms where application instrumentation is not feasible","styles":{}}],"children":[]},{"id":"c18473f8-7f6b-45ff-8bfb-019598122a33","type":"heading","props":{"backgroundColor":"default","textColor":"default","textAlignment":"left","level":3,"isToggleable":false},"content":[{"type":"text","text":"How eBPF works in APIwiz","styles":{}}],"children":[]},{"id":"a37e6b26-7940-4e18-9de7-909b20a6439f","type":"paragraph","props":{"backgroundColor":"default","textColor":"default","textAlignment":"left"},"content":[{"type":"text","text":"When eBPF is enabled, APIwiz processes API traffic through the following sequence:","styles":{}}],"children":[]},{"id":"2b9e5002-3bd4-4649-b298-dae948b8007c","type":"numberedListItem","props":{"backgroundColor":"default","textColor":"default","textAlignment":"left"},"content":[{"type":"text","text":"The user enables the eBPF traffic-capture mode in APIwiz.","styles":{}}],"children":[]},{"id":"292e9e5f-0da5-4214-a47b-bffefffd5a45","type":"numberedListItem","props":{"backgroundColor":"default","textColor":"default","textAlignment":"left"},"content":[{"type":"text","text":"APIwiz loads eBPF programs that safely attach to kernel networking hooks.","styles":{}}],"children":[]},{"id":"3fe12e4c-b050-4b66-954a-6b16c1b11f23","type":"numberedListItem","props":{"backgroundColor":"default","textColor":"default","textAlignment":"left"},"content":[{"type":"text","text":"The eBPF programs inspect TCP traffic in real time as API requests and responses pass through the server.","styles":{}}],"children":[]},{"id":"19c65650-24ef-42f3-ad9f-1b04f2eea9af","type":"numberedListItem","props":{"backgroundColor":"default","textColor":"default","textAlignment":"left"},"content":[{"type":"text","text":"Relevant metadata and payload fragments are streamed to a lightweight userspace agent.","styles":{}}],"children":[]},{"id":"6b212234-12e1-49db-a7a6-fc9a763ec003","type":"numberedListItem","props":{"backgroundColor":"default","textColor":"default","textAlignment":"left"},"content":[{"type":"text","text":"The agent reconstructs complete HTTP request and response pairs.","styles":{}}],"children":[]},{"id":"b6d282f3-1503-4fbf-9b8e-a9696a563cf3","type":"numberedListItem","props":{"backgroundColor":"default","textColor":"default","textAlignment":"left"},"content":[{"type":"text","text":"The system enriches the data with context such as trace IDs, latency information, service identity, and timing details.","styles":{}}],"children":[]},{"id":"231b69e1-90d3-4c69-8f92-0c7955273f68","type":"numberedListItem","props":{"backgroundColor":"default","textColor":"default","textAlignment":"left"},"content":[{"type":"text","text":"Structured telemetry data is forwarded to the APIwiz platform for analysis, monitoring, and observability.","styles":{}}],"children":[]},{"id":"452fb643-7cef-4f05-9ab7-6960384f68eb","type":"callout","props":{"variant":"note","title":""},"content":[],"children":[{"id":"a4d6fec9-4115-48b4-a5ee-9d1dc60ac22b","type":"paragraph","props":{"backgroundColor":"default","textColor":"default","textAlignment":"left"},"content":[{"type":"text","text":"Because processing occurs inside the kernel, traffic capture introduces minimal latency and does not affect application execution paths.","styles":{}}],"children":[]}]},{"id":"8bb410f3-7420-42cf-938b-d1e3f81bf655","type":"heading","props":{"backgroundColor":"default","textColor":"default","textAlignment":"left","level":3,"isToggleable":false},"content":[{"type":"text","text":"Data captured using eBPF","styles":{}}],"children":[]},{"id":"97814851-5cfa-40ca-b630-b64e38436b18","type":"paragraph","props":{"backgroundColor":"default","textColor":"default","textAlignment":"left"},"content":[{"type":"text","text":"When eBPF is enabled, APIwiz captures the following API interaction data:","styles":{}}],"children":[]},{"id":"2a5c1b9d-df8b-4991-8c2b-b099ea0e4f60","type":"bulletListItem","props":{"backgroundColor":"default","textColor":"default","textAlignment":"left"},"content":[{"type":"text","text":"Request method","styles":{}}],"children":[]},{"id":"7860dcea-bd49-45d1-b92e-0fbc29c5e179","type":"bulletListItem","props":{"backgroundColor":"default","textColor":"default","textAlignment":"left"},"content":[{"type":"text","text":"API path","styles":{}}],"children":[]},{"id":"2d7913ea-64c9-49f0-87b5-f42878378f3a","type":"bulletListItem","props":{"backgroundColor":"default","textColor":"default","textAlignment":"left"},"content":[{"type":"text","text":"Query parameters","styles":{}}],"children":[]},{"id":"c5e26a0f-9ebd-44da-9cbc-6b7f62d557d8","type":"bulletListItem","props":{"backgroundColor":"default","textColor":"default","textAlignment":"left"},"content":[{"type":"text","text":"Request headers","styles":{}}],"children":[]},{"id":"391e68ca-5922-4686-8851-f5c2ee09c49b","type":"bulletListItem","props":{"backgroundColor":"default","textColor":"default","textAlignment":"left"},"content":[{"type":"text","text":"Request body","styles":{}}],"children":[]},{"id":"0d35b29e-b837-4c66-907e-4fa516405df4","type":"bulletListItem","props":{"backgroundColor":"default","textColor":"default","textAlignment":"left"},"content":[{"type":"text","text":"Response body","styles":{}}],"children":[]},{"id":"ed56b783-3004-45ce-95d8-22eddd41fab3","type":"bulletListItem","props":{"backgroundColor":"default","textColor":"default","textAlignment":"left"},"content":[{"type":"text","text":"Status codes","styles":{}}],"children":[]},{"id":"1ff2efe2-60cc-4477-bd29-d421335dfce7","type":"bulletListItem","props":{"backgroundColor":"default","textColor":"default","textAlignment":"left"},"content":[{"type":"text","text":"Timestamps","styles":{}}],"children":[]},{"id":"7abe974d-e8ac-4452-8fc0-7f240e18c381","type":"bulletListItem","props":{"backgroundColor":"default","textColor":"default","textAlignment":"left"},"content":[{"type":"text","text":"Latency metrics","styles":{}}],"children":[]},{"id":"7837b5cd-2957-44a5-857a-6806b4ddd8ac","type":"bulletListItem","props":{"backgroundColor":"default","textColor":"default","textAlignment":"left"},"content":[{"type":"text","text":"Client and server IP addresses","styles":{}}],"children":[]},{"id":"9cc6230c-7f08-4076-8e08-98ddadd38381","type":"bulletListItem","props":{"backgroundColor":"default","textColor":"default","textAlignment":"left"},"content":[{"type":"text","text":"Network ports","styles":{}}],"children":[]},{"id":"8e425d25-e7fc-48e8-afa5-99007e66bc99","type":"bulletListItem","props":{"backgroundColor":"default","textColor":"default","textAlignment":"left"},"content":[{"type":"text","text":"Protocol details","styles":{}}],"children":[]},{"id":"17db2ab9-960e-47d5-8061-d767779d5c14","type":"paragraph","props":{"backgroundColor":"default","textColor":"default","textAlignment":"left"},"content":[{"type":"text","text":"APIwiz also supports distributed tracing by generating or reusing trace IDs and span IDs. All captured data is normalized into structured JSON, enabling centralized logging, compliance auditing, security monitoring, and performance diagnostics.","styles":{}}],"children":[]},{"id":"77cd37ea-47e2-49f0-801b-f115e9bbc88b","type":"heading","props":{"backgroundColor":"default","textColor":"default","textAlignment":"left","level":3,"isToggleable":false},"content":[{"type":"text","text":"Platform support","styles":{}}],"children":[]},{"id":"1e31a196-095a-45d2-bc52-ee45cae5bfd7","type":"table","props":{"textColor":"default"},"content":{"type":"tableContent","columnWidths":[null,null,null],"headerRows":1,"rows":[{"cells":[{"type":"tableCell","content":[{"type":"text","text":"Platform","styles":{}}],"props":{"colspan":1,"rowspan":1,"backgroundColor":"default","textColor":"default","textAlignment":"left"}},{"type":"tableCell","content":[{"type":"text","text":"Support","styles":{}}],"props":{"colspan":1,"rowspan":1,"backgroundColor":"default","textColor":"default","textAlignment":"left"}},{"type":"tableCell","content":[{"type":"text","text":"Details","styles":{}}],"props":{"colspan":1,"rowspan":1,"backgroundColor":"default","textColor":"default","textAlignment":"left"}}]},{"cells":[{"type":"tableCell","content":[{"type":"text","text":"Linux","styles":{"bold":true}}],"props":{"colspan":1,"rowspan":1,"backgroundColor":"default","textColor":"default","textAlignment":"left"}},{"type":"tableCell","content":[{"type":"text","text":"Supported","styles":{}}],"props":{"colspan":1,"rowspan":1,"backgroundColor":"default","textColor":"default","textAlignment":"left"}},{"type":"tableCell","content":[{"type":"text","text":"Requires kernel version 5.5 or later. Supported on cloud virtual machines, bare-metal servers, and container hosts.","styles":{}}],"props":{"colspan":1,"rowspan":1,"backgroundColor":"default","textColor":"default","textAlignment":"left"}}]},{"cells":[{"type":"tableCell","content":[{"type":"text","text":"Windows","styles":{"bold":true}}],"props":{"colspan":1,"rowspan":1,"backgroundColor":"default","textColor":"default","textAlignment":"left"}},{"type":"tableCell","content":[{"type":"text","text":"Not supported","styles":{}}],"props":{"colspan":1,"rowspan":1,"backgroundColor":"default","textColor":"default","textAlignment":"left"}},{"type":"tableCell","content":[{"type":"text","text":"APIwiz provides an alternative Windows traffic tracer that uses native OS mechanisms such as Schannel to capture request and response traffic.","styles":{}}],"props":{"colspan":1,"rowspan":1,"backgroundColor":"default","textColor":"default","textAlignment":"left"}}]}]},"children":[]},{"id":"80ae7b9f-4cbe-454a-afe7-09458e8b424e","type":"callout","props":{"variant":"note","title":""},"content":[],"children":[{"id":"00abf143-dc1f-4483-9d6f-3f5f3f66ff12","type":"paragraph","props":{"backgroundColor":"default","textColor":"default","textAlignment":"left"},"content":[{"type":"text","text":"From a user perspective, both Linux and Windows provide similar API observability, even though the underlying kernel technologies differ.","styles":{}}],"children":[]}]},{"id":"a5917337-dd53-4b16-a4de-aba149b6984e","type":"heading","props":{"backgroundColor":"default","textColor":"default","textAlignment":"left","level":3,"isToggleable":false},"content":[{"type":"text","text":"Limitations","styles":{}}],"children":[]},{"id":"5d45ee2b-8725-45c8-915b-de28e0e88050","type":"paragraph","props":{"backgroundColor":"default","textColor":"default","textAlignment":"left"},"content":[{"type":"text","text":"The following limitations apply when using eBPF:","styles":{}}],"children":[]},{"id":"203807ad-f21e-47ab-80d8-ea19b111475c","type":"bulletListItem","props":{"backgroundColor":"default","textColor":"default","textAlignment":"left"},"content":[{"type":"text","text":"Requires Linux kernel version 5.5 or later","styles":{}}],"children":[]},{"id":"c86a9391-3908-40ac-bf47-d56f15740abe","type":"bulletListItem","props":{"backgroundColor":"default","textColor":"default","textAlignment":"left"},"content":[{"type":"text","text":"Not supported on Windows systems","styles":{}}],"children":[]},{"id":"a44e0baf-6730-4a59-894a-a6ce4ba890a0","type":"bulletListItem","props":{"backgroundColor":"default","textColor":"default","textAlignment":"left"},"content":[{"type":"text","text":"May require elevated permissions in restricted or hardened environments","styles":{}}],"children":[]},{"id":"7b4ac8a3-011a-4ee8-95d2-05c6e377d7f8","type":"bulletListItem","props":{"backgroundColor":"default","textColor":"default","textAlignment":"left"},"content":[{"type":"text","text":"Kernel hooks may be restricted in managed container platforms","styles":{}}],"children":[]},{"id":"030bba3d-5b5e-42a0-9f07-5d46efb21947","type":"heading","props":{"backgroundColor":"default","textColor":"default","textAlignment":"left","level":3,"isToggleable":false},"content":[{"type":"text","text":"Common issues during installation","styles":{}}],"children":[]},{"id":"d9ee637d-970e-4c74-8b2e-73db8e93148e","type":"paragraph","props":{"backgroundColor":"default","textColor":"default","textAlignment":"left"},"content":[{"type":"text","text":"The following issues may occur when installing or enabling the traffic hook:","styles":{}}],"children":[]},{"id":"f0b53e3a-6394-43fe-947a-647ca34fd935","type":"bulletListItem","props":{"backgroundColor":"default","textColor":"default","textAlignment":"left"},"content":[{"type":"text","text":"Insufficient kernel permissions","styles":{}}],"children":[]},{"id":"34b7b572-6dc7-4f50-b82b-0e8fecbbee16","type":"bulletListItem","props":{"backgroundColor":"default","textColor":"default","textAlignment":"left"},"content":[{"type":"text","text":"Unsupported kernel versions","styles":{}}],"children":[]},{"id":"69a861b2-7509-4538-95ff-6c58e35f7d36","type":"bulletListItem","props":{"backgroundColor":"default","textColor":"default","textAlignment":"left"},"content":[{"type":"text","text":"Missing system capabilities in hardened environments","styles":{}}],"children":[]},{"id":"8338b271-53e7-41ab-b1f2-19f2cd3077ff","type":"bulletListItem","props":{"backgroundColor":"default","textColor":"default","textAlignment":"left"},"content":[{"type":"text","text":"Conflicts with other kernel-level monitoring tools","styles":{}}],"children":[]},{"id":"9e28ec86-c1e8-4aa4-851f-bda14a3ab153","type":"bulletListItem","props":{"backgroundColor":"default","textColor":"default","textAlignment":"left"},"content":[{"type":"text","text":"Restricted kernel access in containerized platforms","styles":{}}],"children":[]},{"id":"82a047ac-2f82-41c7-8f0e-356f73f74173","type":"bulletListItem","props":{"backgroundColor":"default","textColor":"default","textAlignment":"left"},"content":[{"type":"text","text":"Misconfigured network interfaces","styles":{}}],"children":[]},{"id":"9a55f225-bb98-4c34-9326-1a40ee8aa2e7","type":"bulletListItem","props":{"backgroundColor":"default","textColor":"default","textAlignment":"left"},"content":[{"type":"text","text":"Disabled packet visibility","styles":{}}],"children":[]},{"id":"8aadbe0e-1b5a-4a94-91c5-c1385ab6a4be","type":"paragraph","props":{"backgroundColor":"default","textColor":"default","textAlignment":"left"},"content":[{"type":"text","text":"Resolving these configuration issues usually restores traffic capture functionality.","styles":{}}],"children":[]},{"id":"5ae4657c-5ed0-4d09-a020-8acf394f6915","type":"heading","props":{"backgroundColor":"default","textColor":"default","textAlignment":"left","level":3,"isToggleable":false},"content":[{"type":"text","text":"Performance impact","styles":{}}],"children":[]},{"id":"9b301ad7-6ff3-4092-b00b-70b15d362140","type":"table","props":{"textColor":"default"},"content":{"type":"tableContent","columnWidths":[null,null],"headerRows":1,"rows":[{"cells":[{"type":"tableCell","content":[{"type":"text","text":"State","styles":{}}],"props":{"colspan":1,"rowspan":1,"backgroundColor":"default","textColor":"default","textAlignment":"left"}},{"type":"tableCell","content":[{"type":"text","text":"Behavior","styles":{}}],"props":{"colspan":1,"rowspan":1,"backgroundColor":"default","textColor":"default","textAlignment":"left"}}]},{"cells":[{"type":"tableCell","content":[{"type":"text","text":"Before enabling eBPF","styles":{"bold":true}}],"props":{"colspan":1,"rowspan":1,"backgroundColor":"default","textColor":"default","textAlignment":"left"}},{"type":"tableCell","content":[{"type":"text","text":"Applications run normally with no additional observability overhead beyond existing logging mechanisms.","styles":{}}],"props":{"colspan":1,"rowspan":1,"backgroundColor":"default","textColor":"default","textAlignment":"left"}}]},{"cells":[{"type":"tableCell","content":[{"type":"text","text":"After enabling eBPF","styles":{"bold":true}}],"props":{"colspan":1,"rowspan":1,"backgroundColor":"default","textColor":"default","textAlignment":"left"}},{"type":"tableCell","content":[{"type":"text","text":"Traffic inspection occurs at the kernel level with no instrumentation inside application processes. CPU and memory usage remain minimal and predictable. Application latency is not affected.","styles":{}}],"props":{"colspan":1,"rowspan":1,"backgroundColor":"default","textColor":"default","textAlignment":"left"}}]}]},"children":[]},{"id":"19f80191-faf1-4efa-97d3-96a4df01f9a4","type":"paragraph","props":{"backgroundColor":"default","textColor":"default","textAlignment":"left"},"content":[{"type":"text","text":"Compared to proxy-based monitoring or in-process instrumentation, eBPF provides high-fidelity observability with significantly lower performance impact.","styles":{}}],"children":[]},{"id":"c37a5313-5569-40c8-ae39-2831363056d7","type":"heading","props":{"backgroundColor":"default","textColor":"default","textAlignment":"left","level":3,"isToggleable":false},"content":[{"type":"text","text":"eBPF Tracer Daemonset","styles":{}}],"children":[]},{"id":"cc0d2fed-3607-4444-ac4a-f6fa235d06d5","type":"paragraph","props":{"backgroundColor":"default","textColor":"default","textAlignment":"left"},"content":[{"type":"text","text":"The following daemonset must be applied on the namespace which you desire to capture traffic from","styles":{}}],"children":[]},{"id":"66c1742c-af68-45a4-abca-f40e513f21c0","type":"codeBlock","props":{"language":"text"},"content":[{"type":"text","text":"$1d","styles":{}}],"children":[]},{"id":"a186ad35-88cc-4cc8-ac3b-663e7f038d79","type":"paragraph","props":{"backgroundColor":"default","textColor":"default","textAlignment":"left"},"content":[],"children":[]},{"id":"2bd1b924-327f-46d6-9098-70e5738c4ef5","type":"heading","props":{"backgroundColor":"default","textColor":"default","textAlignment":"left","level":3,"isToggleable":false},"content":[{"type":"text","text":"eBPF Tracer ConfigMap","styles":{}}],"children":[]},{"id":"655345b9-071b-45b6-a6c0-613ac0c6018e","type":"codeBlock","props":{"language":"text"},"content":[{"type":"text","text":"$1e","styles":{}}],"children":[]},{"id":"36f80170-9365-4e2e-9b5e-14ae6a6c0b00","type":"paragraph","props":{"backgroundColor":"default","textColor":"default","textAlignment":"left"},"content":[],"children":[]},{"id":"0ddfb363-bd37-4bab-8633-4ddf138a5d9c","type":"paragraph","props":{"backgroundColor":"default","textColor":"default","textAlignment":"left"},"content":[],"children":[]}],"breadcrumb":["APIwiz traffic hooks"]}}] 15:null 1a:[["$","title","0",{"children":"Capture traffic using eBPF "}],["$","meta","1",{"name":"description","content":"eBPF (Extended Berkeley Packet Filter) is a traffic-capture mode in APIwiz that observes live API traffic directly at the operating system kernel level. By usin"}],["$","link","2",{"rel":"canonical","href":"/guides?pageId=6a67230669d1ae9705725f07"}],["$","meta","3",{"property":"og:title","content":"Capture traffic using eBPF "}],["$","meta","4",{"property":"og:description","content":"eBPF (Extended Berkeley Packet Filter) is a traffic-capture mode in APIwiz that observes live API traffic directly at the operating system kernel level. By usin"}],["$","meta","5",{"property":"og:type","content":"article"}],["$","meta","6",{"name":"twitter:card","content":"summary"}],["$","meta","7",{"name":"twitter:title","content":"Capture traffic using eBPF "}],["$","meta","8",{"name":"twitter:description","content":"eBPF (Extended Berkeley Packet Filter) is a traffic-capture mode in APIwiz that observes live API traffic directly at the operating system kernel level. By usin"}]]