JVM & TLS: eBPF's Out-of-Comfort Zone - Valeri Pliskin, Datadog

Don't miss out! Join us at our next Flagship Conference: KubeCon + CloudNativeCon North America in Salt Lake City from November 12 - 15, 2024. Connect with our current graduated, incubating, and sandbox projects as the community gathers to further the education and advancement of cloud native computing. Learn more at https://kubecon.io

JVM & TLS: eBPF's Out-of-Comfort Zone - Valeri Pliskin, Datadog

In this presentation, we'll explore the application of eBPF in observability products, with a particular emphasis on capturing encrypted TLS traffic. eBPF's standard toolkit, including kprobes and uprobes, often proves efficient for many observability use cases. However, there are notable exceptions, such as capturing TLS traffic in JVM applications. We will delve into why traditional eBPF methods fall short in these scenarios and discuss alternative strategies that can be employed. To illustrate this, we will showcase a brief Proof of Concept (PoC) developed at Datadog, demonstrating how we successfully navigated this challenge. This talk aims to provide a comprehensive understanding of eBPF's capabilities and limitations in the context of modern native cloud observability.