k8spacket/k8spacket

Health v2 · maintenance only

Adoption not part of the score

1095 stars · 61 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

k8spacket is a Kubernetes tool that collects TCP traffic and TLS connection metadata using eBPF (tracepoints and traffic-control filters) and exposes it as Prometheus metrics. It ships Grafana dashboards to visualize inter-workload traffic, external traffic destinations, and TLS certificate expiration.

Use cases

• visualize TCP traffic between workloads in a Kubernetes cluster
• see which external domains my cluster pods connect to
• monitor TLS versions and cipher suites used by cluster connections
• alert on expiring TLS certificates in the cluster
• trace how many bytes each pod sends and receives
• understand socket connection lifetimes in Kubernetes

When to choose

• you need eBPF-based network observability for Kubernetes without sidecars
• you want TLS handshake and certificate expiration visibility in Grafana
• you need to map cluster-internal and external traffic flows per workload

When to avoid

• your kernel is older than 5.4 or lacks BTF support
• you need deep packet payload inspection rather than connection metadata
• you don't run Kubernetes or Grafana/Prometheus

Facets

service · maturity active

monitoring tracing networking security data-visualization monitoring networking security self-hosted go ebpf tcp tls grafana prometheus packet-sniffing kubernetes-networking observability kubernetes containers devops linux docker

Member repositories

For agents

markdown · JSON · MCP: product_card(name="k8spacket/k8spacket")