Actionable
Network Observability

for

kubernetes logo

Inspect all internal and external cluster communications, API transactions, and data in transit with cluster-wide monitoring of all traffic going in, out, and across containers, pods, namespaces, nodes, and clusters.

github icon
GitHub Stars
10.7K
docker icon
Docker Pulls
19M
live serversicon
Live Servers
6K

How to deploy Kubeshark?

number one on homebrew

Install:

brew install kubeshark
coping iconcopy icon
number two on homebrew

Start capturing Traffic:

kubeshark tap
coping iconcopy icon
ready on homebrew

Ready

number one on helm

Add the Helm repository and install:

helm repo add kubeshark https://helm.kubeshark.co
helm install kubeshark kubeshark/kubeshark
coping iconcopy icon
number two on helm

Enable dashboard access:

kubectl port-forward service/kubeshark-front 8899:80
coping iconcopy icon
number three on helm

Visit local page:

Visit localhost:8899 to view real time streaming traffic

ready on helm

Ready

number one on shell

Install the CLI using a simple shell script:

sh <(curl -Ls https://kubeshark.co/install)
coping iconcopy icon

Alternatively, you can download the latest release of Kubeshark CLI directly from GitHub

number two on shell

Start capturing Traffic:

kubeshark tap
coping iconcopy icon
ready on shell

Ready

number one on github

Clone:

git clone https://github.com/kubeshark/kubeshark.git
coping iconcopy icon
number two on github

Build:

cd kubeshark && make
coping iconcopy icon
number thee on github

Start capturing traffic:

./bin/kubeshark__ tap
coping iconcopy icon
ready on github

Ready

network is a blind spot
Kubernetes Incident Investigation for DFIR teams

Deep Network Observability

  • item icon
    Gain protocol-level visibility into K8s' internal network across all parts of the cluster.
  • item icon
    Refine your analysis using a rich query language.
  • item icon
    Unravel the intricate web of relationships with an identity-aware service map.
  • item icon
    Analyze pod-to-pod connections and detect network errors.
Service map, logs and metrics in Grafana, Elastic or Influx

Traffic Recording & Offline Analysis

  • item icon
    Stop holding your breath while waiting for symptoms to appear as you watch.
  • item icon
    Capture the last hour/day/week of selected pods' traffic and analyze offline at your discretion.
  • item icon
    Ideal for compliance teams to securely record API transactions for future review.
Actionable detection of suspicious network behaviors

Actionable Detection

  • item icon
    Detect suspicious network behaviors in real-time.
  • item icon
    Trigger remediation actions such as alerts and blocking live pods' ingress/egress.
  • item icon
    Build custom metrics in real-time and export to your preferred telemetry or log aggregation application.
Get going in <60 seconds
What are people saying about
Kubeshark Logo
The Must Have Tool for Devops & SREs
Alex Jones from Canonical describes why Kubeshark is a must have tool for Devops and SREs, and provides a brief history of Wireshark and the importance of network analysis.
Understand Traffic Flow in K8s
Abhishek Veeramalla, a DevOps evangelist, uses Kubeshark in his DevOps course to understand how services handle load balancing, service discovery, and exposing applications to the outside world.
Kubeshark Filtering Example
Kubeshark: 
Wireshark for Kubernetes
Kubeshark: Wireshark for Kubernetes Harsha Koushik, a security engineer, is using Kubeshark for traffic monitoring and threat modeling while comparing to other tools in the industry.
Review
I had a use case to identify all outbound connections made during normal operations of our product (to help clients with whitelisting), and Kubeshark saved me loads of time in the process! I raved about the tool to colleagues as well.
Nathan Chang
Robust intelligence at Solutions Architecture
Review
Kubeshark is the Wireshark for Kubernetes! It provides an in-depth look at network traffic in real time, making API monitoring and debugging seamless. With features like intuitive dashboards and PCAP storage, it’s the perfect tool for understanding Kubernetes cluster communications at a granular level. If you're managing a Kubernetes environment, I highly recommend giving Kubeshark a try—it’s a game changer
Achraf NHAILA
SRE | Devops - Devsecops | Cloud Consultant
Review
The standout moment was using Kubeshark to visualize and debug Kubernetes resource interactions. Kubeshark provided clear insights into how components like deployment configuration and traffic management functioned together, making the entire process far more understandable and efficient. It was an invaluable tool in helping me grasp the inner workings of Kubernetes clusters.
Rohit Vishwakarma
DevOps Engineer
Review
Leveling up my Kubernetes game has been an exciting journey, especially with tools like Kubeshark. It’s been a game-changer in providing deep insights into Kubernetes network flows. From mastering load balancing across pods to exploring app exposure using NodePort, Kubeshark has given me a clear understanding of how data moves within the cluster. If you're looking to dive deep into Kubernetes services and network insights, Kubeshark is an invaluable tool!
Akshay Burungale
AWS DevOps Engineer
Review
Kubeshark is essential for Kubernetes security. It gives security teams real-time visibility into cluster network traffic, enabling them to detect vulnerabilities and threats quickly. With deep insights into packet data, Kubeshark helps proactively secure deployments and maintain compliance. A must-have for any Kubernetes security strategy.
Harsha Koushik
Security Engineer/Researcher
Review
Kubeshark has been an invaluable asset to our Kubernetes observability toolkit. The depth of traffic analysis it provides is unmatched, allowing us to easily inspect and monitor traffic flows within our cluster. With features that make real-time debugging a breeze, it's become an essential tool for our DevOps team. The seamless integration and user-friendly interface have significantly reduced our troubleshooting time and improved system reliability. Kubeshark is truly a game-changer for anyone serious about Kubernetes observability.
Arpit Nigam
DevSecOps Lead
Review
As a DevOps engineer, I need deep visibility into my Kubernetes clusters to ensure smooth operations and rapid troubleshooting. Kubeshark gives me exactly that! With its powerful network monitoring capabilities, I can easily identify and resolve performance bottlenecks, security threats, and application issues. The ability to capture and analyze API traffic in real-time is invaluable. Kubeshark has become an essential tool in my DevOps arsenal.
Ravindra Singh
DevOps Engineer at Coditas
Review
We were scaling a SaaS solution built with microservices deployed on Kubernetes, but turning on CloudWatch for EKS was simply too costly on AWS—it increased our bill by about five times. I needed insights into network traffic, bandwidth usage, and other metrics, which were missing from my existing scripts. Using this solution not only provided those crucial insights but also allowed me to visualize the data, showing where it was going and how much was being used. This helped us achieve proper scaling much faster and made troubleshooting services within EKS far easier without the need for an EC2 instance or installing anything new into the kubernetes cluster.
Damien Ostler
Advanced Platform Developer