Jorge Salamero

Kubernetes is a tremendous system for orchestrating your containers onto physical infrastructure. But troubleshooting Kubernetes can be incredibly challenging due to the dynamic and isolated nature of the containers it orchestrates. Sysdig leverages the powerful concept of container-aware system events and correlates each one of them with super rich metadata Kubernetes.

In this session we’ll go deep into a real Kubernetes issue involving wget, search domain, glibc, SkyDNS and etcd, and we’ll see how to track them down using Sysdig.

Kubernetes is a tremendous system for orchestrating your containers onto physical infrastructure. But troubleshooting Kubernetes can be incredibly challenging due to the dynamic and isolated nature of the containers it orchestrates. Sysdig leverages the powerful concept of container-aware system events and correlates each one of them with super rich metadata Kubernetes.

In this session we’ll go deep into a real Kubernetes issue involving wget, search domain, glibc, SkyDNS and etcd, and we’ll see how to track them down using Sysdig.

While there have been many improvements around securing containers, there is still a large gap in monitoring the behavior of containers in production. That’s why we created Sysdig Falco, the open source behavioral activity monitor for containerized environments.

Sysdig Falco can detect and alert on anomalous behavior at the application, file, system, and network level. In this session get a deep dive into Falco: - How does behavioral security differ from existing security solutions like image scanning? - How does Falco work? - What can it detect? Building and customizing rules - Next steps

Transaction tracing is typically thought of something that only developers do when they need to troubleshoot a piece of their software. And lately, it’s also been used for tracing microservice-based transactions too.

These are really useful capabilities, but what if you could profile everything? Yes everything - software functions, microservice calls, file access, network requests, even bash scripts. How would this change your view on your systems? How would this enable you to better understand what your software is actually doing?

In this talk I’ll show you how to trace everything using open source sysdig. We’ll cover: - How to trace everything from a method in your software, a service call, a network request, a shell command execution, a script, and more - How to report on your traces to make the most sense of the data - Use real-world examples of tracing that show its benefits