kubeshark
eBPF-powered network observability for Kubernetes. Indexes L4/L7 traffic with full K8s context, decrypts TLS without keys. Queryable by AI agents via MCP and humans via dashboard.
Tech stack & purpose
Kubeshark is an eBPF-powered network observability platform for Kubernetes that indexes layer 4 and layer 7 traffic while maintaining full Kubernetes context, and can decrypt TLS traffic without requiring keys. Built in Go, it provides network observability through multiple interfaces: a dashboard for human users, AI agent queries via MCP (Model Context Protocol), and integration with Claude via a plugin that exposes network root cause analysis and KFL filtering skills. The project is deployable via Helm chart and supports various configuration options including cloud storage for snapshots, custom image registries, and flexible traffic capture settings.
Community & reference links
Languages
Contributors (top 30 of 56)
- M. Mert Yildiran587 commits
- Alon Girmonsky248 commits
- Igor Gov190 commits
- M. Mert Yıldıran189 commits
- RamiBerm163 commits
- RoyUP9146 commits
- gadotroee117 commits
- Volodymyr Stoiko94 commits
- lirazyehezkel59 commits
- Nimrod Gilboa Markevich53 commits
- Serhii Ponomarenko46 commits
- leon-up939 commits
- Alex Haiut33 commits
- David Levanon33 commits
- AmitUp933 commits
- Roee Gadot29 commits
- nimrod-up928 commits
- up9-github27 commits
- Adam Kol23 commits
- Ilya Gavrilov14 commits
- Andrey Pokhilko11 commits
- Liraz Yehezkel11 commits
- Gustavo Massaneiro8 commits
- Luiz Oliveira8 commits
- Selton Fiuza7 commits
- bogdanvbalan7 commits
- dependabot[bot]5 commits · 0 followers
- cloudclaim2 commits
- Neim Elezi2 commits
- iluxa2 commits
