The Cequence eBPF Sensor enables you to copy transaction information from your apps running in a Kubernetes environment. A dedicated pod on your Kubernetes node runs the eBPF Sensor, which monitors and copies the API and HTTP traffic from your application pods on that node.

The pod that runs the eBPF Sensor also runs the Cequence Bridge, which transmits the collected copies of the traffic to the Cequence Unified API Protection (UAP) platform. Because the eBPF Sensor is deployed as a Kubernetes DaemonSet, an instance of the eBPF Sensor pod exists on each node in the cluster. 

Deployment options

You can deploy the eBPF sensor in Kubernetes, using a Helm chart, or with Docker, using a Docker Compose file. As a best practice, configure the pod that runs the eBPF sensor and the Cequence Bridge with 1 CPU and 256Mb of RAM. Both deployment patterns need a client ID and client Secret to authenticate to the Cequence UAP platform. Once you've generated the client ID and client Secret, proceed to the article for the deployment option you'll use.

Generating a client ID and client Secret

Several Cequence components must authenticate to the Cequence UAP platform in order to transmit and receive data. Create authentication credentials in the Cequence UAP platform to enable this authentication.

1. Log in to the UAP management portal UI.
   The URL for the management portal is typically of the form https://ui.<your-tenant-name>.<domain>. Replace <your-tenant-name> with the name of your Cequence tenant organization. Replace <domain> with your domain name.
2. Select General Settings > User Management.
   The User Management pane appears.
3. Click the Clients tab.
4. Click Add New Client.
   The new client dialog box appears.
5. Type the client name in the Client Name field.
   This name is the client ID. Note the client ID for later use.
6. Enable the Traffic Management toggle.
7. (Optional) To change the token lifespan from the default of 1800 seconds, type a whole number of seconds in Token Lifespan.
8. Click Save.
   A dialog box with the client secret appears.
9. Click the blue Copy icon to copy the secret to the clipboard, then click Close.
   The client is now set up. Note the client name for future use.
   The client list appears.
10. Note the value of the client secret for later use. This value will not be shown again later on the UI for security reasons.

Supported environments

The eBPF sensor does not universally support all environments. The following table lists environments where the eBPF sensor has been tested or is known to work.