The Cequence eBPF Sensor provides a kernel-level approach to API discovery and security monitoring. This technology operates directly at the Linux kernel level to deliver comprehensive visibility into service communications with minimal performance overhead.

Key features

Advanced eBPF technology

The sensor leverages extended Berkeley Packet Filter (eBPF) technology to monitor network traffic at the kernel level.

• Deploys as a Kubernetes DaemonSet across your entire cluster.
• Captures HTTP traffic directly at the kernel level with minimal effects on performance.
• Works natively with both Istio Service Mesh and standard Kubernetes environments.

Intelligent API discovery

The system automatically discovers and maps API endpoints through continuous traffic analysis.

• Automated URI discovery: Identifies all API endpoints within minutes of continuous traffic monitoring.
• Complete traffic capture: Records both request and response bodies for comprehensive analysis.
• Service-to-service visibility: Maps internal and external communication patterns without application instrumentation.

Enterprise-ready deployment

Multiple deployment options ensure compatibility with various infrastructure configurations.

• Helm chart integration: Streamlined deployment using bridge service configuration.
• Multiple deployment options: Supports various cluster configurations and network topologies.
• Sentinel integration: Seamlessly sends captured data to Sentinel for advanced security analysis.

Technical capabilities

The eBPF Sensor provides comprehensive monitoring capabilities without requiring modifications to your applications.

• Zero-code implementation: No application changes required. The sensor operates entirely at the network layer.
• High-performance monitoring: Kernel-level capture ensures minimal latency and resource overhead.
• Comprehensive coverage: Monitors all HTTP traffic flows across your Kubernetes infrastructure.
• Real-time processing: Immediate traffic analysis and endpoint identification.

Bug fixes

• DEF-1831: Resolved eBPF Helm chart error on GCP environment for /usr/src mountpath.
• DEF-1838: Fixed issue where GKE COS doesn't allow creating /usr/src directory.