Using data transformations for monitoring a cloud compute environment
Example systems and methods monitor a cloud compute environment. An example method includes an agent obtaining a data packet from an interface in the cloud compute environment, the data packet including a source address and a non-endpoint destination address; determining, based on the non-endpoint destination address and routing information for the data packet, an endpoint destination address associated with the non-endpoint destination address of the data packet; modifying the data packet by replacing the non-endpoint destination address with the endpoint destination address; and providing, based on the modified data packet, monitoring data to a data platform.
1. A method comprising:
obtaining, by an agent monitoring a cloud compute environment, a data packet from an interface of a pod managed by a container orchestration system in the cloud compute environment, the data packet including a source address and a non-endpoint destination address;
determining, by the agent and based on the non-endpoint destination address and routing information for the data packet, an endpoint destination address associated with the non-endpoint destination address of the data packet;
modifying, by the agent, the data packet by replacing the non-endpoint destination address with the endpoint destination address; and
providing, by the agent and based on the modified data packet, monitoring data to a data platform.
2. The method of claim 1 , wherein the source address comprises an IP address of a container in the cloud compute environment.
3. The method of claim 1 , wherein the source address comprises a pod IP address for the pod, the pod including a container.
4. The method of claim 1 , wherein the non-endpoint destination address comprises a service IP address associated with a service network in the cloud compute environment.
5. The method of claim 1 , wherein the non-endpoint destination address comprises a host IP address associated with a host network in the cloud compute environment.
6. The method of claim 1 , further comprising:
obtaining, by a second agent monitoring the cloud compute environment, a second data packet from a second interface in the cloud compute environment, the second data packet including a second source address and a second non-endpoint destination address;
determining, by the second agent and based on the second non-endpoint destination address and routing information for the second data packet, that the endpoint destination address is associated with the second non-endpoint destination address of the second data packet;
modifying, by the second agent, the second data packet by replacing the second non-endpoint destination address with the endpoint destination address; and
providing, by the second agent and based on the modified second data packet, second monitoring data to the data platform.
7. The method of claim 1 , further comprising:
receiving, at the data platform, the monitoring data; and
generating a polygraph based at least in part on the monitoring data.
8. A computer program product embodied in a non-transitory computer-readable medium and comprising computer instructions for:
obtaining a data packet from an interface of a pod managed by a container orchestration system in a cloud compute environment, the data packet including a source address and a non-endpoint destination address;
determining, based on the non-endpoint destination address and routing information for the data packet, an endpoint destination address associated with the non-endpoint destination address of the data packet;
modifying the data packet by replacing the non-endpoint destination address with the endpoint destination address; and
providing, based on the modified data packet, monitoring data to a data platform.
9. The computer program product of claim 8 , wherein the source address comprises an IP address of a container in the cloud compute environment.
10. The computer program product of claim 8 , wherein the source address comprises a pod IP address for the pod, the pod including a container.
11. The computer program product of claim 8 , wherein the non-endpoint destination address comprises a service IP address associated with a service network in the cloud compute environment.
12. The computer program product of claim 8 , wherein the non-endpoint destination address comprises a host IP address associated with a host network in the cloud compute environment.
13. The computer program product of claim 8 , the computer instructions further for:
obtaining a second data packet from a second interface in the cloud compute environment, the second data packet including a second source address and a second non-endpoint destination address;
determining, based on the second non-endpoint destination address and routing information for the second data packet, that the endpoint destination address is associated with the second non-endpoint destination address of the second data packet;
modifying the second data packet by replacing the second non-endpoint destination address with the endpoint destination address; and
providing, based on the modified second data packet, second monitoring data to the data platform.
14. The computer program product of claim 13 , wherein:
the source address is an endpoint source address; and
the second source address in a non-endpoint source address.
15. A system for monitoring a cloud compute environment, the system comprising:
a memory storing computer-executable instructions;
a processor to execute the computer-executable instructions to:
obtain a data packet from an interface of a pod managed by a container orchestration system in the cloud compute environment, the data packet including a source address and a non-endpoint destination address;
determine, based on the non-endpoint destination address and routing information for the data packet, an endpoint destination address associated with the non-endpoint destination address of the data packet;
modify the data packet by replacing the non-endpoint destination address with the endpoint destination address; and
provide, based on the modified data packet, monitoring data to a data platform.
16. The system of claim 15 , wherein the source address comprises an IP address of a container in the cloud compute environment.
17. The system of claim 15 , wherein the source address comprises a pod IP address for the pod, the pod including a container.
18. The system of claim 15 , wherein the non-endpoint destination address comprises a service IP address associated with a service network in the cloud compute environment.
19. The system of claim 15 , wherein the non-endpoint destination address comprises a host IP address associated with a host network in the cloud compute environment.
20. The system of claim 15 , wherein:
the non-endpoint destination address comprises a service IP address associated with a service network in the cloud compute environment; and
the endpoint destination address comprises a pod IP address associated with a second pod in the cloud compute environment.