GenAI-Assisted
Network Observability

for

kubernetes logo

Inspect all internal and external cluster connections, API calls, and data in transit. Detect suspicious network behavior, trigger automated actions, and gain unlimited insights into your network using the latest GenAI technology.

github icon
GitHub Stars
10.7K
docker icon
Docker Pulls
19M
live serversicon
Live Servers
6K

How to deploy Kubeshark?

number one on homebrew

Install:

brew install kubeshark
coping iconcopy icon
number two on homebrew

Start capturing Traffic:

kubeshark tap
coping iconcopy icon
ready on homebrew

Ready

number one on helm

Add the Helm repository and install:

helm repo add kubeshark https://helm.kubeshark.co
helm install kubeshark kubeshark/kubeshark
coping iconcopy icon
number two on helm

Enable dashboard access:

kubectl port-forward service/kubeshark-front 8899:80
coping iconcopy icon
number three on helm

Visit local page:

Visit localhost:8899 to view real time streaming traffic

ready on helm

Ready

number one on shell

Install the CLI using a simple shell script:

sh <(curl -Ls https://kubeshark.co/install)
coping iconcopy icon

Alternatively, you can download the latest release of Kubeshark CLI directly from GitHub

number two on shell

Start capturing Traffic:

kubeshark tap
coping iconcopy icon
ready on shell

Ready

number one on github

Clone:

git clone https://github.com/kubeshark/kubeshark.git
coping iconcopy icon
number two on github

Build:

cd kubeshark && make
coping iconcopy icon
number thee on github

Start capturing traffic:

./bin/kubeshark__ tap
coping iconcopy icon
ready on github

Ready

network is a blind spot
Kubernetes Incident Investigation for DFIR teams

Deep Network Observability

  • item icon
    Gain protocol-level, cluster-wide visibility into K8s' internal API traffic, including encrypted traffic.
  • item icon
    Refine analysis with a rich query language.
  • item icon
    Unravel the intricate web of relationships with an identity-aware service map.

Traffic Recording & Offline Analysis

  • item icon
    Stop holding your breath while waiting for symptoms to appear as you watch.
  • item icon
    Capture the last hour/day/week of selected pods' traffic and analyze offline at your discretion.
  • item icon
    Ideal for compliance teams to securely record API transactions for future review.

Detection & Response

  • item icon
    Detect anomalies and suspicious network behaviors in real time.
  • item icon
    Trigger actions such as alerts, live pod ingress/egress blocking, or export traffic snapshots to an immutable datastore.
  • item icon
    Export traffic for API security scanning.

GenAI-Assisted Network Insights

  • item icon
    Use natural language to ask and refine your questions.
  • item icon
    Leverage a purposely trained custom LLM.
  • item icon
    A GenAI assistant generates ready-to-run code compatible with Kubeshark.
  • item icon
    Executed code processes network data in real time, resulting in a custom report or triggering an action.

Prompt Examples

  • item icon
    Identify the top 5 DNS consumers.
  • item icon
    Report the theoretical impact of network policies on live pods.
  • item icon
    Show pods and processes with external connections.
  • item icon
    Show pods with no network activity (likely candidates for cost optimization).
  • item icon
    Report API latency anomalies.
Get going in <60 seconds
What are people saying about
Kubeshark Logo
The Must Have Tool for Devops & SREs
Alex Jones from Canonical describes why Kubeshark is a must have tool for Devops and SREs, and provides a brief history of Wireshark and the importance of network analysis.
Understand Traffic Flow in K8s
Abhishek Veeramalla, a DevOps evangelist, uses Kubeshark in his DevOps course to understand how services handle load balancing, service discovery, and exposing applications to the outside world.
Kubeshark Filtering Example
Kubeshark: 
Wireshark for Kubernetes
Kubeshark: Wireshark for Kubernetes Harsha Koushik, a security engineer, is using Kubeshark for traffic monitoring and threat modeling while comparing to other tools in the industry.
Review
I had a use case to identify all outbound connections made during normal operations of our product (to help clients with whitelisting), and Kubeshark saved me loads of time in the process! I raved about the tool to colleagues as well.
Nathan Chang
Robust intelligence at Solutions Architecture
Review
Kubeshark is the Wireshark for Kubernetes! It provides an in-depth look at network traffic in real time, making API monitoring and debugging seamless. With features like intuitive dashboards and PCAP storage, it’s the perfect tool for understanding Kubernetes cluster communications at a granular level. If you're managing a Kubernetes environment, I highly recommend giving Kubeshark a try—it’s a game changer
Achraf NHAILA
SRE | Devops - Devsecops | Cloud Consultant
Review
The standout moment was using Kubeshark to visualize and debug Kubernetes resource interactions. Kubeshark provided clear insights into how components like deployment configuration and traffic management functioned together, making the entire process far more understandable and efficient. It was an invaluable tool in helping me grasp the inner workings of Kubernetes clusters.
Rohit Vishwakarma
DevOps Engineer
Review
Leveling up my Kubernetes game has been an exciting journey, especially with tools like Kubeshark. It’s been a game-changer in providing deep insights into Kubernetes network flows. From mastering load balancing across pods to exploring app exposure using NodePort, Kubeshark has given me a clear understanding of how data moves within the cluster. If you're looking to dive deep into Kubernetes services and network insights, Kubeshark is an invaluable tool!
Akshay Burungale
AWS DevOps Engineer
Review
Kubeshark is essential for Kubernetes security. It gives security teams real-time visibility into cluster network traffic, enabling them to detect vulnerabilities and threats quickly. With deep insights into packet data, Kubeshark helps proactively secure deployments and maintain compliance. A must-have for any Kubernetes security strategy.
Harsha Koushik
Security Engineer/Researcher
Review
Kubeshark has been an invaluable asset to our Kubernetes observability toolkit. The depth of traffic analysis it provides is unmatched, allowing us to easily inspect and monitor traffic flows within our cluster. With features that make real-time debugging a breeze, it's become an essential tool for our DevOps team. The seamless integration and user-friendly interface have significantly reduced our troubleshooting time and improved system reliability. Kubeshark is truly a game-changer for anyone serious about Kubernetes observability.
Arpit Nigam
DevSecOps Lead
Review
As a DevOps engineer, I need deep visibility into my Kubernetes clusters to ensure smooth operations and rapid troubleshooting. Kubeshark gives me exactly that! With its powerful network monitoring capabilities, I can easily identify and resolve performance bottlenecks, security threats, and application issues. The ability to capture and analyze API traffic in real-time is invaluable. Kubeshark has become an essential tool in my DevOps arsenal.
Ravindra Singh
DevOps Engineer at Coditas
Review
We were scaling a SaaS solution built with microservices deployed on Kubernetes, but turning on CloudWatch for EKS was simply too costly on AWS—it increased our bill by about five times. I needed insights into network traffic, bandwidth usage, and other metrics, which were missing from my existing scripts. Using this solution not only provided those crucial insights but also allowed me to visualize the data, showing where it was going and how much was being used. This helped us achieve proper scaling much faster and made troubleshooting services within EKS far easier without the need for an EC2 instance or installing anything new into the kubernetes cluster.
Damien Ostler
Advanced Platform Developer