v52.3.69

v52.3.69 (2024-07-08)

Release Highlights

Keywords: K8s API server, CPU, Memory, Envoy, Istio

In this release, two major efforts were undertaken. The first was to resolve a bug introduced in the previous release that caused elevated CPU and memory consumption. The second was to refactor pod targeting, which included moving all interactions with the K8s API server to the Hub and optimizing the number of such calls. Prior to this refactoring, communication with the K8s API server could have been excessive in extra-large clusters.

Additionally, we fixed a bug enabling Kubeshark to support Istio/Envoy in mTLS STRICT mode.

New Features & Bug Fixes

• Fixed a major bug that caused Kubeshark to process significantly more traffic, resulting in elevated CPU and memory consumption (issue #1554).
• Refactored pod targeting, moving all interactions with the K8s API server to the Hub and optimizing the number of requests to the API server.
• Fixed a bug related to Istio/Envoy support with mTLS in STRICT (issue #1552).

Download Kubeshark for your platform

Mac (x86-64/Intel)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.69/kubeshark_darwin_amd64 && chmod 755 kubeshark

Mac (AArch64/Apple M1 silicon)

rm -f kubeshark && curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.69/kubeshark_darwin_arm64 && chmod 755 kubeshark

Linux (x86-64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.69/kubeshark_linux_amd64 && chmod 755 kubeshark

Linux (AArch64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.69/kubeshark_linux_arm64 && chmod 755 kubeshark

Windows (x86-64)

curl -LO https://github.com/kubeshark/kubeshark/releases/download/v52.3.69/kubeshark.exe

Checksums

SHA256 checksums available for compiled binaries.
Run shasum -a 256 -c kubeshark_OS_ARCH.sha256 to verify.

v52.3.68

v52.3.68 (2024-06-16)

Release Highlights

Keywords: BPF, Multus, network interfaces, CNIs, SCTP, traffic debugging, PCAP Dumper

This version primarily focuses on increasing support for multiple network interfaces and CNIs such as Multus. Prior to this version, Kubeshark targeted only the default network interface, discarding traffic from additional interfaces if they were used (e.g., by Multus). This release brings support for Multus and multiple network interfaces, capturing all traffic across all interfaces and VLANs.

In addition, two new debug tools have been added to help identify traffic issues and answer questions such as why traffic is not appearing on the dashboard.

Additionally, we have improved the traffic recorder based on real usage feedback and added initial support for the SCTP protocol.

Lastly, in this version, we extended Kubeshark's TLS capture capabilities. Prior versions captured TLS traffic only on port 443. This version extends this ability, and now Kubeshark captures TLS traffic on any port.

New Features & Bug Fixes

• Added a traffic debugging capability that enables users to explicitly add a BPF expression, focusing on specific traffic. This capability is useful for observing traffic based on network characteristics (e.g., IP, subnet, etc.). For example, observing traffic on a secondary interface or a VLAN. This BPF filter overrides any other pod targeting rules. Read more about it here.
• The PCAP Dumper is akin to running tcpdump on the node. It dumps the raw traffic into a named pipe directly from the node before any processing is done. This capability is particularly useful for debugging traffic when it isn't visible on the dashboard. Read more about it here.
• Identified duplicate API calls captured both on the client and server, for example, when the client and server are on different nodes. The duplicate traffic is marked with a dup badge.
• Added partial SCTP protocol support.
• Support for Multus and multiple interfaces. Kubeshark now captures traffic across all network interfaces and VLANs.
• Capture TLS traffic on ports other than 443.
• Improved Traffic Recorder capabilities to capture traffic in situations when the PCAP file has already expired due to a short TTL, which is common in busy clusters.
• Added the ability to extend the PCAP TTL using configuration. Read more here.
• Increased TLS OpenSSL support in situations where OpenSSL is used under custom names. (kubeshark/tracer@147a184)

Download Kubeshark for your platform

Mac (x86-64/Intel)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.68/kubeshark_darwin_amd64 && chmod 755 kubeshark

Mac (AArch64/Apple M1 silicon)

rm -f kubeshark && curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.68/kubeshark_darwin_arm64 && chmod 755 kubeshark

Linux (x86-64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.68/kubeshark_linux_amd64 && chmod 755 kubeshark

Linux (AArch64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.68/kubeshark_linux_arm64 && chmod 755 kubeshark

Windows (x86-64)

curl -LO https://github.com/kubeshark/kubeshark/releases/download/v52.3.68/kubeshark.exe

Checksums

SHA256 checksums available for compiled binaries.
Run shasum -a 256 -c kubeshark_OS_ARCH.sha256 to verify.

v52.3.62

v52.3.63 (2024-06-01)

Release Highlights

Keywords: eBPF, PF-RING, AF_PACKET, TLS, complimentary pro license

This release primarily focuses on bug fixes that enhance performance, increase TLS capture support, improve name/IP resolution, and fix a bug that prevented kubeshark CLI users from upgrading and leveraging the complimentary pro license. Additionally, we have changed the algorithm for selecting the best traffic capture method, making AF_PACKET the default while allowing users to explicitly choose eBPF or PF_RING as packet capture options.

New Features & Bug Fixes

• Set eBPF and PF-RING as explicit packet capture options, with AF_PACKET as the default.
• Improved name/IP resolution support for kube-probe.
• Enhanced performance by fixing a bug related to K8s watchers that caused elevated CPU usage by workers.
• Added K8s service-related information to the request/response pair metadata.
• Fixed a bug related to the complimentary Pro license automatic provisioning when using kubeshark CLI to log in, sign up, or upgrade (#1546).
• Improved TLS traffic interception (kubeshark/tracer#62).

Download Kubeshark for your platform

Mac (x86-64/Intel)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.62/kubeshark_darwin_amd64 && chmod 755 kubeshark

Mac (AArch64/Apple M1 silicon)

rm -f kubeshark && curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.62/kubeshark_darwin_arm64 && chmod 755 kubeshark

Linux (x86-64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.62/kubeshark_linux_amd64 && chmod 755 kubeshark

Linux (AArch64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.62/kubeshark_linux_arm64 && chmod 755 kubeshark

Windows (x86-64)

curl -LO https://github.com/kubeshark/kubeshark/releases/download/v52.3.62/kubeshark.exe

Checksums

SHA256 checksums available for compiled binaries.
Run shasum -a 256 -c kubeshark_OS_ARCH.sha256 to verify.

v52.3.59

v52.3.59 (2024-05-24)

Release Highlights

Keywords: OpenShift, eBPF, performance, Kafka

This release focuses on fixing several significant bugs that adversely impacted Kubeshark's performance. We also improved Kubeshark's name/IP resolution using eBPF capabilities, especially in situations where the pods reside on the host network. Finally, we extended our Kafka support to cover the entire protocol.

New Features & Bug Fixes

• Added a necessary SCC to the OpenShift Helm template (#1539)
• Added the ability to indicate specific Docker tags for each software component (e.g., front, worker, hub)(487f0b9)
• Watch node events (3798bf7)
• Full Kafka protocol support
• Improved IP/name resolution, especially in situations where the pod is on the host network, by using cgroup ID
• Fixed a significant bug where Kubeshark didn't detect new pod events and therefore did not capture traffic for these new pods
• Fixed a significant bug where the Workers' CPU usage randomly jumped to 100% (#1544)

Download Kubeshark for your platform

Mac (x86-64/Intel)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.59/kubeshark_darwin_amd64 && chmod 755 kubeshark

Mac (AArch64/Apple M1 silicon)

rm -f kubeshark && curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.59/kubeshark_darwin_arm64 && chmod 755 kubeshark

Linux (x86-64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.59/kubeshark_linux_amd64 && chmod 755 kubeshark

Linux (AArch64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.59/kubeshark_linux_arm64 && chmod 755 kubeshark

Windows (x86-64)

curl -LO https://github.com/kubeshark/kubeshark/releases/download/v52.3.59/kubeshark.exe

Checksums

SHA256 checksums available for compiled binaries.
Run shasum -a 256 -c kubeshark_OS_ARCH.sha256 to verify.

v52.3.0

v52.3.0 (2024-05-02)

Release Highlights

Keywords: eBPF, TLS, Minikube, KinD, Traffic Retention

In this release, we introduce eBPF as the default mechanism for packet capture, provided that the kernel supports cgroup V2. This update includes the use of eBPF for TLS traffic capture, replacing AF_PACKET as the standard method. Additionally, we have implemented long-term traffic retention in AWS S3 and Google GCS as part of the traffic recorder. We have also addressed several bugs related to TLS traffic capture and decryption.

New Features & Bug Fixes

• eBPF is now the default traffic capture source for all traffic, assuming kernel support for cgroup V2 (f4e2d2f).
• Resolved an AWS S3 upload issue, enabling support for all regions beyond the default specified in the configuration.
• Introduced optional, automatic long-term traffic retention as part of the traffic recorder (https://docs.kubeshark.co/en/long_term_retention).
• Fixed a bug in the Tracer where TLS was not decrypted in Minikube and KinD environments (kubeshark/tracer@40334a3). Also fixed kubeshark/tracer#51 and kubeshark/tracer#38.
• Restored TLS capture support for kernel versions prior to 5.5 (kubeshark/tracer@7fb8b81). Fixed #1535.

Download Kubeshark for your platform

Mac (x86-64/Intel)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.0/kubeshark_darwin_amd64 && chmod 755 kubeshark

Mac (AArch64/Apple M1 silicon)

rm -f kubeshark && curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.0/kubeshark_darwin_arm64 && chmod 755 kubeshark

Linux (x86-64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.0/kubeshark_linux_amd64 && chmod 755 kubeshark

Linux (AArch64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.3.0/kubeshark_linux_arm64 && chmod 755 kubeshark

Windows (x86-64)

curl -LO https://github.com/kubeshark/kubeshark/releases/download/v52.3.0/kubeshark.exe

Checksums

SHA256 checksums available for compiled binaries.
Run shasum -a 256 -c kubeshark_OS_ARCH.sha256 to verify.

v52.2.39

v52.2.39 (2024-04-24)

Release Highlights

This release introduces an embedded authentication mechanism that makes it easy to activate the complimentary pro license, which supports clusters larger than two nodes. In addition we fixed a few Tracer related issues that may have caused Tracer to not function well in certain environments.

New Features & Bug Fixes

• Authentication mechanism embedded in the dashboard
• Significantly reduced the number of API calls to the Kubernetes API server on very busy clusters
• Fixed some tracer-related issues that may have caused Tracer to not function well in certain environments

Download Kubeshark for your platform

Mac (x86-64/Intel)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.2.39/kubeshark_darwin_amd64 && chmod 755 kubeshark

Mac (AArch64/Apple M1 silicon)

rm -f kubeshark && curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.2.39/kubeshark_darwin_arm64 && chmod 755 kubeshark

Linux (x86-64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.2.39/kubeshark_linux_amd64 && chmod 755 kubeshark

Linux (AArch64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.2.39/kubeshark_linux_arm64 && chmod 755 kubeshark

Windows (x86-64)

curl -LO https://github.com/kubeshark/kubeshark/releases/download/v52.2.39/kubeshark.exe

Checksums

SHA256 checksums available for compiled binaries.
Run shasum -a 256 -c kubeshark_OS_ARCH.sha256 to verify.

v52.2.30

v52.2.30 (2024-04-19)

Release Highlights

This release includes significant bug fixes such as resolving the issue with numerous TCP timeout events not being displayed and correcting a defect in the recording system. Additionally, it marks the first iteration of implementing eBPF for packet capture and network event reporting.

New Features & Bug Fixes

• Extended cluster role permissions. (d4fade3)
• Ability to control TCP timeout alerts via a configuration setting; the default setting is to suppress these alerts. (0f40278)
• Enhanced net capabilities for Tracer, in preparation for the addition of eBPF as a packet capture source.(b39c5dd)
• Resolved an issue causing upgrade failures. Issue #1534 (6b6915c)
• Fixed a bug in the recording system to ensure a recording folder is created even if the content is still being generated.
• Developed infrastructure to report network events.
• Maintained traffic entries during pauses and restarts of streaming (websocket).
• Implemented the initial version of eBPF packet capture. (kubeshark/tracer#50)

Download Kubeshark for your platform

Mac (x86-64/Intel)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.2.30/kubeshark_darwin_amd64 && chmod 755 kubeshark

Mac (AArch64/Apple M1 silicon)

rm -f kubeshark && curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.2.30/kubeshark_darwin_arm64 && chmod 755 kubeshark

Linux (x86-64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.2.30/kubeshark_linux_amd64 && chmod 755 kubeshark

Linux (AArch64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.2.30/kubeshark_linux_arm64 && chmod 755 kubeshark

Windows (x86-64)

curl -LO https://github.com/kubeshark/kubeshark/releases/download/v52.2.30/kubeshark.exe

Checksums

SHA256 checksums available for compiled binaries.
Run shasum -a 256 -c kubeshark_OS_ARCH.sha256 to verify.

v52.2.1

v52.2.1 (2024-03-27)

Release Highlights

This patch release provides a quick fix for an AF_PACKET SIGSEGV that was encountered and reported by one of our users.

New Features & Bug Fixes

• Added libcap as an alternative to AF_PACKET to prevent SIGSEGV occurrences (24aa4db).
• Fixed two UI/UX bugs in the dashboard.

Download Kubeshark for your platform

Mac (x86-64/Intel)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.2.1/kubeshark_darwin_amd64 && chmod 755 kubeshark

Mac (AArch64/Apple M1 silicon)

rm -f kubeshark && curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.2.1/kubeshark_darwin_arm64 && chmod 755 kubeshark

Linux (x86-64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.2.1/kubeshark_linux_amd64 && chmod 755 kubeshark

Linux (AArch64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.2.1/kubeshark_linux_arm64 && chmod 755 kubeshark

Windows (x86-64)

curl -LO https://github.com/kubeshark/kubeshark/releases/download/v52.2.1/kubeshark.exe

Checksums

SHA256 checksums available for compiled binaries.
Run shasum -a 256 -c kubeshark_OS_ARCH.sha256 to verify.

v52.2.0

v52.2.0 (2024-03-27)

Release Highlights

Keywords: AMQP, Name Resolution, Timezone

In this release, we've introduced comprehensive support for AMQP, covering all 62 methods, significantly expanding our previous support, which covered only 22 methods. We've also introduced the ability to adjust the dashboard's timezone, offering support for local, custom, and UTC timezones. Additionally, we've resolved a critical bug that caused pods to display incorrect names for other pods sharing the same IP address.

New Features & Bug Fixes

• Added options for local, custom, and UTC timezones to the dashboard.
• Fixed an issue with inaccurate name resolution that resulted in Kubernetes elements displaying incorrect names (#1524).
• Implemented complete support for AMQP (#1523).

Download Kubeshark for your platform

Mac (x86-64/Intel)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.2.0/kubeshark_darwin_amd64 && chmod 755 kubeshark

Mac (AArch64/Apple M1 silicon)

rm -f kubeshark && curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.2.0/kubeshark_darwin_arm64 && chmod 755 kubeshark

Linux (x86-64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.2.0/kubeshark_linux_amd64 && chmod 755 kubeshark

Linux (AArch64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.2.0/kubeshark_linux_arm64 && chmod 755 kubeshark

Windows (x86-64)

curl -LO https://github.com/kubeshark/kubeshark/releases/download/v52.2.0/kubeshark.exe

Checksums

SHA256 checksums available for compiled binaries.
Run shasum -a 256 -c kubeshark_OS_ARCH.sha256 to verify.

v52.1.77

v52.1.77 (2024-03-19)

Release Highlights

This release focuses on a quick iteration that addresses an IPv6-related bug and introduces a significant performance enhancement. The improvement notably reduces the packet drop rate when utilizing AF-PACKET.

Keywords: Performance, Packet Drop Rate, IPv6, AF-PACKET

New Features & Bug Fixes

• Removed a deprecated Homebrew tap to streamline installations.
• Integrated local timezone support into the frontend, enhancing user experience.
• Tuned AF_PACKET TPACKET_V3 parameters for improved performance.
• Added IPv6 support to HostWithPort, resolving issue #1520.

Download Kubeshark for your platform

Mac (x86-64/Intel)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.1.77/kubeshark_darwin_amd64 && chmod 755 kubeshark

Mac (AArch64/Apple M1 silicon)

rm -f kubeshark && curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.1.77/kubeshark_darwin_arm64 && chmod 755 kubeshark

Linux (x86-64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.1.77/kubeshark_linux_amd64 && chmod 755 kubeshark

Linux (AArch64)

curl -Lo kubeshark https://github.com/kubeshark/kubeshark/releases/download/v52.1.77/kubeshark_linux_arm64 && chmod 755 kubeshark

Windows (x86-64)

curl -LO https://github.com/kubeshark/kubeshark/releases/download/v52.1.77/kubeshark.exe

Checksums

SHA256 checksums available for compiled binaries.
Run shasum -a 256 -c kubeshark_OS_ARCH.sha256 to verify.