kubeshark is a Kubernetes packet sniffer and network analyzer that allows you to inspect network traffic between Kubernetes resources.Official Page
Choose manually the right binary to download directly from the latest release
Alternatively you can use a shell script to download the right binary for your operating system and CPU architecture:
sh <(curl -Ls https://kubeshark.co/install)
- By default kubeshark is deployed into the
default
namespace. To start capturing taffic in all namespaces:
kubeshark tap -A
- To capture traffic in different namespace:
kubeshark tap -n <namespace>
Note : Once you run the CLI, a browser window will open at
localhost:8899
by default.
To use it in a remote server, you can run the kubeshark command with --proxy-host 0.0.0.0
flag. Requirements for AWS like Platforms
kubeshark tap -A --tls --proxy-host 0.0.0.0
The --tls
flag specifies that TLS encryption should be used for the tap. This ensures that the captured network traffic is secure and cannot be intercepted or tampered with.
Once you run this CLI command,you can open a browser window at remote_ip:8899
.