Tracing SSL/TLS Encrypted Microservices with eBPF

Explore the challenges and solutions for tracing SSL/TLS encrypted microservices using eBPF in this informative conference talk. Delve into the growing adoption of SSL/TLS in Cloud Native environments and its impact on observability tools. Learn how eBPF can be leveraged to trace SSL/TLS connections, enabling application developers to access crucial information such as operations, endpoints, and payloads. Discover the techniques used by tools like BCC's sslsniff and Pixie's protocol tracer, including attaching eBPF uprobes to popular SSL/TLS libraries like OpenSSL, BoringSSL, and goTLS. Gain insights into collecting clear text data directly from TLS libraries and understand the challenges of tracing dynamically vs. statically linked TLS libraries. Explore how this approach can enhance application observability in large engineering organizations without disrupting production environments.