Skip to content
SPECIFICTION
Get listed

orb8

github.com

macOSLinuxAPISelf-hosted
Visit github.com
Spec score 7.1 #23 of 29 in eBPF Observability Tools

Spec sheet

Purpose
orb8 is an eBPF-powered toolkit for Kubernetes network observability, designed for AI/ML clusters.Read 8 Oct 2026 · github.com
Deployment
The agent is deployed as a Kubernetes DaemonSet and requires Linux kernel 5.8 or later with BTF enabled.Read 7 Oct 2026 · github.com
API
The agent exposes a gRPC API with QueryFlows, StreamEvents, and GetStatus operations.Read 8 Oct 2026 · github.com
Security
The documented DaemonSet uses specific Linux capabilities and is described as not running in privileged mode.Read 8 Oct 2026 · github.com
License
The repository is licensed under Apache License 2.0.Read 8 Oct 2026 · github.com
Maker
The GitHub profile for Ignoramuss identifies the account holder as Mayank.Read 8 Oct 2026 · github.com
CLI and API
The CLI can check agent status, query aggregated flows, and stream network events; the gRPC API provides QueryFlows, StreamEvents, and GetStatus.Read 7 Oct 2026 · github.com
Current maturity
The README identifies v0.0.6 as the current implementation and lists network capture, pod enrichment, a gRPC API, CLI commands, and DaemonSet deployment as working.Read 7 Oct 2026 · github.com
Installation
The project documents installation through Cargo or from source, plus deployment with a Kubernetes manifest.Read 8 Oct 2026 · github.com
Known coverage limits
Documented limitations include IPv4-only capture, invisible same-node pod traffic in some probe configurations, and no cluster-wide aggregation yet.Read 7 Oct 2026 · github.com
Kubernetes deployment
The agent can be deployed as a Kubernetes DaemonSet, with a ServiceAccount and ClusterRole for pod list and watch access.Read 8 Oct 2026 · github.com
Limits
Documented limitations include IPv4-only capture, invisible same-node pod traffic when probes attach only to eth0, and no cluster-wide query aggregation yet.Read 8 Oct 2026 · github.com
Live features
The current release documents aggregated flow queries, real-time event streaming, agent status, and a CLI with namespace and pod filters.Read 8 Oct 2026 · github.com
No application changes
The project says it captures cluster network flows without application changes, a sidecar, or a kernel module.Read 7 Oct 2026 · github.com
Packet capture
Its eBPF probes capture IPv4 network flows for TCP, UDP, and ICMP traffic on ingress and egress.Read 7 Oct 2026 · github.com
Packet visibility
It captures IPv4 TCP, UDP, and ICMP network flows and maps packet IPs to Kubernetes pods.Read 8 Oct 2026 · github.com
Planned capabilities
GPU telemetry, syscall monitoring, Prometheus metrics, and cluster-wide queries are listed as roadmap items.Read 8 Oct 2026 · github.com
Pod mapping
It maps packet IP addresses to Kubernetes pod names through the Kubernetes API.Read 7 Oct 2026 · github.com
Requirements
The agent requires Linux kernel 5.8 or later with BTF enabled.Read 8 Oct 2026 · github.com
Security model
The DaemonSet uses specified Linux capabilities and is described as not running in a privileged container.Read 7 Oct 2026 · github.com

Where Specifiction places it

Alternatives to orb8All alternatives →