At Build 2023, we are happy to announce the public preview of the new Network Observability add-on for AKS. This add-on provides cluster level networking metrics and complete visibility into your cluster network. When combined with the recently announced Istio service mesh add-on and Azure CNI (powered by Cilium) - Customers now have comprehensive observability across all network layers. These offerings work seamlessly with the Azure managed services for Prometheus and Grafana - providing a unified monitoring experience in Azure Monitor.
This solves a top pain point for AKS customers – the low observability across the multiple layers in the Kubernetes networking stack that make it difficult to spot the root cause for a networking issue.
Network Observability add-on
Comprehensive networking metrics for your AKS cluster
The new Network Observability AKS add-on (Preview) provides complete observability into the network health and connectivity of your AKS cluster.
Get access to cluster level network metrics like packet drops, connections stats and more.
(At GA) Access to pod-level metrics and network debuggability features
Support for all Azure CNIs - AzureCNI and AzureCNI (Powered by Cilium)
Support for all AKS node types - Linux and Windows
Easy deployment using native Azure tools - AKS CLI, ARM templates, PowerShell, etc.
Seamless integration with the Azure managed Prometheus and Azure-managed Grafana offerings.
Performance and innovation of Cilium – available natively on Azure
Azure CNI powered by Cilium integrates the scalable and flexible Azure IPAM control plane with the robust dataplane offered by Cilium OSS to create a modern container networking stack that meets the demands of cloud native workloads. Azure CNI Powered by Cilium offers the following benefits today and provides the ideal platform for future innovations.
Scalable and performant Networking - The Cilium powered CNI supports both Vnet and Overlay modes. The socket-based load-balancing for Kubernetes services in Cilium replaces the inefficient load-balancing based on IPTable rules in KubeProxy to provide superior data path performance at par with direct connectivity to service backend Pod. The performance is deterministic irrespective of the number of services deployed in the cluster.
Kubernetes Network - The Cilium powered CNI comes with built-in support for the basic Kubernetes Network Policies. There is no need to install a separate solution on top. The solution offers significant improvement in scale and performance by eliminating usage of IPTables for network filtering.
All the network observability components mentioned above work seamless with our managed services for Prometheus and Grafana.
The Network Observability and Azure Service Mesh add-on get scraped automatically by the Azure Monitor managed service for Prometheus without the need for any additional configuration
To visualize your metrics, you use out-of-box dashboards available in Azure managed Grafana or import community dashboards.
We are excited to see how you will use the capabilities and look forward to your feedback. Stay tuned as we work towards creating integrated monitoring and troubleshooting experiences for cloud native workloads.