Reduce leaks in probe endpoint reporter #3661
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Delay kernel events by up to 0.2ms, to reduce the chance the ebpf reporter sends them out-of-order, and allow out-of-order events to happen up to once a minute without giving up on the ebpf reporter.
We observe a slow increase in connections reported, and are unable to find the root cause, so clear down the data every six hours and start from a clean sheet.
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Fixes #3645
Restarting the thing every six hours is somewhat heavy-handed, but I couldn't find an underlying cause and this will remove the pain for the users affected.
Also loosen the parameters around ebpf restarts, so we will tend to use ebpf more and conntrack less. Continuation of #3653.