AI-Powered

MCP-Ready

API Traffic Analyzer

for

kubernetes logo

Cluster-wide, real-time visibility into every packet, API call, and service interaction. Replay any moment in time. Resolve incidents at the speed of LLMs. 100% on-premises.

github icon
GitHub Stars
10.7K
docker icon
Docker Pulls
25M
live serversicon
Live Servers
6K

How to deploy Kubeshark?

number one on homebrew

Install:

brew install kubeshark
coping iconcopy icon
number two on homebrew

Start capturing Traffic:

kubeshark tap
coping iconcopy icon
ready on homebrew

Ready

number one on helm

Add the Helm repository and install:

helm repo add kubeshark https://helm.kubeshark.com
helm install kubeshark kubeshark/kubeshark
coping iconcopy icon
number two on helm

Enable dashboard access:

kubectl port-forward service/kubeshark-front 8899:80
coping iconcopy icon
number three on helm

Visit local page:

Visit localhost:8899 to view real time streaming traffic

ready on helm

Ready

number one on github

Clone:

git clone https://github.com/kubeshark.git
coping iconcopy icon
number two on github

Build:

cd kubeshark && make
coping iconcopy icon
number thee on github

Start capturing traffic:

./bin/kubeshark__ tap
coping iconcopy icon
ready on github

Ready

network is a blind spot

We were scaling a SaaS solution built with microservices deployed on Kubernetes, but turning on CloudWatch for EKS was simply too costly on AWS. Kubeshark helped us achieve proper scaling and made troubleshooting far easier without the need for an EC2 instance.

Damien Ostler
Advanced Platform Developer

With intuitive dashboards and PCAP storage Kubeshark is the perfect tool for understanding cluster communications at a granular level. 
If you're managing a Kubernetes environment, Kubeshark is a game changer!

Achraf Nhaila
SRE | Devops - Devsecops | Cloud Consultant

The standout moment was using Kubeshark to visualize and debug Kubernetes resource interactions. Clear insights into how components and traffic management functioned together made the entire process far more understandable and efficient.

Rohit Vishwakarma
DevOps Engineer

I had a use case to identify all outbound connections made during normal operations of our product, and Kubeshark saved me loads of time in the process! I raved about the tool to colleagues as well.

Nathan Chang
Robust intelligence at Solutions Architecture

Kubeshark provides real-time visibility into cluster network traffic enabling them to detect vulnerabilities and threats quickly. With deep insights into packet data, Kubeshark helps proactively secure deployments. A must-have for any Kubernetes security strategy.

Harsha Koushik
Security Engineer/Researcher

Kubeshark has been an invaluable asset to our Kubernetes observability toolkit. The depth of traffic analysis it provides is unmatched and the seamless integration and user-friendly interface have significantly reduced our troubleshooting time and improved system reliability.

Arpit Nigam
DevSecOps Lead

As a DevOps engineer, I need deep visibility into my Kubernetes clusters to ensure smooth operations and rapid troubleshooting. Kubeshark gives me exactly that! The ability to capture and analyze API traffic in real-time is invaluable. It’s become an essential tool in my DevOps arsenal.

Ravindra Singh
DevOps Engineer at Coditas

Leveling up my Kubernetes game has been an exciting journey with Kubeshark. From mastering load balancing across pods to exploring app exposure using NodePort, it’s been an invaluable tool that’s given me a clear understanding of how data moves within the cluster.

Akshay Burungale
AWS DevOps Engineer
Kubernetes Incident Investigation for DFIR teams

Deep Packet Inspection with Full API & Kubernetes Contexts

  • item icon
    Real-time & cluster-wide
  • item icon
    Replay events from any time in history
  • item icon
    Meets the scale of Kubernetes
  • item icon
    Full payload visibility — even encrypted, no instrumentation required
  • item icon
    Like a combination of CCTV and flight recorder — for Kubernetes

AI-Powered Root Cause Analysis

  • item icon
    From hours to minutes.
  • item icon
    Full API payloads and L4/L7 context
  • item icon
    Fits into any MCP-compatible AI platform
  • item icon
    Read more >> here

L4 Traffic (PCAP) Retention — Immutable Forensics

  • item icon
    Continuously capture and store every packet
  • item icon
    Snapshot any time window across any node
  • item icon
    Dissect into full L7 API calls and replay in order
  • item icon
    Long-term retention with zero evidence lost
Get going in <60 seconds
What are people saying about
Kubeshark Logo
The Must Have Tool for Devops & SREs
Alex Jones from Canonical describes why Kubeshark is a must have tool for Devops and SREs, and provides a brief history of Wireshark and the importance of network analysis.
Understand Traffic Flow in K8s
Abhishek Veeramalla, a DevOps evangelist, uses Kubeshark in his DevOps course to understand how services handle load balancing, service discovery, and exposing applications to the outside world.
Kubeshark Filtering Example
Kubeshark: 
Wireshark for Kubernetes
Kubeshark: Wireshark for Kubernetes Harsha Koushik, a security engineer, is using Kubeshark for traffic monitoring and threat modeling while comparing to other tools in the industry.
Review
I had a use case to identify all outbound connections made during normal operations of our product (to help clients with whitelisting), and Kubeshark saved me loads of time in the process! I raved about the tool to colleagues as well.
Nathan Chang
Robust intelligence at Solutions Architecture
Review
Kubeshark is the Wireshark for Kubernetes! It provides an in-depth look at network traffic in real time, making API monitoring and debugging seamless. With features like intuitive dashboards and PCAP storage, it’s the perfect tool for understanding Kubernetes cluster communications at a granular level. If you're managing a Kubernetes environment, I highly recommend giving Kubeshark a try—it’s a game changer
Achraf NHAILA
SRE | Devops - Devsecops | Cloud Consultant
Review
The standout moment was using Kubeshark to visualize and debug Kubernetes resource interactions. Kubeshark provided clear insights into how components like deployment configuration and traffic management functioned together, making the entire process far more understandable and efficient. It was an invaluable tool in helping me grasp the inner workings of Kubernetes clusters.
Rohit Vishwakarma
DevOps Engineer
Review
Leveling up my Kubernetes game has been an exciting journey, especially with tools like Kubeshark. It’s been a game-changer in providing deep insights into Kubernetes network flows. From mastering load balancing across pods to exploring app exposure using NodePort, Kubeshark has given me a clear understanding of how data moves within the cluster. If you're looking to dive deep into Kubernetes services and network insights, Kubeshark is an invaluable tool!
Akshay Burungale
AWS DevOps Engineer
Review
Kubeshark is essential for Kubernetes security. It gives security teams real-time visibility into cluster network traffic, enabling them to detect vulnerabilities and threats quickly. With deep insights into packet data, Kubeshark helps proactively secure deployments and maintain compliance. A must-have for any Kubernetes security strategy.
Harsha Koushik
Security Engineer/Researcher
Review
Kubeshark has been an invaluable asset to our Kubernetes observability toolkit. The depth of traffic analysis it provides is unmatched, allowing us to easily inspect and monitor traffic flows within our cluster. With features that make real-time debugging a breeze, it's become an essential tool for our DevOps team. The seamless integration and user-friendly interface have significantly reduced our troubleshooting time and improved system reliability. Kubeshark is truly a game-changer for anyone serious about Kubernetes observability.
Arpit Nigam
DevSecOps Lead
Review
As a DevOps engineer, I need deep visibility into my Kubernetes clusters to ensure smooth operations and rapid troubleshooting. Kubeshark gives me exactly that! With its powerful network monitoring capabilities, I can easily identify and resolve performance bottlenecks, security threats, and application issues. The ability to capture and analyze API traffic in real-time is invaluable. Kubeshark has become an essential tool in my DevOps arsenal.
Ravindra Singh
DevOps Engineer at Coditas
Review
We were scaling a SaaS solution built with microservices deployed on Kubernetes, but turning on CloudWatch for EKS was simply too costly on AWS—it increased our bill by about five times. I needed insights into network traffic, bandwidth usage, and other metrics, which were missing from my existing scripts. Using this solution not only provided those crucial insights but also allowed me to visualize the data, showing where it was going and how much was being used. This helped us achieve proper scaling much faster and made troubleshooting services within EKS far easier without the need for an EC2 instance or installing anything new into the kubernetes cluster.
Damien Ostler
Advanced Platform Developer