Analyzing Microservice Connectivity with Kubesonde

Jacopo Bufalino*, Mario Di Francesco, Tuomas Aura

*Corresponding author for this work

Research output: Chapter in Book/Report/Conference proceedingConference article in proceedingsScientificpeer-review

35 Downloads (Pure)

Abstract

Modern cloud-based applications are composed of several microservices that interact over a network. They are complex distributed systems, to the point that developers may not even be aware of how microservices connect to each other and to the Internet. As a consequence, the security of these applications can be greatly compromised. This work explicitly targets this context by providing a methodology to assess microservice connectivity, a software tool that implements it, and findings from analyzing real cloud applications. Specifically, it introduces Kubesonde, a cloud-native software that instruments live applications running on a Kubernetes cluster to analyze microservice connectivity, with minimal impact on performance. An assessment of microservices in 200 popular cloud applications with Kubesonde revealed significant issues in terms of network isolation: more than 60% of them had discrepancies between their declared and actual connectivity, and none restricted outbound connections towards the Internet. Our analysis shows that Kubesonde offers valuable insights on the connectivity between microservices, beyond what is possible with existing tools.
Original languageEnglish
Title of host publicationESEC/FSE 2023: Proceedings of the 31st ACM Joint European Software Engineering Conference and Symposium on the Foundations of Software Engineering
EditorsSatish Chandra, Kelly Blincoe, Paolo Tonella
Place of PublicationNew York
PublisherACM
Pages2038–2043
Number of pages6
ISBN (Electronic)979-8-4007-0327-0
DOIs
Publication statusPublished - 30 Nov 2023
MoE publication typeA4 Conference publication
EventACM Joint European Software Engineering Conference and Symposium on the Foundations of Software Engineering - San Francisco, United States
Duration: 3 Dec 20238 Dec 2023
Conference number: 31

Conference

ConferenceACM Joint European Software Engineering Conference and Symposium on the Foundations of Software Engineering
Abbreviated titleESEC/FSE
Country/TerritoryUnited States
CitySan Francisco
Period03/12/202308/12/2023

Fingerprint

Dive into the research topics of 'Analyzing Microservice Connectivity with Kubesonde'. Together they form a unique fingerprint.

Cite this