--- title: "Network Observability: See Every Connection & DNS Query in the Cluster" url: https://daily.dev/posts/network-observability-see-every-connection-dns-query-in-the-cluster-t5zlk1hrq source_url: https://www.fairwinds.com/blog/network-observability-see-every-connection-dns-query-in-the-cluster type: article source: "Fairwinds Blog" published: 2026-08-13T19:10:22.780Z updated: 2026-08-13T19:28:23.706Z tags: ["security", "linux", "kubernetes", "observability", "dns"] reading_time: 5 upvotes: 15 comments: 2 language: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Network Observability: See Every Connection & DNS Query in the Cluster **[Fairwinds Blog](https://daily.dev/sources/fairwinds-blog)** · 5 min read · 15 upvotes · 2 comments ## Summary Fairwinds Insights now includes Network Observability, a feature that captures cluster network traffic and DNS activity via eBPF (using Inspektor Gadget) and enriches it with Kubernetes metadata like pod, namespace, and workload owner. It runs as two components: a DaemonSet agent capturing TCP connections and DNS queries, and an aggregator that enriches and forwards the data to Insights. The UI offers a Service Map showing live traffic between namespaces and external endpoints, plus a DNS Summary sorted by failures, both backed by a filterable Live Events table supporting CSV export. Requirements include Linux nodes with bpf and debugfs filesystems; Windows nodes are unsupported. The feature became generally available on July 28, 2026. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### How does Fairwinds Insights capture network traffic and DNS queries in a Kubernetes cluster? It uses eBPF through Inspektor Gadget via a DaemonSet agent called network-flow that attaches eBPF programs to the kernel on every node to capture TCP connections, traffic volumes, and DNS activity. A separate aggregator, network-flow-aggregator, enriches this raw data with Kubernetes metadata like pod, namespace, and workload owner before forwarding it to Insights, without needing elevated privileges itself. _Teams debugging cluster network dependencies can track observability tooling changes like this on daily.dev._ ### What are the node requirements for running eBPF-based network observability in Kubernetes? Nodes must run Linux with the bpf and debugfs filesystems available; Windows nodes are not supported. The agent also requires a set of elevated Linux capabilities and host filesystem mounts to operate through eBPF, which the deployment chart configures automatically as long as the cluster permits them. _Platform engineers weighing eBPF tooling prerequisites keep tabs on requirements like these via daily.dev._ ### When did Fairwinds Insights Network Observability become generally available? Network Observability became generally available on July 28, 2026, as an extension of the Fairwinds Insights platform that already provided cost, policy, and security data, now covering the network layer with workload-aware service maps and DNS query visibility. _daily.dev helps engineers stay on top of new observability releases shaping their Kubernetes stack._ ## Community discussion Top comments from developers on daily.dev. **@agustinbarrientos** · 0 upvotes > Try adding workload rollout markers to the DNS failure timeline too **@trevorsuna** · 0 upvotes > Pairing eBPF connection data with Kubernetes ownership metadata makes this much more actionable than a raw packet view. The DNS failure summary looks especially useful during incidents, because it can quickly separate application errors from service discovery or upstream resolver trouble. ## Similar posts on daily.dev - [What's new in network observability 1.10](https://daily.dev/posts/what-s-new-in-network-observability-1-10-xylsm7dho) · Red Hat Developer · 1 upvotes · 0 comments - [What's new in network observability 1.11](https://daily.dev/posts/what-s-new-in-network-observability-1-11-r3pxw7umm) · Red Hat Developer · 0 upvotes · 0 comments - [Monitor network performance and traffic across your EKS clusters with Container Network Observability](https://daily.dev/posts/monitor-network-performance-and-traffic-across-your-eks-clusters-with-container-network-observabilit-jwtsbnmrm) · AWS · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#linux](https://daily.dev/tags/linux), [#kubernetes](https://daily.dev/tags/kubernetes), [#observability](https://daily.dev/tags/observability), [#dns](https://daily.dev/tags/dns) [View this post on daily.dev](https://daily.dev/posts/network-observability-see-every-connection-dns-query-in-the-cluster-t5zlk1hrq)