@techreport{oai:ipsj.ixsq.nii.ac.jp:00220136, author = {Chunghan, Lee and Reina, Yoshitani and Toshio, Hirotsu and Chunghan, Lee and Reina, Yoshitani and Toshio, Hirotsu}, issue = {9}, month = {Sep}, note = {Large scale microservice applications have been arisen and the application's architecture and container overlay networks on servers have also been complex. Although the distributed tracing for the service mesh is widely adopted in the microservice applications, it only focuses on latency-based monitoring and service discovery at an application layer. It is still challenging to monitor the container overlay networks to collaborate with the service mesh. In this paper, we present a packet tracing method using eBPF for the latency measurement based on the service mesh on the container overlay network. To detect the distributed tracing context on a HTTP header efficiently, we move the location of the tracing context at the head of the HTTP on sidecar proxy. Our tracing method gathers the HTTP packets that have the tracing context and measures the latency using eBPF. Our evaluation using an open-source benchmark on Kubernetes shows that there is no significant change of end-to-end latency using the proposed tracing header format. Moreover, our eBPF tracing method presents the similar latency characteristics on the container overlay network in comparison with tcpdump., Large scale microservice applications have been arisen and the application's architecture and container overlay networks on servers have also been complex. Although the distributed tracing for the service mesh is widely adopted in the microservice applications, it only focuses on latency-based monitoring and service discovery at an application layer. It is still challenging to monitor the container overlay networks to collaborate with the service mesh. In this paper, we present a packet tracing method using eBPF for the latency measurement based on the service mesh on the container overlay network. To detect the distributed tracing context on a HTTP header efficiently, we move the location of the tracing context at the head of the HTTP on sidecar proxy. Our tracing method gathers the HTTP packets that have the tracing context and measures the latency using eBPF. Our evaluation using an open-source benchmark on Kubernetes shows that there is no significant change of end-to-end latency using the proposed tracing header format. Moreover, our eBPF tracing method presents the similar latency characteristics on the container overlay network in comparison with tcpdump.}, title = {eBPF-based Packet Tracing for Service Mesh}, year = {2022} }