AI & eBPF based performance anomaly detection system
Ido Ben-Yair, Pavel Rogovoy, Nezer Jacob Zaidenberg · 2019
We describe means to run eBPF on a production environment for systems inspection. We examine the inspected system outputs in order to train and generate a model for the host. We model the specific application and network traffic usage on the site based on the data collected by eBPF. Our system generates alerts when an anomaly in performance is detected on a specific host. These warnings can be used to discover the root cause for performance problems, cyber-security issues and warn in advance about potential performance peaks.