Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Enable network ingress #34487

Merged
merged 2 commits into from
Feb 27, 2025
Merged

Conversation

kovagsm
Copy link
Contributor

@kovagsm kovagsm commented Feb 26, 2025

What does this PR do?

Enable network ingress on the system probe by default. This is already enabled everywhere internally without issues

Motivation

This is needed by the DNS resolver, but is going in a separate commit in case it needs to be reverted

Describe how you validated your changes

Manual tests, integration tests and running on a cluster

Possible Drawbacks / Trade-offs

This option seems to have caused some performance issues on edge servers in the past but hasn't occurred recently.

@kovagsm kovagsm requested review from a team as code owners February 26, 2025 17:27
@kovagsm kovagsm requested a review from dustmop February 26, 2025 17:27
@github-actions github-actions bot added team/ebpf-platform team/agent-configuration short review PR is simple enough to be reviewed quickly labels Feb 26, 2025
@kovagsm kovagsm added the qa/done QA done before merge and regressions are covered by tests label Feb 26, 2025
@safchain safchain added the ask-review Ask required teams to review this PR label Feb 26, 2025
@agent-platform-auto-pr
Copy link
Contributor

agent-platform-auto-pr bot commented Feb 26, 2025

Test changes on VM

Use this command from test-infra-definitions to manually test this PR changes on a VM:

inv aws.create-vm --pipeline-id=57165102 --os-family=ubuntu

Note: This applies to commit 8d13890

@agent-platform-auto-pr
Copy link
Contributor

agent-platform-auto-pr bot commented Feb 26, 2025

Uncompressed package size comparison

Comparison with ancestor da8f45d6caa48e25d25097fd7600acdae4a749db

Diff per package
package diff status size ancestor threshold
datadog-agent-amd64-deb 0.00MB 818.00MB 818.00MB 0.50MB
datadog-agent-x86_64-rpm 0.00MB 827.80MB 827.80MB 0.50MB
datadog-agent-x86_64-suse 0.00MB 827.80MB 827.80MB 0.50MB
datadog-agent-arm64-deb 0.00MB 808.97MB 808.97MB 0.50MB
datadog-agent-aarch64-rpm 0.00MB 818.75MB 818.75MB 0.50MB
datadog-dogstatsd-amd64-deb 0.00MB 39.42MB 39.42MB 0.50MB
datadog-dogstatsd-x86_64-rpm 0.00MB 39.50MB 39.50MB 0.50MB
datadog-dogstatsd-x86_64-suse 0.00MB 39.50MB 39.50MB 0.50MB
datadog-dogstatsd-arm64-deb 0.00MB 37.96MB 37.96MB 0.50MB
datadog-heroku-agent-amd64-deb 0.00MB 443.42MB 443.42MB 0.50MB
datadog-iot-agent-amd64-deb 0.00MB 62.05MB 62.05MB 0.50MB
datadog-iot-agent-x86_64-rpm 0.00MB 62.12MB 62.12MB 0.50MB
datadog-iot-agent-x86_64-suse 0.00MB 62.12MB 62.12MB 0.50MB
datadog-iot-agent-arm64-deb 0.00MB 59.29MB 59.29MB 0.50MB
datadog-iot-agent-aarch64-rpm 0.00MB 59.36MB 59.36MB 0.50MB

Decision

✅ Passed

@agent-platform-auto-pr
Copy link
Contributor

agent-platform-auto-pr bot commented Feb 26, 2025

Static quality checks ✅

Please find below the results from static quality gates

Successful checks

Info

Result Quality gate On disk size On disk size limit On wire size On wire size limit
static_quality_gate_agent_deb_amd64 791.77MiB 801.8MiB 192.62MiB 202.62MiB
static_quality_gate_agent_deb_arm64 783.16MiB 793.14MiB 174.95MiB 184.51MiB
static_quality_gate_agent_rpm_amd64 791.79MiB 801.79MiB 195.03MiB 205.03MiB
static_quality_gate_agent_rpm_arm64 783.29MiB 793.09MiB 176.4MiB 186.44MiB
static_quality_gate_agent_suse_amd64 791.88MiB 801.81MiB 195.03MiB 205.03MiB
static_quality_gate_agent_suse_arm64 783.27MiB 793.14MiB 176.4MiB 186.44MiB
static_quality_gate_dogstatsd_deb_amd64 37.67MiB 47.67MiB 9.78MiB 19.78MiB
static_quality_gate_dogstatsd_deb_arm64 36.28MiB 46.27MiB 8.48MiB 18.49MiB
static_quality_gate_dogstatsd_rpm_amd64 37.67MiB 47.67MiB 9.79MiB 19.79MiB
static_quality_gate_dogstatsd_suse_amd64 37.67MiB 47.67MiB 9.79MiB 19.79MiB
static_quality_gate_iot_agent_deb_amd64 59.25MiB 69.0MiB 14.89MiB 24.8MiB
static_quality_gate_iot_agent_deb_arm64 56.62MiB 66.4MiB 12.84MiB 22.8MiB
static_quality_gate_iot_agent_rpm_amd64 59.25MiB 69.0MiB 14.91MiB 24.8MiB
static_quality_gate_iot_agent_rpm_arm64 56.62MiB 66.4MiB 12.86MiB 22.8MiB
static_quality_gate_iot_agent_suse_amd64 59.25MiB 69.0MiB 14.91MiB 24.8MiB
static_quality_gate_docker_agent_amd64 876.26MiB 886.12MiB 294.27MiB 304.21MiB
static_quality_gate_docker_agent_arm64 890.91MiB 900.79MiB 280.51MiB 290.47MiB
static_quality_gate_docker_agent_jmx_amd64 1.05GiB 1.06GiB 369.35MiB 379.33MiB
static_quality_gate_docker_agent_jmx_arm64 1.05GiB 1.06GiB 351.59MiB 361.55MiB
static_quality_gate_docker_dogstatsd_amd64 45.82MiB 55.78MiB 17.28MiB 27.28MiB
static_quality_gate_docker_dogstatsd_arm64 44.45MiB 54.45MiB 16.16MiB 26.16MiB
static_quality_gate_docker_cluster_agent_amd64 264.96MiB 274.78MiB 106.35MiB 116.28MiB
static_quality_gate_docker_cluster_agent_arm64 280.92MiB 290.82MiB 101.2MiB 111.12MiB

Copy link

cit-pr-commenter bot commented Feb 26, 2025

Regression Detector

Regression Detector Results

Metrics dashboard
Target profiles
Run ID: c46803ee-0ad8-4807-b1fe-e7b4b8d8d1ac

Baseline: da8f45d
Comparison: 8d13890
Diff

Optimization Goals: ✅ No significant changes detected

Fine details of change detection per experiment

perf experiment goal Δ mean % Δ mean % CI trials links
uds_dogstatsd_to_api_cpu % cpu utilization +0.55 [-0.32, +1.43] 1 Logs
tcp_syslog_to_blackhole ingress throughput +0.20 [+0.14, +0.27] 1 Logs
quality_gate_idle memory utilization +0.06 [+0.02, +0.09] 1 Logs bounds checks dashboard
file_to_blackhole_0ms_latency_http1 egress throughput +0.04 [-0.80, +0.88] 1 Logs
file_to_blackhole_300ms_latency egress throughput +0.02 [-0.61, +0.65] 1 Logs
file_to_blackhole_0ms_latency egress throughput +0.01 [-0.81, +0.84] 1 Logs
uds_dogstatsd_to_api ingress throughput +0.01 [-0.28, +0.30] 1 Logs
file_to_blackhole_0ms_latency_http2 egress throughput +0.00 [-0.84, +0.85] 1 Logs
tcp_dd_logs_filter_exclude ingress throughput +0.00 [-0.03, +0.04] 1 Logs
file_to_blackhole_500ms_latency egress throughput +0.00 [-0.78, +0.79] 1 Logs
file_to_blackhole_100ms_latency egress throughput -0.01 [-0.73, +0.70] 1 Logs
file_to_blackhole_1000ms_latency_linear_load egress throughput -0.10 [-0.58, +0.37] 1 Logs
file_tree memory utilization -0.19 [-0.24, -0.14] 1 Logs
file_to_blackhole_1000ms_latency egress throughput -0.23 [-1.00, +0.55] 1 Logs
quality_gate_idle_all_features memory utilization -0.37 [-0.42, -0.32] 1 Logs bounds checks dashboard
quality_gate_logs % cpu utilization -0.51 [-3.34, +2.32] 1 Logs

Bounds Checks: ✅ Passed

perf experiment bounds_check_name replicates_passed links
file_to_blackhole_0ms_latency lost_bytes 10/10
file_to_blackhole_0ms_latency memory_usage 10/10
file_to_blackhole_0ms_latency_http1 lost_bytes 10/10
file_to_blackhole_0ms_latency_http1 memory_usage 10/10
file_to_blackhole_0ms_latency_http2 lost_bytes 10/10
file_to_blackhole_0ms_latency_http2 memory_usage 10/10
file_to_blackhole_1000ms_latency memory_usage 10/10
file_to_blackhole_1000ms_latency_linear_load memory_usage 10/10
file_to_blackhole_100ms_latency lost_bytes 10/10
file_to_blackhole_100ms_latency memory_usage 10/10
file_to_blackhole_300ms_latency lost_bytes 10/10
file_to_blackhole_300ms_latency memory_usage 10/10
file_to_blackhole_500ms_latency lost_bytes 10/10
file_to_blackhole_500ms_latency memory_usage 10/10
quality_gate_idle intake_connections 10/10 bounds checks dashboard
quality_gate_idle memory_usage 10/10 bounds checks dashboard
quality_gate_idle_all_features intake_connections 10/10 bounds checks dashboard
quality_gate_idle_all_features memory_usage 10/10 bounds checks dashboard
quality_gate_logs intake_connections 10/10
quality_gate_logs lost_bytes 10/10
quality_gate_logs memory_usage 10/10

Explanation

Confidence level: 90.00%
Effect size tolerance: |Δ mean %| ≥ 5.00%

Performance changes are noted in the perf column of each table:

  • ✅ = significantly better comparison variant performance
  • ❌ = significantly worse comparison variant performance
  • ➖ = no significant change in performance

A regression test is an A/B test of target performance in a repeatable rig, where "performance" is measured as "comparison variant minus baseline variant" for an optimization goal (e.g., ingress throughput). Due to intrinsic variability in measuring that goal, we can only estimate its mean value for each experiment; we report uncertainty in that value as a 90.00% confidence interval denoted "Δ mean % CI".

For each experiment, we decide whether a change in performance is a "regression" -- a change worth investigating further -- if all of the following criteria are true:

  1. Its estimated |Δ mean %| ≥ 5.00%, indicating the change is big enough to merit a closer look.

  2. Its 90.00% confidence interval "Δ mean % CI" does not contain zero, indicating that if our statistical model is accurate, there is at least a 90.00% chance there is a difference in performance between baseline and comparison variants.

  3. Its configuration does not mark it "erratic".

CI Pass/Fail Decision

Passed. All Quality Gates passed.

  • quality_gate_idle, bounds check memory_usage: 10/10 replicas passed. Gate passed.
  • quality_gate_idle, bounds check intake_connections: 10/10 replicas passed. Gate passed.
  • quality_gate_logs, bounds check memory_usage: 10/10 replicas passed. Gate passed.
  • quality_gate_logs, bounds check intake_connections: 10/10 replicas passed. Gate passed.
  • quality_gate_logs, bounds check lost_bytes: 10/10 replicas passed. Gate passed.
  • quality_gate_idle_all_features, bounds check intake_connections: 10/10 replicas passed. Gate passed.
  • quality_gate_idle_all_features, bounds check memory_usage: 10/10 replicas passed. Gate passed.

@kovagsm
Copy link
Contributor Author

kovagsm commented Feb 27, 2025

/merge

@dd-devflow
Copy link

dd-devflow bot commented Feb 27, 2025

View all feedbacks in Devflow UI.
2025-02-27 08:47:22 UTC ℹ️ Start processing command /merge


2025-02-27 08:47:26 UTC ℹ️ MergeQueue: waiting for PR to be ready

This merge request is not mergeable yet, because of pending checks/missing approvals. It will be added to the queue as soon as checks pass and/or get approvals.
Note: if you pushed new commits since the last approval, you may need additional approval.
You can remove it from the waiting list with /remove command.


2025-02-27 09:37:06 UTC ℹ️ MergeQueue: merge request added to the queue

The median merge time in main is 29m.


2025-02-27 10:11:18 UTC ℹ️ MergeQueue: This merge request was merged

@dd-mergequeue dd-mergequeue bot merged commit 49f98c6 into main Feb 27, 2025
231 checks passed
@dd-mergequeue dd-mergequeue bot deleted the CWS-3904_Enable_Network_Ingress_By_Default branch February 27, 2025 10:11
@github-actions github-actions bot added this to the 7.65.0 milestone Feb 27, 2025
purple4reina added a commit that referenced this pull request Feb 27, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
ask-review Ask required teams to review this PR changelog/no-changelog qa/done QA done before merge and regressions are covered by tests short review PR is simple enough to be reviewed quickly team/agent-configuration team/ebpf-platform
Projects
None yet
Development

Successfully merging this pull request may close these issues.

6 participants