Components of Universal Cloud Tap - Container

The Universal Cloud Tap - Container works with the following components:

  • GigaVUE-FM fabric manager is a web-based fabric management and orchestration interface that provides a single pane of glass visibility, management, and orchestration of both the physical and virtual traffic that form the UCT-C.
  • UCT-C Tap is the primary UCT-C module that collects the workload traffic, filters the traffic, and tunnels the filtered traffic directly to the tools or through the GigaVUE V Series Nodes. UCT-C Tap also sends the traffic policy statistics and heartbeats to UCT-C Controller. UCT-C Tap must run as a privileged pod.

    Note:   UCT-C uses eBPF (extended Berkeley Packet Filter) to tap traffic from user pods. eBPF runs on the Linux kernel and requires privileged pod permission in Kubernetes. UCT-C Tap pods require SYS_ADMIN and NET_ADMIN privileges to attach eBPF Hooks, run commands in other namespaces, and run low level networking commands.

  • UCT-C Controller is the management component of UCT-C that controls and communicates with UCT-C Tap. UCT-C Controller collects the data from UCT-C Taps and sends the collected statistics and heartbeats to GigaVUE-FM.