Cilium v1.16 introduced support to forward drop events towards the kube-apiserver through v1.Events in order to provide better visibility into cluster networking behaviour to users (CFP, PR). The feature is enabled through Helm via hubble.dropEventEmitter or through the cilium-agent commandline flag --hubble-drop-events.

This issue can be used to collect feedback about the feature, the information it provides, and the scalability / performance impacts that it introduces.

Tasks

• Define beta graduation criteria
  • Review output format (For example, drop reasons)
  • Review ratelimiting/QPS behaviour and maximum event emit rates per node
  • Enable in scale tests and assess impact with varying traffic drop rates
  • Validate behaviour with DDoS-style drop pattern
• feedback improvements
  • consolidate event rate-limit / throttling flags, see this comment.
  • limit the number of policies shown in the message when --hubble-drop-events-extended is provided, see this comment.