Network Intelligence for Kubernetes
--- * **Cluster-wide, real-time visibility into every packet, API call, and service interaction.** * Replay any moment in time. * Resolve incidents at the speed of LLMs. 100% on-premises.  --- ## Get Started ```bash helm repo add kubeshark https://helm.kubeshark.com helm install kubeshark kubeshark/kubeshark ``` Dashboard opens automatically. You're capturing traffic. **With AI** — connect your assistant and debug with natural language: ```bash brew install kubeshark claude mcp add kubeshark -- kubeshark mcp ``` > *"Why did checkout fail at 2:15 PM?"* > *"Which services have error rates above 1%?"* [MCP setup guide →](https://docs.kubeshark.com/en/mcp) --- ## Why Kubeshark - **Instant root cause** — trace requests across services, see exact errors - **Zero instrumentation** — no code changes, no SDKs, just deploy - **Full payload capture** — request/response bodies, headers, timing - **TLS decryption** — see encrypted traffic without managing keys - **AI-ready** — query traffic with natural language via MCP --- ### Traffic Analysis and API Dissection Capture and inspect every API call across your cluster—HTTP, gRPC, Redis, Kafka, DNS, and more. Request/response matching with full payloads, parsed according to protocol specifications. Headers, timing, and complete context. Zero instrumentation required.  [Learn more →](https://docs.kubeshark.com/en/v2/l7_api_dissection) ### L4/L7 Workload Map Visualize how your services communicate. See dependencies, traffic flow, and identify anomalies at a glance.  [Learn more →](https://docs.kubeshark.com/en/v2/service_map) ### AI-Powered Root Cause Analysis Resolve production issues in minutes instead of hours. Connect your AI assistant and investigate incidents using natural language. Build network-aware AI agents for forensics, monitoring, compliance, and security. > *"Why did checkout fail at 2:15 PM?"* > *"Which services have error rates above 1%?"* > *"Trace request abc123 through all services"* Works with Claude Code, Cursor, and any MCP-compatible AI. [MCP setup guide →](https://docs.kubeshark.com/en/mcp) ### Traffic Retention Retain every packet. Take snapshots. Export PCAP files. Replay any moment in time.  [Snapshots guide →](https://docs.kubeshark.com/en/v2/traffic_snapshots) --- ## Features | Feature | Description | |---------|-------------| | [**Raw Capture**](https://docs.kubeshark.com/en/v2/raw_capture) | Continuous cluster-wide packet capture with minimal overhead | | [**Traffic Snapshots**](https://docs.kubeshark.com/en/v2/traffic_snapshots) | Point-in-time snapshots, export as PCAP for Wireshark | | [**L7 API Dissection**](https://docs.kubeshark.com/en/v2/l7_api_dissection) | Request/response matching with full payloads and protocol parsing | | [**Protocol Support**](https://docs.kubeshark.com/en/protocols) | HTTP, gRPC, GraphQL, Redis, Kafka, DNS, and more | | [**TLS Decryption**](https://docs.kubeshark.com/en/encrypted_traffic) | eBPF-based decryption without key management | | [**AI-Powered Analysis**](https://docs.kubeshark.com/en/v2/ai_powered_analysis) | Query traffic with Claude, Cursor, or any MCP-compatible AI | | [**Display Filters**](https://docs.kubeshark.com/en/v2/kfl2) | Wireshark-inspired display filters for precise traffic analysis | | [**100% On-Premises**](https://docs.kubeshark.com/en/air_gapped) | Air-gapped support, no external dependencies | --- ## Install | Method | Command | |--------|---------| | Helm | `helm repo add kubeshark https://helm.kubeshark.com && helm install kubeshark kubeshark/kubeshark` | | Homebrew | `brew install kubeshark && kubeshark tap` | | Binary | [Download](https://github.com/kubeshark/kubeshark/releases/latest) | [Installation guide →](https://docs.kubeshark.com/en/install) --- ## Contributing We welcome contributions. See [CONTRIBUTING.md](CONTRIBUTING.md). ## License [Apache-2.0](LICENSE)