Skip to main content

2024.12.22 Release Note

路 6 min read

This release brings more observability, stability and diversity on Spider agents:

  • Remote logs access
  • Backoff on failed attachments
  • Local agents

It also restores UDP capture that was failing lately.

DNS over UDP capture

路 One min read

We had the need recently to capture DNS calls to try to get an idea why sometimes DNS resolving fails on Kube.
Except that Spider had a regression on UDP capture, and it was not any more possible to save UDP packets on the back office.

I fixed this and added a few quick features for DNS parsing.

Controller's improvements

路 3 min read

Here comes a new release of Spider Controller with a bunch of improvements:

  • Lists Gociphers & Sidecar Whisperers
  • Allows getting logs from Controller, Attachments, Sidecars & Gociphers
  • Provides Sidecar Whisperers to Gociphers to allow TLS deciphering on their captured data
  • When an Ephemeral Whisperer fails twice in 5 minutes, the Controller stops restarting it to avoid overloading the POD manifest

2024.11.23 Release Note

路 4 min read

November release comes with enhancements on TLS Deciphering, such as TLS 1.2 deciphering, various and bug fixes.

TLS deciphering improvements

路 2 min read

First release of TLS deciphering was 1 month ago, and many improvements have been done after these few weeks of run.

  • Observability of discovery phase has been enhanced and fixed to help understanding what is captured
  • TLS 1.2 deciphering has been added
  • Many UI and deciphering fixes

2024.10.20 Release Note

路 6 min read

October release comes with 1 major feature and various bug fixes:

  • Spider now captures TLS secrets live and deciphers TLS encrypted communications: HTTPS, MQTTS, secured DB connections...

TLS deciphering is available! 馃殌

路 8 min read

I am thrilled to announce a major milestone for Spider: TLS encrypted communication deciphering is now available! 馃殌

This release represents a significant leap forward in achieving comprehensive observability for all your communications.

I dreamed of making this possible, and here it is - after a lot of intricate engineering, it's finally a reality! 馃榾

Node.js upgrade

路 One min read

All 43 microservices and UIs have been upgraded to Node 20 and Alpine 3.20, with latest security fixes. 馃挭

Node.js Whisperers are deprecated

路 One min read

Since the introduction of new Whisperers agents in Go, these Gossipers have proven reliable, extremely stable and no known bugs is left pending.
They even offer a simpler setup with standalone executables.

Nodes.js Whisperers are thereby officially deprecated, and TLS deciphering has only been implemented in Gossipers.

Second parsing step has been removed

路 One min read

For years, Spider has been able to parse a second time TCP sessions

  • For which Packets, TCP sessions and Parsing log was saved in Elasticsearch
  • For which some Packets have been missing when parsing

I've decided to remove this feature as:

  • Most often Packets and Tcp sessions are not saved anymore
  • Streaming parsing quality is now excellent
  • It was one useless service flying around in the cluster

This parsing step has then been removed from the deployed cluster, the configuration and documentation!