Skip to content

Instantly share code, notes, and snippets.

Created May 12, 2020
What would you like to do?
Detect half-open connections in Kubernetes
pods=$(kubectl get po -A -l -ojsonpath="{range .items[*]}{} {.metadata.namespace}{'\n'}{end}")
IFS=" "
while read name namespace; do
tcp=$(kubectl exec -n $namespace $name -c linkerd-proxy -- cat /proc/net/tcp)
close_wait=$(echo $tcp | awk 'BEGIN {cnt=0} $4==08 {cnt++} END {print cnt}')
fin_wait_2=$(echo $tcp | awk 'BEGIN {cnt=0} $4==05 {cnt++} END {print cnt}')
if [ "$close_wait" -gt "0" -o "$fin_wait_2" -gt "0" ]; then
echo "$name.$namespace has $close_wait sockets in CLOSE_WAIT and $fin_wait_2 sockets in FIN_WAIT_2"
echo "$name.$namespace is okay"
done <<< "$pods"
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment