Component to monitorTool
Gloo Mesh Core health
  • Gloo UI: View the configuration and status of Gloo custom resources, such as the Istio lifecycle manager. You can also view the health of the clusters that are registered with the Gloo management server.
  • Prometheus: Use the Prometheus expression browser to run PromQL queries to analyze and aggregate Gloo Mesh Core metrics. To view metrics that are collected by default, see Gloo management server metrics. To view the alerts that are automatically set up for you, see Alerts.
Ingress gateway
  • Gloo UI: View your gateway setup, and check out any Istio insights that the Gloo analyzer collected for your gateway. These insights can help determine the security posture of your setup, the gateway health, and production readiness. To monitor the traffic to your gateway, you can access the Gloo UI Graph.
  • Prometheus: The Gloo telemetry pipeline collects Istio metrics from the ingress gateway proxy and exposes those metrics so that the built-in Prometheus server can scrape them. To view the metrics that are collected by default, see Istio proxy metrics. You can access these metrics by running PromQL queries in the Prometheus expression browser. To find example queries that you can run, see Ingress gateway queries.
  • Jaeger: You can enable request tracing for the ingress gateway and add these traces to the Gloo telemetry pipeline so that they can be forwarded to the built-in or a custom Jaeger instance. For more information about how to set up tracing, and how to enable Jaeger, see Add Istio request traces.
  • Istio access logs: Leverage the default Envoy access log collector to record logs for the apps that send requests to the Istio ingress gateway. You can review these logs to troubleshoot issues as-needed, or scrape these logs to view them in your larger platform logging system.
Service mesh
  • Gloo UI: View your service mesh workloads and the Gloo resources that you applied to them, such as Gateway lifecycle managers. You can also check the Istio insights that the Gloo analyzer collected for your service mesh workloads. These insights can help determine the security posture of your workloads, their health, and production readiness. To monitor the traffic to your service mesh workloads, you can access the Gloo UI Graph.
  • Prometheus: The Gloo telemetry pipeline collects Istio metrics from the Istio-enabled workloads and exposes those metrics so that the built-in Prometheus server can scrape them. To view the metrics that are collected by default, see Istio proxy metrics. You can access these metrics by running PromQL queries in the Prometheus expression browser. To find example queries that you can run, see Service mesh workload queries.
  • Jaeger: You can enable request tracing for Istio-enabled workloads and add these traces to the Gloo telemetry pipeline so that they can be forwarded to the built-in or a custom Jaeger instance. For more information about how to set up tracing, and how to enable Jaeger, see Add Istio request traces.
  • Istio access logs: Leverage the default Envoy access log collector to record logs for the apps that send requests to Istio-enabled workloads in your service mesh. You can review these logs to troubleshoot issues as-needed, or scrape these logs to view them in your larger platform logging system.
Cilium agent and network communication
  • Gloo UI: View health information for the Cilium agent and Cilium network policies that you applied to your workloads. To monitor the traffic to your workloads, such the number of packets that were successfully routed to your app or dropped, you can access the Gloo UI Graph.
  • Prometheus: If your cluster uses the Cilium CNI image that is provided by Solo, a few Cilium metrics are collected by default and can be accessed by using the expression browser of the built-in Prometheus server. You can customize the Gloo telemetry pipeline and enable additional Cilium, Hubble, and eBPF-specific metrics that you can query in Prometheus. For more information, see Add Cilium metrics. To find example queries that you can run, see Cilium queries.
  • Cilium dashboard: Quickly view the health of the Cilium agent and Cilium endpoints that the agent monitors, memory and CPU consumption of eBPF maps, the number of system calls, and any network traffic that is accepted or rejected by Cilium network policies.
  • meshctl hubble observe command: If your cluster uses the Cilium CNI image that is provided by Solo, you can configure the Gloo telemetry pipeline to collect and expose Hubble network flows for Cilium workloads in your cluster. Then, you can use the meshctl hubble observe command to gain visibility into network and app protocol flows, such as individual TCP connections, DNS queries, or HTTP requests.