Don't touch the code

Diting reads signals from the kernel, the wire and the runtime. No SDK, no restart, no code changes for observability.

One agent covers hosts, containers and Kubernetes.

agent
1
L7 protocol families
18
Kernel baseline
3.10+
Lines of code changed
0
Capture pathDiting

Host

ApplicationNo SDK
RuntimeGo / JVM / OpenSSL
KerneleBPF
NICL2 to L7

Diting Agent

Parsed locally
  • Protocol ID
  • Request correlation
  • Compress and ship
Application, runtime, kernel and NIC: all four are readable.

It reads the system itself

eBPF captures network and system calls; protocol parsing happens inside the agent. Database statements, cache commands, message queues, HTTP and gRPC are identified there.

  • No SDK, no agent jar
  • Optional TLS plaintext for Go and OpenSSL
  • Container identity detected, cgroup v1 and v2
  • Parsing stays local, payloads need not leave the host

Capture boundaries

01

No code changes

No SDK, no agent jar, no manual spans. Vendor software and untouchable systems included.

02

No in-app probe

Nothing is injected into the application process. No launch flags, no restart.

03

No public network

Install, upgrade, licensing and AI models ship in one bundle.

04

No platform swap

Old kernels, domestic distributions, Kubernetes and virtual machines side by side.

Support

KernelFrom 3.10; native eBPF on 4.18+, compatibility path on older kernels
DistributionsCentOS 7, Rocky 8, Ubuntu 20.04–26.04, Debian 12/13, openSUSE 15.6, openEuler 24.03, Kylin V10
ContainersDocker, containerd, Kubernetes; cgroup v1, v2 and hybrids
ProtocolsHTTP/1, HTTP/2, gRPC, Redis, Kafka, MQTT, DNS, TLS, MongoDB, RocketMQ, AMQP, Dubbo, MySQL, PostgreSQL, ClickHouse, ZooKeeper, S3, Oracle

Fits

  • Java, Go, Python, Node and other common runtimes
  • Vendor software nobody dares to modify
  • Production environments where restarts are not allowed

Doesn't fit

  • Strong-isolation runtimes such as gVisor or Kata
  • Hosts with no root access and no way to install an agent

Bring your system in

Tell us what you run: OS, kernel, public network or not, virtual machines or clusters. We will map the path in.