LogStratav1.0.0
Skip to Content
Background Paths
Background Paths
01 / DYNAMIC AUTOSCALING

Log-Driven Kubernetes scaling.

Interpret container stdout in real-time. Patch HPA bounds and block malicious ingress instantly, seconds before CPU capacity limits are breached.

Traditional CPU/memory-based autoscaling reacts too late. LogStrata tails access log event patterns directly from containerd sockets, triggering pod scale-up and IP rate-limiting policy adjustments within milliseconds of load shifts.

LOOP // STABLE
REPLICAS: 3/12
Kubernetes Podsreplicas: 3 / 12stdout log streamrate: 42 events/secLogStrata EngineStatus: ANALYSIS ACTIVEMetrics EngineLatency: 82msSecurity Analytics0 active threatsAutoscalerScale ratio: 1.0x (Idle)Cluster ScalingStatus: Synced
02 / THE CPU METRIC LAG

Traditional HPA reacts too late.

Kubernetes Horizontal Pod Autoscalers rely on metrics-server CPU/memory polling. During sudden load events, your containers will crash-loop before the system registers resource spikes.

Standard CPU Metrics Scaling

Metrics server averages CPU usage over 60-second windows. During flash-sale traffic spikes, request queues fill up instantly. Latency rises exponentially, causing database socket depletion and gateway timeouts before pods scale.

CPU UTILIZATION (AVG)100% OVERLOAD
❌ Connection timeouts (504 Gateway Timeout) detected.

LogStrata Dynamic Pre-emption

LogStrata parses individual HTTP access logs on the fly. By monitoring the exact throughput rate of checkout endpoints, the scaling trigger is fired immediately—allocating replicas before CPU metrics even begin to move.

PRE-EMPTIVE CAPACITY ROUTING9 REPLICAS PROVISIONED
✓ Latency stabilized at 120ms. Connection queue cleared.
03 / INGESTION TO ENFORCEMENT

How LogStrata Works.

A zero-overhead daemonset listens directly on the container socket, transforming raw stdout streams into instant scaling actions.

01

Tails Socket

DaemonSet tails container stdout files directly from /var/log/pods, completely bypassing the user network path.

02

Parses JSON

Extracts latency fields, response status, endpoints, and incoming client subnet IPs at sub-millisecond speeds.

03

Evaluates Rules

Matches extracted values against policy criteria (RPS ceilings, error percentages, rate limits, cooldown bounds).

04

API Patch

Triggers mutations on Kubernetes API servers to scale pods or update ingress rate-limiting rules.

04 / ARCHITECTURE CAPABILITIES

Core Features.

Observe and autoscale within a single control loop. Skip third-party metric collectors entirely.

High-Speed JSON ParserCPU Overhead: < 0.1%

Parse container stdout socket streams directly from containerd. Our high-performance extraction loop decodes JSON lines in micro-seconds, logging throughput metrics, request paths, response duration and query parameters.

// Ingestion Console Feed
stdout{ "time": "12:05:01", "duration": 48, "url": "/cart", "ip": "172.58.91.22" }
stdout{ "time": "12:05:02", "duration": 156, "url": "/checkout", "ip": "104.24.12.9" }
stderr{ "time": "12:05:03", "error": "db_timeout", "query": "SELECT * FROM inventory" }

Declarative PoliciesGitOps Ready

Configure autoscaling parameters through YAML Custom Resource Definitions (CRDs). Set custom metrics thresholds, scale boundaries, cooldown periods, and threat locks.

yaml-policy-spec.yaml
apiVersion: core.logstrata.io/v1alpha1
kind: LogAutoscalerPolicy
metadata:
  name: checkout-rules
spec:
  scaleTargetRef:
    name: commerce-frontend

Ingress FirewallAuto-Block

Protect workloads from malicious requests by blocking IPs at the ingress layer. LogStrata monitors fail counts and pattern repetitions, dynamically updating Nginx Ingress ConfigMaps to drop connections.

// Ingress Rate Limiting Firewall
12:06:10 [BLOCKED] IP: 185.220.101.42 (Reps: 120/min on /login)
✓ Ingress ConfigMap "nginx-blocked-ips" updated.

Predictive In-Memory Scaling< 50ms Decision

LogStrata analyzes in-memory logs asynchronously to identify traffic anomalies. Rather than waiting for metrics-server or Prometheus queries, the controller makes immediate decisions and propagates them to the Kubernetes endpoint, protecting downstream resources from queue overload.

// Real-time Event Correlation LoopRunning
Ingress Rate1,480 req/s
Anomaly IndexMedium (0.68)
Auto-ProvisionTargeted [+6]
05 / TELEMETRY DASHBOARD

Total Cluster Visibility.

Monitor ingress rates, autoscale transitions, and client blocklists inside a single unified dashboard interface.

minikube-cluster-context
RPS: 1,480/sBLOCKED: 42 IPsREPLICAS: 9/12
AUTOSCALER STATE
ACTIVE

Evaluator matched 1 active scaling target.

BLOCKED TRAFFIC
4.2%

42 rogue IPs blocked in the last hour.

AVG RESPONSE DURATION
120ms

stabilized from 450ms peak load.

// Scaling Decision Log
12:10:45.000[INFO] Ingress latency exceeded 400ms target limit on endpoint /checkout
12:10:45.080[WARN] Queue congestion detected. Scaler evaluating target rules...
12:10:45.150[EXEC] Patched API deployment/commerce-frontend: replicas scaled 3 ➔ 9
12:10:50.000[INFO] New pods running. Latency recovered to 120ms.
06 / CONTROL LOOP ENGINE

Inside the Control Loop.

A decoupled log controller analyzes multi-dimensional container stdout log patterns dynamically, applying feedback to the Kubernetes HPA scaling loop without adding request latency.

SYS TOPOLOGY LOOP // STABLE
RATE: 12.4 kb/sREPLICAS: 3/12
CLUSTER // WORKLOAD SURFACETELEMETRY // INGESTION & ANALYSIS EDGEMETRICS // STREAM OBSERVABILITYCONTROL PLANE // AUTOSCALE ENGINEFrontend Servicehealth: 100%API Servicehealth: 100%Worker Servicehealth: 100%Database (Postgres)Primary modeContainer Logsrate: 42 evts/sIngress Logsrate: 80 evts/sSecurity Eventsrate: 0 evt/sApplication Logsrate: 18 evts/sPattern ExtractRegex & JITLatency Detectp95 & p99 LimitsError Detect5xx Rate SpikesAnomaly DetectML Baseline DriftThreat DetectCVE & WAF ShieldThroughput140 requests/secError Rate0.02% (nominal)Latency (p95)82ms (nominal)SaturationQueue Depth: 12Decision Engine // Evaluate RulesStatus: Normal operationAutoscaler // Kube HPA PatchScale Factor: 1.0x (idle)Kubernetes API ServerStatus: 200 OK (Config active)Updated Replica Counts // FeedbackSystem state: HEALTHY
LOG INGESTION
2.84K
Real-time container stdout/stderr events/sec.
AUTOSCALE SYNC
0.85s
Log breach trigger to HPA mutation speed.
REGEX PARSE SPEED
12.4 GB/s
JIT pattern parsing extraction bandwidth.
THREAT MITIGATION
0 active events
Autonomous anomaly IP blocking filters.
07 / OPERATIONAL SCENARIOS

Real Use Cases.

checkout-scaling.yaml
# E-commerce Flash Sale Autoscaling Policy
apiVersion: core.logstrata.io/v1alpha1
kind: LogAutoscalerPolicy
metadata:
  name: frontend-scaling-rules
spec:
  scaleTargetRef:
    apiVersion: apps/v1
    kind: Deployment
    name: commerce-frontend
  metricSources:
    - type: ElasticSearchQuery
      elasticsearch:
        query: "status:200 AND path:/checkout"
        timeWindow: "30s"
        trigger:
          metricName: throughput_rps
          threshold: 450.0  # Scale up above 450 RPS
          scaleFactor: 1.5  # Increase scale bounds by 50%
  cooldownPeriod: "60s"
  minReplicas: 3
  maxReplicas: 25
08 / QUICK START

Get Up and Running.

Deploy the LogStrata controller using Helm, apply configurations, and start monitoring logs.

Terminal
$helm repo add logstrata https://helm.logstrata.io
"logstrata" has been added to your repositories
$helm install logstrata logstrata/logstrata --namespace logstrata-system --create-namespace
NAMESPACE: logstrata-system
STATUS: deployed
$kubectl apply -f logstrata-policy.yaml
logautoscalerpolicy.core.logstrata.io/frontend-scaling-rules created ✓
09 / SPECIFICATION REFERENCE

Documentation Preview.

Review standard Custom Resource Definitions (CRDs) and metric parameter schemas supported by the evaluator core.

CRD Group / ResourceDescriptionPrimary Config Parameters
LogAutoscalerPolicyDefines real-time pod replicas boundaries and triggering log criteria.minReplicas, maxReplicas, trigger.threshold
LogThreatPolicySpecifies rate limiting and host blocking rules based on log failure loops.threatMetrics.pattern, action.duration
IngressRateLimiterConfigures ConfigMap routing rules to enforce firewall blocks on client IPs.blocklistConfigMap, duration
Pricing Plans

Sized for clusters of any scale

Local testing is always free. Scale up to staging and multi-cluster production environments dynamically.

Developer

Ideal for local evaluation and minikube environments

Free
Up to 3 namespaces monitoring
Single containerd tailing daemon
Community support (GitHub)
Standard metrics analyzer
Most Popular

Standard

For small-to-medium clusters in staging and production

$49/month
Up to 15 namespaces monitoring
Mutations within < 500ms latency
Email and discord support
Ingress firewall integration
Declarative YAML threat policies

Enterprise

For mission-critical global scale multi-cluster operations

Custom
Unlimited namespaces & clusters
Sub-millisecond processing loop
24/7/365 phone & Slack SLA support
Custom regex pattern parsers
Dedicated integration engineering

Frequently Asked Questions

Everything you need to know about log-driven autoscaling, security loops, and container telemetry.

12 / DEPLOY LOGSTRATA

Take control of your cluster latency.

Switch scaling decisions from reactive resource consumption limits to predictive log-level insights. Deploy to minikube or cloud clusters in seconds.