Hi HN, I'm Tyler Flint. Eight months ago we shared qtap here (https://news.ycombinator.com/item?id=43928118). Today we're releasing DevTools - a browser-based interface that gives you the Chrome Network tab experience for server-side HTTP/S traffic. The problem: You're debugging a production issue. An external dependency is returning errors. Your logs say "request failed" but not what was actually sent. Adding debug logging means redeploying and restarting services - which takes time and often changes the conditions you're trying to debug. tcpdump shows encrypted blobs. Setting up mitmproxy means certificates, restarts, reconfiguration. Our solution: install qtap, enable DevTools, open localhost:10001 in your browser. You're now watching live HTTP/S traffic - every request, response, header, body - in plaintext. No restarts, no certificates, no code changes. It works by hooking into TLS libraries (OpenSSL, Go crypto, Java SSL, Node.js, etc) via eBPF before encryption happens. Getting started:
If you're (rightly) skeptical of curl | sh, grab the binary directly or build from source. We get it.
Then open http://localhost:10001
Key features:
- Process/container attribution (which container made that call?)
- Real-time SSE streaming
- Copy any request as cURL
- Data never leaves your machineDevTools is free and open source (AGPL-3.0). GitHub: https://github.com/qpoint-io/qtap Docs: https://docs.qpoint.io/release-notes/devtools Questions we'd love feedback on: - What debugging scenarios would you use this for? - Any protocols beyond HTTP you'd want? (Postgres, MySQL, Redis coming soon) |