标题： CrossTrace：微服务分布式追踪中的跨线程和跨服务跨度关联高效方法 显示英文标题

标题： CrossTrace: Efficient Cross-Thread and Cross-Service Span Correlation in Distributed Tracing for Microservices

摘要： 分布式追踪已成为调试和排查现代基于微服务的应用程序的关键技术，使软件工程师能够检测性能瓶颈、识别故障并深入了解系统行为。 然而，由于需要广泛的代码改造，大规模应用程序中实现分布式追踪仍然具有挑战性。 为了减轻这一负担，零代码的代码改造解决方案，如基于eBPF的方案，已经出现，使得可以在不修改应用程序代码的情况下收集跨度数据。 尽管如此，跨度相关性，即建立跨度之间因果关系的过程，在零代码方法中仍然是一个关键挑战。 现有解决方案通常依赖线程亲和性，或者通过禁用内核完整性模式来 compromising 系统安全，或者由于复杂的推理算法而产生显著的计算开销。 本文提出了CrossTrace，一种实用且高效的分布式追踪解决方案，旨在支持无需修改源代码的微服务应用程序调试。 CrossTrace采用贪心算法，从延迟模式中推断服务内部的跨度关系，消除了对线程标识符的依赖。 对于服务间相关性， CrossTrace通过eBPF将跨度标识符嵌入TCP数据包头部，实现了安全高效的关联，不会 compromising 系统安全策略。 评估结果表明，CrossTrace可以在几秒钟内以超过90%的准确率关联数千个跨度，使其适用于生产部署，并对微服务可观测性和诊断具有重要价值。 显示英文摘要

摘要： Distributed tracing has become an essential technique for debugging and troubleshooting modern microservice-based applications, enabling software engineers to detect performance bottlenecks, identify failures, and gain insights into system behavior. However, implementing distributed tracing in large-scale applications remains challenging due to the need for extensive instrumentation. To reduce this burden, zero-code instrumentation solutions, such as those based on eBPF, have emerged, allowing span data to be collected without modifying application code. Despite this promise, span correlation, the process of establishing causal relationships between spans, remains a critical challenge in zero-code approaches. Existing solutions often rely on thread affinity, compromise system security by requiring the kernel integrity mode to be disabled, or incur significant computational overhead due to complex inference algorithms. This paper presents CrossTrace, a practical and efficient distributed tracing solution designed to support the debugging of microservice applications without requiring source code modifications. CrossTrace employs a greedy algorithm to infer intra-service span relationships from delay patterns, eliminating reliance on thread identifiers. For inter-service correlation, CrossTrace embeds span identifiers into TCP packet headers via eBPF, enabling secure and efficient correlation compromising system security policies. Evaluation results show that CrossTrace can correlate thousands of spans within seconds with over 90% accuracy, making it suitable for production deployment and valuable for microservice observability and diagnosis.