An Online Probabilistic Distributed Tracing System
M. Toslali, S. Qasim, S. Parthasarathy, F. A. Oliveira, H. Huang, G. Stringhini, Z. Liu, A. K. Coskun
TL;DR
This work tackles the cost-utility tension in distributed tracing by introducing Astraea, an online probabilistic tracing system that uses Bayesian online learning and bandit-based sampling to identify and monitor only the spans most informative for diagnosing performance variations. By maintaining low-dimensional Beta beliefs per span and applying a percentile-based threshold with approximate Bayesian sampling, Astraea adaptively shifts instrumentation toward vital spans, achieving high diagnostic accuracy while dramatically reducing trace overhead. Empirical evaluation across three cloud applications and production traces shows Astraea localizes faults with about 92% top-5 accuracy using only ~25% of spans, and operates with sub-100 ms inference, indicating strong scalability and practicality for large production systems. The work demonstrates a concrete, online approach to automate instrumentation control, reducing overhead without sacrificing diagnostic power and offering actionable outputs like span utilities, rankings, and correlation tags to aid developers.
Abstract
Distributed tracing has become a fundamental tool for diagnosing performance issues in the cloud by recording causally ordered, end-to-end workflows of request executions. However, tracing in production workloads can introduce significant overheads due to the extensive instrumentation needed for identifying performance variations. This paper addresses the trade-off between the cost of tracing and the utility of the "spans" within that trace through Astraea, an online probabilistic distributed tracing system. Astraea is based on our technique that combines online Bayesian learning and multi-armed bandit frameworks. This formulation enables Astraea to effectively steer tracing towards the useful instrumentation needed for accurate performance diagnosis. Astraea localizes performance variations using only 10-28% of available instrumentation, markedly reducing tracing overhead, storage, compute costs, and trace analysis time.
