The diagram said the app talked to three things. The wire said eleven.
Before you migrate anything, you have to know what it actually talks to — not what the architecture diagram claims. We put eBPF on the egress path of a fleet of apps we were about to move, and the gap between the documentation and the network was the whole story.