ipsec_exporter
ipsec_exporter copied to clipboard
dennisstritzke
Prometheus exporter for IPsec metrics.
IPsec Exporter 
Prometheus exporter for ipsec metrics, written in Go.
Functionality
The IPsec exporter is determining the state of the configured IPsec tunnels via the following procedure.
- Starting up the
ipsec.confis read. All tunnels configured via theconnkeyword are observed. - If the
/metricsendpoint is queried, the exporter callsipsec status <tunnel name>for each configured connection. The output is parsed.- If the output contains
ESTABLISHED, we assume that only the connection is up. - If the output contains
INSTALLED, we assume that the tunnel is up and running. - If the output contains
no match, we assume that the connection is down.
- If the output contains
Value Definition
| Metric | Value | Description |
|---|---|---|
| ipsec_status | 0 | The connection is established and tunnel is installed. The tunnel is up and running. |
| ipsec_status | 1 | The connection is established, but the tunnel is not up. |
| ipsec_status | 2 | The tunnel is down. |
| ipsec_status | 3 | The tunnel is in an unknown state. |
| ipsec_status | 4 | The tunnel is ignored. |
dennisstritzke