Prometheus exporter for strongSwan IPsec
10K+
The IPSec Prometheus exporter subscribes to the strongSwan via Vici API and exposes Security Associations (SAs) metrics. Optionally X509 certificate and connection configuration metrics can be turned on.
Collected metrics (together with application metrics) are exposed on /metrics endpoint. Prometheus target is then configured with this endpoint and port e.g. http://localhost:8079/metrics.
IPSec Prometheus exporter is configured via command-line arguments. If not provided, the default values are used.
If the default value match with your choice you can omit it.
Options and default values:
--server-port=8079 Application listen port where the collected metrics are available
--server-host="" Application listen host where the collected metrics are available (empty for all hosts)
--log-level=info Logging level (debug, info, warn, error)
--vici-network=tcp Vici network scheme (tcp, udp, unix)
--vici-address=localhost:4502 IP address or hostname with a port or unix socket path
IPv6 is supported. Use address in format of "[fd12:3456:789a::1]:4502"
--enable-cert-metrics=false Enable collecting of X509 certificate metrics (true, false)
--enable-conn-metrics=false Enable collecting of connection configuration metrics (true, false)
| Metric | Value | Description |
|---|---|---|
| strongswan_*_status | 0 | The tunnel is installed and is up and running. |
| strongswan_*_status | 1 | The connection is established. |
| strongswan_*_status | 2 | The tunnel or connection is down. |
| strongswan_*_status | 3 | The tunnel or connection status is not recognized. |
To build the binary run:
make build
Run the binary with optional arguments provided:
./ipsec-prometheus-exporter [--server-port=8079] [--server-host=""] [--log-level=info] [--vici-network=tcp] [--vici-address=localhost:4502] [--enable-cert-metrics=false] [--enable-conn-metrics=false]
Public docker image is available for multiple platforms: https://hub.docker.com/r/torilabs/ipsec-prometheus-exporter
docker run -it -p 8079:8079 --rm torilabs/ipsec-prometheus-exporter:latest --server-port=8079
Content type
Image
Digest
sha256:a804c0436…
Size
10.4 MB
Last updated
11 days ago
docker pull torilabs/ipsec-prometheus-exporter