Skip to content
This repository was archived by the owner on Jun 17, 2023. It is now read-only.

Commit 9412e2e

Browse files
sergeymakinensergeymakinen
committed
Add all IKE SA labels to child SAs
1 parent 843c632 commit 9412e2e

File tree

4 files changed

+42
-37
lines changed

4 files changed

+42
-37
lines changed

‎README.md‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -31,12 +31,12 @@ make
3131
| ipsec_offline_pool_ips | Number of leases offline. | name, address
3232
| ipsec_ike_sa_state | IKE SA state. Created: 0, connecting: 1, established: 2, passive: 3, rekeying: 4, rekeyed: 5, deleting: 6, destroying: 7. | name, uid, version, local_host, local_id, remote_host, remote_id, remote_identity, vips
3333
| ipsec_ike_sa_established_seconds | Number of seconds since the IKE SA has been established. | name, uid, version, local_host, local_id, remote_host, remote_id, remote_identity, vips
34-
| ipsec_child_sa_state | Child SA state. Created: 0, routed: 1, installing: 2, installed: 3, updating: 4, rekeying: 5, rekeyed: 6, retrying: 7, deleting: 8, deleted: 9, destroying: 10. | ike_sa_name, ike_sa_uid, name, uid, reqid, mode, protocol, local_ts, remote_ts
35-
| ipsec_child_sa_bytes_in | Number of input bytes processed. | ike_sa_name, ike_sa_uid, name, uid, reqid, mode, protocol, local_ts, remote_ts
36-
| ipsec_child_sa_packets_in | Number of input packets processed. | ike_sa_name, ike_sa_uid, name, uid, reqid, mode, protocol, local_ts, remote_ts
37-
| ipsec_child_sa_bytes_out | Number of output bytes processed. | ike_sa_name, ike_sa_uid, name, uid, reqid, mode, protocol, local_ts, remote_ts
38-
| ipsec_child_sa_packets_out | Number of output packets processed. | ike_sa_name, ike_sa_uid, name, uid, reqid, mode, protocol, local_ts, remote_ts
39-
| ipsec_child_sa_installed_seconds | Number of seconds since the child SA has been installed. | ike_sa_name, ike_sa_uid, name, uid, reqid, mode, protocol, local_ts, remote_ts
34+
| ipsec_child_sa_state | Child SA state. Created: 0, routed: 1, installing: 2, installed: 3, updating: 4, rekeying: 5, rekeyed: 6, retrying: 7, deleting: 8, deleted: 9, destroying: 10. | ike_sa_name, ike_sa_uid, ike_sa_version, ike_sa_local_host, ike_sa_local_id, ike_sa_remote_host, ike_sa_remote_id, ike_sa_remote_identity, ike_sa_vips, name, uid, reqid, mode, protocol, local_ts, remote_ts
35+
| ipsec_child_sa_bytes_in | Number of input bytes processed. | ike_sa_name, ike_sa_uid, ike_sa_version, ike_sa_local_host, ike_sa_local_id, ike_sa_remote_host, ike_sa_remote_id, ike_sa_remote_identity, ike_sa_vips, name, uid, reqid, mode, protocol, local_ts, remote_ts
36+
| ipsec_child_sa_packets_in | Number of input packets processed. | ike_sa_name, ike_sa_uid, ike_sa_version, ike_sa_local_host, ike_sa_local_id, ike_sa_remote_host, ike_sa_remote_id, ike_sa_remote_identity, ike_sa_vips, name, uid, reqid, mode, protocol, local_ts, remote_ts
37+
| ipsec_child_sa_bytes_out | Number of output bytes processed. | ike_sa_name, ike_sa_uid, ike_sa_version, ike_sa_local_host, ike_sa_local_id, ike_sa_remote_host, ike_sa_remote_id, ike_sa_remote_identity, ike_sa_vips, name, uid, reqid, mode, protocol, local_ts, remote_ts
38+
| ipsec_child_sa_packets_out | Number of output packets processed. | ike_sa_name, ike_sa_uid, ike_sa_version, ike_sa_local_host, ike_sa_local_id, ike_sa_remote_host, ike_sa_remote_id, ike_sa_remote_identity, ike_sa_vips, name, uid, reqid, mode, protocol, local_ts, remote_ts
39+
| ipsec_child_sa_installed_seconds | Number of seconds since the child SA has been installed. | ike_sa_name, ike_sa_uid, ike_sa_version, ike_sa_local_host, ike_sa_local_id, ike_sa_remote_host, ike_sa_remote_id, ike_sa_remote_identity, ike_sa_vips, name, uid, reqid, mode, protocol, local_ts, remote_ts
4040

4141
### Flags
4242

‎exporter/exporter.go‎

Lines changed: 15 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -62,6 +62,13 @@ var (
6262
childSALbls = []string{
6363
"ike_sa_name",
6464
"ike_sa_uid",
65+
"ike_sa_version",
66+
"ike_sa_local_host",
67+
"ike_sa_local_id",
68+
"ike_sa_remote_host",
69+
"ike_sa_remote_id",
70+
"ike_sa_remote_identity",
71+
"ike_sa_vips",
6572
"name",
6673
"uid",
6774
"mode",
@@ -451,24 +458,22 @@ func (e *Exporter) collect(m metrics, ch chan<- prometheus.Metric) {
451458
ch <- prometheus.MustNewConstMetric(e.establishedIKESA, prometheus.GaugeValue, float64(*ikeSA.Established), labelValues...)
452459
}
453460
for _, childSA := range ikeSA.ChildSAs {
454-
labelValues = []string{
455-
ikeSA.Name,
456-
strconv.FormatUint(uint64(ikeSA.UID), 10),
461+
childLabelValues := append(labelValues, []string{
457462
childSA.Name,
458463
strconv.FormatUint(uint64(childSA.UID), 10),
459464
childSA.Mode,
460465
childSA.Protocol,
461466
strconv.FormatUint(uint64(childSA.ReqID), 10),
462467
strings.Join(childSA.LocalTS, ", "),
463468
strings.Join(childSA.RemoteTS, ", "),
464-
}
465-
ch <- prometheus.MustNewConstMetric(e.childSAState, prometheus.GaugeValue, childSAStates[childSA.State], labelValues...)
466-
ch <- prometheus.MustNewConstMetric(e.childSABytesIn, prometheus.GaugeValue, float64(childSA.InBytes), labelValues...)
467-
ch <- prometheus.MustNewConstMetric(e.childSAPacketsIn, prometheus.GaugeValue, float64(childSA.InPackets), labelValues...)
468-
ch <- prometheus.MustNewConstMetric(e.childSABytesOut, prometheus.GaugeValue, float64(childSA.OutBytes), labelValues...)
469-
ch <- prometheus.MustNewConstMetric(e.childSAPacketsOut, prometheus.GaugeValue, float64(childSA.OutPackets), labelValues...)
469+
}...)
470+
ch <- prometheus.MustNewConstMetric(e.childSAState, prometheus.GaugeValue, childSAStates[childSA.State], childLabelValues...)
471+
ch <- prometheus.MustNewConstMetric(e.childSABytesIn, prometheus.GaugeValue, float64(childSA.InBytes), childLabelValues...)
472+
ch <- prometheus.MustNewConstMetric(e.childSAPacketsIn, prometheus.GaugeValue, float64(childSA.InPackets), childLabelValues...)
473+
ch <- prometheus.MustNewConstMetric(e.childSABytesOut, prometheus.GaugeValue, float64(childSA.OutBytes), childLabelValues...)
474+
ch <- prometheus.MustNewConstMetric(e.childSAPacketsOut, prometheus.GaugeValue, float64(childSA.OutPackets), childLabelValues...)
470475
if childSA.Installed != nil {
471-
ch <- prometheus.MustNewConstMetric(e.childSAInstalled, prometheus.GaugeValue, float64(*childSA.Installed), labelValues...)
476+
ch <- prometheus.MustNewConstMetric(e.childSAInstalled, prometheus.GaugeValue, float64(*childSA.Installed), childLabelValues...)
472477
}
473478
}
474479
}

‎exporter/testdata/metrics-1.txt‎

Lines changed: 16 additions & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -3,32 +3,32 @@
33
ipsec_active_workers 10
44
# HELP ipsec_child_sa_bytes_in Number of input bytes processed.
55
# TYPE ipsec_child_sa_bytes_in gauge
6-
ipsec_child_sa_bytes_in{ike_sa_name="named-1",ike_sa_uid="1",local_ts="192.168.0.0/24, 192.168.1.0/24",mode="TUNNEL",name="named",protocol="AH",remote_ts="192.168.2.0/24, 192.168.3.0/24",reqid="4",uid="3"} 123
7-
ipsec_child_sa_bytes_in{ike_sa_name="named-1",ike_sa_uid="1",local_ts="192.168.0.0/24, 192.168.1.0/24",mode="TUNNEL",name="named",protocol="AH",remote_ts="192.168.2.0/24, 192.168.3.0/24",reqid="5",uid="4"} 124
8-
ipsec_child_sa_bytes_in{ike_sa_name="named-2",ike_sa_uid="2",local_ts="192.168.0.0/24, 192.168.1.0/24",mode="TUNNEL",name="named",protocol="AH",remote_ts="192.168.2.0/24, 192.168.3.0/24",reqid="6",uid="5"} 125
6+
ipsec_child_sa_bytes_in{ike_sa_local_host="10.0.2.1",ike_sa_local_id="local",ike_sa_name="named-1",ike_sa_remote_host="10.0.3.1",ike_sa_remote_id="remote",ike_sa_remote_identity="xauth",ike_sa_uid="1",ike_sa_version="1",ike_sa_vips="192.168.0.1, 192.168.0.2",local_ts="192.168.0.0/24, 192.168.1.0/24",mode="TUNNEL",name="named",protocol="AH",remote_ts="192.168.2.0/24, 192.168.3.0/24",reqid="4",uid="3"} 123
7+
ipsec_child_sa_bytes_in{ike_sa_local_host="10.0.2.1",ike_sa_local_id="local",ike_sa_name="named-1",ike_sa_remote_host="10.0.3.1",ike_sa_remote_id="remote",ike_sa_remote_identity="xauth",ike_sa_uid="1",ike_sa_version="1",ike_sa_vips="192.168.0.1, 192.168.0.2",local_ts="192.168.0.0/24, 192.168.1.0/24",mode="TUNNEL",name="named",protocol="AH",remote_ts="192.168.2.0/24, 192.168.3.0/24",reqid="5",uid="4"} 124
8+
ipsec_child_sa_bytes_in{ike_sa_local_host="10.0.2.2",ike_sa_local_id="foo",ike_sa_name="named-2",ike_sa_remote_host="10.0.3.2",ike_sa_remote_id="bar",ike_sa_remote_identity="",ike_sa_uid="2",ike_sa_version="2",ike_sa_vips="",local_ts="192.168.0.0/24, 192.168.1.0/24",mode="TUNNEL",name="named",protocol="AH",remote_ts="192.168.2.0/24, 192.168.3.0/24",reqid="6",uid="5"} 125
99
# HELP ipsec_child_sa_bytes_out Number of output bytes processed.
1010
# TYPE ipsec_child_sa_bytes_out gauge
11-
ipsec_child_sa_bytes_out{ike_sa_name="named-1",ike_sa_uid="1",local_ts="192.168.0.0/24, 192.168.1.0/24",mode="TUNNEL",name="named",protocol="AH",remote_ts="192.168.2.0/24, 192.168.3.0/24",reqid="4",uid="3"} 789
12-
ipsec_child_sa_bytes_out{ike_sa_name="named-1",ike_sa_uid="1",local_ts="192.168.0.0/24, 192.168.1.0/24",mode="TUNNEL",name="named",protocol="AH",remote_ts="192.168.2.0/24, 192.168.3.0/24",reqid="5",uid="4"} 790
13-
ipsec_child_sa_bytes_out{ike_sa_name="named-2",ike_sa_uid="2",local_ts="192.168.0.0/24, 192.168.1.0/24",mode="TUNNEL",name="named",protocol="AH",remote_ts="192.168.2.0/24, 192.168.3.0/24",reqid="6",uid="5"} 791
11+
ipsec_child_sa_bytes_out{ike_sa_local_host="10.0.2.1",ike_sa_local_id="local",ike_sa_name="named-1",ike_sa_remote_host="10.0.3.1",ike_sa_remote_id="remote",ike_sa_remote_identity="xauth",ike_sa_uid="1",ike_sa_version="1",ike_sa_vips="192.168.0.1, 192.168.0.2",local_ts="192.168.0.0/24, 192.168.1.0/24",mode="TUNNEL",name="named",protocol="AH",remote_ts="192.168.2.0/24, 192.168.3.0/24",reqid="4",uid="3"} 789
12+
ipsec_child_sa_bytes_out{ike_sa_local_host="10.0.2.1",ike_sa_local_id="local",ike_sa_name="named-1",ike_sa_remote_host="10.0.3.1",ike_sa_remote_id="remote",ike_sa_remote_identity="xauth",ike_sa_uid="1",ike_sa_version="1",ike_sa_vips="192.168.0.1, 192.168.0.2",local_ts="192.168.0.0/24, 192.168.1.0/24",mode="TUNNEL",name="named",protocol="AH",remote_ts="192.168.2.0/24, 192.168.3.0/24",reqid="5",uid="4"} 790
13+
ipsec_child_sa_bytes_out{ike_sa_local_host="10.0.2.2",ike_sa_local_id="foo",ike_sa_name="named-2",ike_sa_remote_host="10.0.3.2",ike_sa_remote_id="bar",ike_sa_remote_identity="",ike_sa_uid="2",ike_sa_version="2",ike_sa_vips="",local_ts="192.168.0.0/24, 192.168.1.0/24",mode="TUNNEL",name="named",protocol="AH",remote_ts="192.168.2.0/24, 192.168.3.0/24",reqid="6",uid="5"} 791
1414
# HELP ipsec_child_sa_installed_seconds Number of seconds since the child SA has been installed.
1515
# TYPE ipsec_child_sa_installed_seconds gauge
16-
ipsec_child_sa_installed_seconds{ike_sa_name="named-1",ike_sa_uid="1",local_ts="192.168.0.0/24, 192.168.1.0/24",mode="TUNNEL",name="named",protocol="AH",remote_ts="192.168.2.0/24, 192.168.3.0/24",reqid="5",uid="4"} 123
16+
ipsec_child_sa_installed_seconds{ike_sa_local_host="10.0.2.1",ike_sa_local_id="local",ike_sa_name="named-1",ike_sa_remote_host="10.0.3.1",ike_sa_remote_id="remote",ike_sa_remote_identity="xauth",ike_sa_uid="1",ike_sa_version="1",ike_sa_vips="192.168.0.1, 192.168.0.2",local_ts="192.168.0.0/24, 192.168.1.0/24",mode="TUNNEL",name="named",protocol="AH",remote_ts="192.168.2.0/24, 192.168.3.0/24",reqid="5",uid="4"} 123
1717
# HELP ipsec_child_sa_packets_in Number of input packets processed.
1818
# TYPE ipsec_child_sa_packets_in gauge
19-
ipsec_child_sa_packets_in{ike_sa_name="named-1",ike_sa_uid="1",local_ts="192.168.0.0/24, 192.168.1.0/24",mode="TUNNEL",name="named",protocol="AH",remote_ts="192.168.2.0/24, 192.168.3.0/24",reqid="4",uid="3"} 456
20-
ipsec_child_sa_packets_in{ike_sa_name="named-1",ike_sa_uid="1",local_ts="192.168.0.0/24, 192.168.1.0/24",mode="TUNNEL",name="named",protocol="AH",remote_ts="192.168.2.0/24, 192.168.3.0/24",reqid="5",uid="4"} 457
21-
ipsec_child_sa_packets_in{ike_sa_name="named-2",ike_sa_uid="2",local_ts="192.168.0.0/24, 192.168.1.0/24",mode="TUNNEL",name="named",protocol="AH",remote_ts="192.168.2.0/24, 192.168.3.0/24",reqid="6",uid="5"} 458
19+
ipsec_child_sa_packets_in{ike_sa_local_host="10.0.2.1",ike_sa_local_id="local",ike_sa_name="named-1",ike_sa_remote_host="10.0.3.1",ike_sa_remote_id="remote",ike_sa_remote_identity="xauth",ike_sa_uid="1",ike_sa_version="1",ike_sa_vips="192.168.0.1, 192.168.0.2",local_ts="192.168.0.0/24, 192.168.1.0/24",mode="TUNNEL",name="named",protocol="AH",remote_ts="192.168.2.0/24, 192.168.3.0/24",reqid="4",uid="3"} 456
20+
ipsec_child_sa_packets_in{ike_sa_local_host="10.0.2.1",ike_sa_local_id="local",ike_sa_name="named-1",ike_sa_remote_host="10.0.3.1",ike_sa_remote_id="remote",ike_sa_remote_identity="xauth",ike_sa_uid="1",ike_sa_version="1",ike_sa_vips="192.168.0.1, 192.168.0.2",local_ts="192.168.0.0/24, 192.168.1.0/24",mode="TUNNEL",name="named",protocol="AH",remote_ts="192.168.2.0/24, 192.168.3.0/24",reqid="5",uid="4"} 457
21+
ipsec_child_sa_packets_in{ike_sa_local_host="10.0.2.2",ike_sa_local_id="foo",ike_sa_name="named-2",ike_sa_remote_host="10.0.3.2",ike_sa_remote_id="bar",ike_sa_remote_identity="",ike_sa_uid="2",ike_sa_version="2",ike_sa_vips="",local_ts="192.168.0.0/24, 192.168.1.0/24",mode="TUNNEL",name="named",protocol="AH",remote_ts="192.168.2.0/24, 192.168.3.0/24",reqid="6",uid="5"} 458
2222
# HELP ipsec_child_sa_packets_out Number of output packets processed.
2323
# TYPE ipsec_child_sa_packets_out gauge
24-
ipsec_child_sa_packets_out{ike_sa_name="named-1",ike_sa_uid="1",local_ts="192.168.0.0/24, 192.168.1.0/24",mode="TUNNEL",name="named",protocol="AH",remote_ts="192.168.2.0/24, 192.168.3.0/24",reqid="4",uid="3"} 901
25-
ipsec_child_sa_packets_out{ike_sa_name="named-1",ike_sa_uid="1",local_ts="192.168.0.0/24, 192.168.1.0/24",mode="TUNNEL",name="named",protocol="AH",remote_ts="192.168.2.0/24, 192.168.3.0/24",reqid="5",uid="4"} 902
26-
ipsec_child_sa_packets_out{ike_sa_name="named-2",ike_sa_uid="2",local_ts="192.168.0.0/24, 192.168.1.0/24",mode="TUNNEL",name="named",protocol="AH",remote_ts="192.168.2.0/24, 192.168.3.0/24",reqid="6",uid="5"} 903
24+
ipsec_child_sa_packets_out{ike_sa_local_host="10.0.2.1",ike_sa_local_id="local",ike_sa_name="named-1",ike_sa_remote_host="10.0.3.1",ike_sa_remote_id="remote",ike_sa_remote_identity="xauth",ike_sa_uid="1",ike_sa_version="1",ike_sa_vips="192.168.0.1, 192.168.0.2",local_ts="192.168.0.0/24, 192.168.1.0/24",mode="TUNNEL",name="named",protocol="AH",remote_ts="192.168.2.0/24, 192.168.3.0/24",reqid="4",uid="3"} 901
25+
ipsec_child_sa_packets_out{ike_sa_local_host="10.0.2.1",ike_sa_local_id="local",ike_sa_name="named-1",ike_sa_remote_host="10.0.3.1",ike_sa_remote_id="remote",ike_sa_remote_identity="xauth",ike_sa_uid="1",ike_sa_version="1",ike_sa_vips="192.168.0.1, 192.168.0.2",local_ts="192.168.0.0/24, 192.168.1.0/24",mode="TUNNEL",name="named",protocol="AH",remote_ts="192.168.2.0/24, 192.168.3.0/24",reqid="5",uid="4"} 902
26+
ipsec_child_sa_packets_out{ike_sa_local_host="10.0.2.2",ike_sa_local_id="foo",ike_sa_name="named-2",ike_sa_remote_host="10.0.3.2",ike_sa_remote_id="bar",ike_sa_remote_identity="",ike_sa_uid="2",ike_sa_version="2",ike_sa_vips="",local_ts="192.168.0.0/24, 192.168.1.0/24",mode="TUNNEL",name="named",protocol="AH",remote_ts="192.168.2.0/24, 192.168.3.0/24",reqid="6",uid="5"} 903
2727
# HELP ipsec_child_sa_state Child SA state.
2828
# TYPE ipsec_child_sa_state gauge
29-
ipsec_child_sa_state{ike_sa_name="named-1",ike_sa_uid="1",local_ts="192.168.0.0/24, 192.168.1.0/24",mode="TUNNEL",name="named",protocol="AH",remote_ts="192.168.2.0/24, 192.168.3.0/24",reqid="4",uid="3"} 3
30-
ipsec_child_sa_state{ike_sa_name="named-1",ike_sa_uid="1",local_ts="192.168.0.0/24, 192.168.1.0/24",mode="TUNNEL",name="named",protocol="AH",remote_ts="192.168.2.0/24, 192.168.3.0/24",reqid="5",uid="4"} 3
31-
ipsec_child_sa_state{ike_sa_name="named-2",ike_sa_uid="2",local_ts="192.168.0.0/24, 192.168.1.0/24",mode="TUNNEL",name="named",protocol="AH",remote_ts="192.168.2.0/24, 192.168.3.0/24",reqid="6",uid="5"} 3
29+
ipsec_child_sa_state{ike_sa_local_host="10.0.2.1",ike_sa_local_id="local",ike_sa_name="named-1",ike_sa_remote_host="10.0.3.1",ike_sa_remote_id="remote",ike_sa_remote_identity="xauth",ike_sa_uid="1",ike_sa_version="1",ike_sa_vips="192.168.0.1, 192.168.0.2",local_ts="192.168.0.0/24, 192.168.1.0/24",mode="TUNNEL",name="named",protocol="AH",remote_ts="192.168.2.0/24, 192.168.3.0/24",reqid="4",uid="3"} 3
30+
ipsec_child_sa_state{ike_sa_local_host="10.0.2.1",ike_sa_local_id="local",ike_sa_name="named-1",ike_sa_remote_host="10.0.3.1",ike_sa_remote_id="remote",ike_sa_remote_identity="xauth",ike_sa_uid="1",ike_sa_version="1",ike_sa_vips="192.168.0.1, 192.168.0.2",local_ts="192.168.0.0/24, 192.168.1.0/24",mode="TUNNEL",name="named",protocol="AH",remote_ts="192.168.2.0/24, 192.168.3.0/24",reqid="5",uid="4"} 3
31+
ipsec_child_sa_state{ike_sa_local_host="10.0.2.2",ike_sa_local_id="foo",ike_sa_name="named-2",ike_sa_remote_host="10.0.3.2",ike_sa_remote_id="bar",ike_sa_remote_identity="",ike_sa_uid="2",ike_sa_version="2",ike_sa_vips="",local_ts="192.168.0.0/24, 192.168.1.0/24",mode="TUNNEL",name="named",protocol="AH",remote_ts="192.168.2.0/24, 192.168.3.0/24",reqid="6",uid="5"} 3
3232
# HELP ipsec_half_open_ike_sas Number of IKE SAs in half-open state.
3333
# TYPE ipsec_half_open_ike_sas gauge
3434
ipsec_half_open_ike_sas 5

‎exporter/testdata/metrics-2.txt‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -1,18 +1,18 @@
11
# HELP ipsec_child_sa_bytes_in Number of input bytes processed.
22
# TYPE ipsec_child_sa_bytes_in gauge
3-
ipsec_child_sa_bytes_in{ike_sa_name="host-host",ike_sa_uid="1",local_ts="172.31.0.1/32",mode="TRANSPORT",name="host-host",protocol="AH",remote_ts="172.31.0.2/32",reqid="1",uid="1"} 64
3+
ipsec_child_sa_bytes_in{ike_sa_local_host="172.31.0.1",ike_sa_local_id="moon",ike_sa_name="host-host",ike_sa_remote_host="172.31.0.2",ike_sa_remote_id="sun",ike_sa_remote_identity="",ike_sa_uid="1",ike_sa_version="2",ike_sa_vips="",local_ts="172.31.0.1/32",mode="TRANSPORT",name="host-host",protocol="AH",remote_ts="172.31.0.2/32",reqid="1",uid="1"} 64
44
# HELP ipsec_child_sa_bytes_out Number of output bytes processed.
55
# TYPE ipsec_child_sa_bytes_out gauge
6-
ipsec_child_sa_bytes_out{ike_sa_name="host-host",ike_sa_uid="1",local_ts="172.31.0.1/32",mode="TRANSPORT",name="host-host",protocol="AH",remote_ts="172.31.0.2/32",reqid="1",uid="1"} 64
6+
ipsec_child_sa_bytes_out{ike_sa_local_host="172.31.0.1",ike_sa_local_id="moon",ike_sa_name="host-host",ike_sa_remote_host="172.31.0.2",ike_sa_remote_id="sun",ike_sa_remote_identity="",ike_sa_uid="1",ike_sa_version="2",ike_sa_vips="",local_ts="172.31.0.1/32",mode="TRANSPORT",name="host-host",protocol="AH",remote_ts="172.31.0.2/32",reqid="1",uid="1"} 64
77
# HELP ipsec_child_sa_packets_in Number of input packets processed.
88
# TYPE ipsec_child_sa_packets_in gauge
9-
ipsec_child_sa_packets_in{ike_sa_name="host-host",ike_sa_uid="1",local_ts="172.31.0.1/32",mode="TRANSPORT",name="host-host",protocol="AH",remote_ts="172.31.0.2/32",reqid="1",uid="1"} 1
9+
ipsec_child_sa_packets_in{ike_sa_local_host="172.31.0.1",ike_sa_local_id="moon",ike_sa_name="host-host",ike_sa_remote_host="172.31.0.2",ike_sa_remote_id="sun",ike_sa_remote_identity="",ike_sa_uid="1",ike_sa_version="2",ike_sa_vips="",local_ts="172.31.0.1/32",mode="TRANSPORT",name="host-host",protocol="AH",remote_ts="172.31.0.2/32",reqid="1",uid="1"} 1
1010
# HELP ipsec_child_sa_packets_out Number of output packets processed.
1111
# TYPE ipsec_child_sa_packets_out gauge
12-
ipsec_child_sa_packets_out{ike_sa_name="host-host",ike_sa_uid="1",local_ts="172.31.0.1/32",mode="TRANSPORT",name="host-host",protocol="AH",remote_ts="172.31.0.2/32",reqid="1",uid="1"} 1
12+
ipsec_child_sa_packets_out{ike_sa_local_host="172.31.0.1",ike_sa_local_id="moon",ike_sa_name="host-host",ike_sa_remote_host="172.31.0.2",ike_sa_remote_id="sun",ike_sa_remote_identity="",ike_sa_uid="1",ike_sa_version="2",ike_sa_vips="",local_ts="172.31.0.1/32",mode="TRANSPORT",name="host-host",protocol="AH",remote_ts="172.31.0.2/32",reqid="1",uid="1"} 1
1313
# HELP ipsec_child_sa_state Child SA state.
1414
# TYPE ipsec_child_sa_state gauge
15-
ipsec_child_sa_state{ike_sa_name="host-host",ike_sa_uid="1",local_ts="172.31.0.1/32",mode="TRANSPORT",name="host-host",protocol="AH",remote_ts="172.31.0.2/32",reqid="1",uid="1"} 3
15+
ipsec_child_sa_state{ike_sa_local_host="172.31.0.1",ike_sa_local_id="moon",ike_sa_name="host-host",ike_sa_remote_host="172.31.0.2",ike_sa_remote_id="sun",ike_sa_remote_identity="",ike_sa_uid="1",ike_sa_version="2",ike_sa_vips="",local_ts="172.31.0.1/32",mode="TRANSPORT",name="host-host",protocol="AH",remote_ts="172.31.0.2/32",reqid="1",uid="1"} 3
1616
# HELP ipsec_half_open_ike_sas Number of IKE SAs in half-open state.
1717
# TYPE ipsec_half_open_ike_sas gauge
1818
ipsec_half_open_ike_sas 0

0 commit comments

Comments
 (0)