Prometheus exporter for ipsec metrics, written in Go.
PROJECT DEPRECATED: This project is no longer maintained and patched for security updates. Repository will be archived soon.
Use https://github.com/torilabs/ipsec-prometheus-exporter instead.
The IPsec exporter is determining the state of the configured IPsec tunnels via the following procedure.
- Starting up the
ipsec.confis read. All tunnels configured via theconnkeyword are observed. - If the
/metricsendpoint is queried, the exporter callsipsec status <tunnel name>for each configured connection. The output is parsed.- If the output contains
ESTABLISHED, we assume that only the connection is up. - If the output contains
INSTALLED, we assume that the tunnel is up and running. - If the output contains
no match, we assume that the connection is down.
- If the output contains
| Metric | Value | Description |
|---|---|---|
| ipsec_status | 0 | The connection is established and tunnel is installed. The tunnel is up and running. |
| ipsec_status | 1 | The connection is established, but the tunnel is not up. |
| ipsec_status | 2 | The tunnel is down. |
| ipsec_status | 3 | The tunnel is in an unknown state. |
| ipsec_status | 4 | The tunnel is ignored. |