Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Feature request: tls metrics from /proc/net/tls_stat #2290

Open
totallyunknown opened this issue Feb 13, 2022 · 2 comments · May be fixed by #2950
Open

Feature request: tls metrics from /proc/net/tls_stat #2290

totallyunknown opened this issue Feb 13, 2022 · 2 comments · May be fixed by #2950
Labels
enhancement

Comments

@totallyunknown
Copy link

Linux kernel with loaded tls module exposes the following per-namespace statistics (/proc/net/tls_stat):

  • TlsCurrTxSw, TlsCurrRxSw - number of TX and RX sessions currently installed where host handles cryptography
  • TlsCurrTxDevice, TlsCurrRxDevice - number of TX and RX sessions currently installed where NIC handles cryptography
  • TlsTxSw, TlsRxSw - number of TX and RX sessions opened with host cryptography
  • TlsTxDevice, TlsRxDevice - number of TX and RX sessions opened with NIC cryptography
  • TlsDecryptError - record decryption failed (e.g. due to incorrect authentication tag)
  • TlsDeviceRxResync - number of RX resyncs sent to NICs handling cryptography

https://www.kernel.org/doc/html/latest/networking/tls.html#statistics

If this gets accepted, I can provide a PR for this.
@SuperQ
Copy link
Member

SuperQ commented Feb 13, 2022 •
edited

Seems like a good feature to me. To start, we would want to add parsing of this file to the Prometheus procfs library.

https://github.com/prometheus/procfs

@mossblaser
Copy link

Update: The procfs side of this appears to have landed in master: prometheus/procfs@6d8714c

@defect defect linked a pull request Mar 8, 2024 that will close this issue
Open
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
enhancement
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

Add collector for Linux kTLS statss defect/node_exporter
3 participants
@mossblaser @SuperQ @totallyunknown