Implement logic to count traffic filtered by each Flow Spec rule for efficient withdrawal
complete
F
FastNetMon
updated the status to
complete
F
FastNetMon
Done, will be released in 2.0.385
Flow Spec per rule traffic drop monitoring
Starting from v2.0.385 you can monitor amount of traffic dropped by each Flow Spec rule this way:
sudo fcli show flowspec_drop_counters_v4 UUID
Example output:
dropped_in_bytes 0
dropped_in_packets 0
dropped_out_bytes 0
dropped_out_packets 0
fragmented_in_bytes 0
fragmented_in_packets 0
fragmented_out_bytes 0
fragmented_out_packets 0
icmp_in_bytes 0
icmp_in_packets 0
icmp_out_bytes 0
icmp_out_packets 0
in_bytes 11396733
in_flows 0
in_packets 12523
out_bytes 0
out_flows 0
out_packets 0
tcp_in_bytes 0
tcp_in_packets 0
tcp_out_bytes 0
tcp_out_packets 0
tcp_syn_in_bytes 0
tcp_syn_in_packets 0
tcp_syn_out_bytes 0
tcp_syn_out_packets 0
udp_in_bytes 11396733
udp_in_packets 12523
udp_out_bytes 0
udp_out_packets 0
And
Flow Spec per IP traffic drop monitoring
Starting from v2.0.385 you can get total amount of traffic bandwidth filtered by all Flow Spec rules for particular IP address:
sudo fcli show flowspec_host_drop_counters_v4 1.2.3.4
Example output:
dropped_in_bytes 0
dropped_in_packets 0
dropped_out_bytes 0
dropped_out_packets 0
fragmented_in_bytes 0
fragmented_in_packets 0
fragmented_out_bytes 0
fragmented_out_packets 0
icmp_in_bytes 0
icmp_in_packets 0
icmp_out_bytes 0
icmp_out_packets 0
in_bytes 0
in_flows 0
in_packets 0
out_bytes 4463256
out_flows 0
out_packets 4793
tcp_in_bytes 0
tcp_in_packets 0
tcp_out_bytes 0
tcp_out_packets 0
tcp_syn_in_bytes 0
tcp_syn_in_packets 0
tcp_syn_out_bytes 0
tcp_syn_out_packets 0
udp_in_bytes 0
udp_in_packets 0
udp_out_bytes 4463256
udp_out_packets 4793