[strongSwan] Monitoring stronswan

[Michael Schwartzkopff]

Am 14.12.2017 um 11:49 schrieb Michael Stiller:
> Ah ok, 
>
> for that i enabled the vici plugin in strongswan and have a go program using  
> github.com/bronze1man/goStrongswanVici which implements a small http listening healthcheck program.
>
> Best regards,
>
> Michael


Sounds good. I will give it a try. Thanks

>
>> On 14. Dec 2017, at 11:43, Michael Schwartzkopff <ms at sys4.de> wrote:
>>
>> Am 14.12.2017 um 11:40 schrieb Michael Stiller:
>>> Hi.
>>>
>>> What i do is, that i have another strongswan setup on (another) monitoring machine.
>>>
>>> This one tries to connect to the vpn server periodically using a special "monitoring user / monitoring command”.
>>>
>>> After the connection succeeded i do a “curl” to an "ip address mirror” and compare it with the expected value (e.g. address of the vpn server)
>>>
>>> If not -> alarm.
>>>
>>> Best regards,
>>>
>>> Michael
>> Thanks for your answer. But that will not help in my case.
>>
>> Basically I am trying to set up a loadbalancer for a scalable VPN server
>> farm. The loadbalancer should detect, which backend VPN server is up and
>> which ist down.
>>
>> At the moment I try ike-scan to check the availability of my backend
>> servers.
>>
>> Michael.
>>
>>
>>>> On 14. Dec 2017, at 11:29, Michael Schwartzkopff <ms at sys4.de> wrote:
>>>>
>>>> Hi,
>>>>
>>>>
>>>> What is the best way to do a fault monitoring of a strongswan server? In
>>>> the first place, my monitoring service should check if the server is
>>>> able to offer the VPN service, which means i.e. that UDP/500 will send a
>>>> correct answer if checked from the outside.
>>>>
>>>>
>>>> Any ideas?
>>>>
>>>>
>>>> Mit freundlichen Grüßen,
>>>>
>>>> -- 
>>>>
>>>> [*] sys4 AG
>>>>
>>>> https://sys4.de, +49 (89) 30 90 46 64
>>>> Schleißheimer Straße 26/MG,80333 München
>>>>
>>>> Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263
>>>> Vorstand: Patrick Ben Koetter, Marc Schiffbauer, Wolfgang Stief
>>>> Aufsichtsratsvorsitzender: Florian Kirstein
>>>>
>>>>
>> Mit freundlichen Grüßen,
>>
>> -- 
>>
>> [*] sys4 AG
>>
>> https://sys4.de, +49 (89) 30 90 46 64
>> Schleißheimer Straße 26/MG,80333 München
>>
>> Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263
>> Vorstand: Patrick Ben Koetter, Marc Schiffbauer, Wolfgang Stief
>> Aufsichtsratsvorsitzender: Florian Kirstein


Mit freundlichen Grüßen,

-- 

[*] sys4 AG
 
https://sys4.de, +49 (89) 30 90 46 64
Schleißheimer Straße 26/MG,80333 München
 
Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263
Vorstand: Patrick Ben Koetter, Marc Schiffbauer, Wolfgang Stief
Aufsichtsratsvorsitzender: Florian Kirstein


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 230 bytes
Desc: OpenPGP digital signature
URL: <http://lists.strongswan.org/pipermail/users/attachments/20171214/0bfd08b2/attachment.sig>