Netgate SG-1000 microFirewall

Author Topic: dpinger multiple targets - aka gwmond $2,500  (Read 1697 times)

0 Members and 1 Guest are viewing this topic.

Offline luckman212

  • Hero Member
  • *****
  • Posts: 726
  • Karma: +59/-0
    • View Profile
    • @luckman212 - github
dpinger multiple targets - aka gwmond $2,500
« on: January 10, 2017, 06:47:54 am »
To make things interesting I will commit to donate $2,500 US to this cause.
I know it's a lot of work, but I am hoping others will commit some $ to make this appealing.

Details of my idea below, copy 'n' paste from https://redmine.pfsense.org/issues/4354 :

Quote
I agree that the "right" way to handle this would be to have dpinger remain dumb (for lack of a better term) and simply report its latency stats dutifully. A new "gateway supervisor daemon" needs to be coded, that aggregates these stats and makes informed decisions based on some settings that don't currently exist in pfSense. This would be incredibly powerful.

One way I could envision this working is:

A new "Gateway Monitoring" page is created under Routing. The layout of this page would look something like the DynDNS page where you could add hosts line by line, and set Gateways, IPs and Descriptions for each.

We would define 0 or more hosts per gateway: If none are defined, monitoring for that gateway is effectively disabled. Defining just 1 host would be equivalent to the system we have currently. Defining 2 or more would enable the new advanced functionality. Each host added there would start a new instance of dpinger, adding monitoring + graphing for that host via the chosen gateway. These monitors in and of themselves would do NOTHING except log data.

The Routing > Gateway Groups page could then be changed so that some new popup choices are available for Trigger Level:
"ANY monitored host exhibits packet loss"
"ALL monitored hosts exhibit packet loss"
"ANY monitored host has high latency"
"ALL monitored hosts have high latency"
"ANY monitored host is completely down"
"ALL monitored hosts are completely down"
The "Gateway supervisor daemon" is the process that triggers pfSense scripts that mark gateways up/down based on the triggers set above and the aggregate stats for the individual dpinger instances.

These are back of napkin ideas but overall this seems like it would work.

Offline luckman212

  • Hero Member
  • *****
  • Posts: 726
  • Karma: +59/-0
    • View Profile
    • @luckman212 - github
Re: dpinger multiple targets - aka gwmond $2,500
« Reply #1 on: January 17, 2017, 10:59:04 am »
No takers at $2500 ?

Offline JSX

  • Newbie
  • *
  • Posts: 21
  • Karma: +5/-0
    • View Profile
Re: dpinger multiple targets - aka gwmond $2,500
« Reply #2 on: January 26, 2017, 10:59:59 am »
I agree this would be nice, I think I've done this in a way but it's not really designed to do it.

I also wanted a way to compare not only the local ISP gateway but other internet locations as well, I did this by adding another gateway using the word "dynamic" in the IP address field.  I then specified the monitoring IP I wanted and saved it.  So in a sense I have it monitoring ISP_GW, DNS1, DNS2, etc..

The problem I've noticed is that once you have this configured if you ever need to change anything on the gateway settings such as the monitored IP address, it won't let you because it see's multiple gateways with the same gateway address - the only solution is to remove all the extra gateways make the change and then re-add them again.   This is not ideal but it does work.

My advice if you do choose to use this method, create a standard naming scheme for the gateways so it's clean and easy to read..especially if you have multiple WANS.

 It would be nice if pfSense could use this technique to be a little smarter about whether the internet connection is really down or if it's just the monitored IP address having issues.

Offline chrcoluk

  • Sr. Member
  • ****
  • Posts: 387
  • Karma: +20/-50
    • View Profile
Re: dpinger multiple targets - aka gwmond $2,500
« Reply #3 on: January 26, 2017, 11:26:24 am »
I will look into it.

I will post back if I am successful, basically you want the dpinger function to support multiple targets, and it to be fully configurable in the GUI for the new features?

I would need to submit my work as a patch to the pfsense developers for it to be adopted officially.
pfSense 2.4
Qotom Q355G4 or Braswell N3150 with Jetway mini pcie 2x intel i350 lan - 4 gig Kingston 1333 C11 DDR3L
 - 60 gig kingston ssdnow ssd - ISP Sky UK

Offline luckman212

  • Hero Member
  • *****
  • Posts: 726
  • Karma: +59/-0
    • View Profile
    • @luckman212 - github
Re: dpinger multiple targets - aka gwmond $2,500
« Reply #4 on: January 26, 2017, 11:39:25 am »
basically you want the dpinger function to support multiple targets, and it to be fully configurable in the GUI for the new features?

Well that's definitely a part of the request but the other arguably more critical piece is creating a new "gateway monitor daemon" (which I dubbed gwmond) to take informed actions based on the additional data that dpinger will be collecting.  Pinging additional targets alone without adding a layer of control/response would be interesting, but ultimately not solve the real world problem.

Offline chrcoluk

  • Sr. Member
  • ****
  • Posts: 387
  • Karma: +20/-50
    • View Profile
Re: dpinger multiple targets - aka gwmond $2,500
« Reply #5 on: January 26, 2017, 11:43:37 am »
yeah I have read your entire post now, will come back if I have any success.
pfSense 2.4
Qotom Q355G4 or Braswell N3150 with Jetway mini pcie 2x intel i350 lan - 4 gig Kingston 1333 C11 DDR3L
 - 60 gig kingston ssdnow ssd - ISP Sky UK

Offline grandrivers

  • Sr. Member
  • ****
  • Posts: 566
  • Karma: +13/-2
    • View Profile
Re: dpinger multiple targets - aka gwmond $2,500
« Reply #6 on: March 27, 2017, 09:44:01 pm »
doing some research and looks like ubnt edgemax line can handle three ping targets , just a fyi
pfsense 2.4 super micro A1SRM-2558F
C2558 8gig ECC  60gig SSD
tripple Wan dual pppoe

Offline webdawg

  • Full Member
  • ***
  • Posts: 114
  • Karma: +3/-1
    • View Profile
Re: dpinger multiple targets - aka gwmond $2,500
« Reply #7 on: June 22, 2017, 08:37:40 am »
Lets see if we can get the author of dpinger on this:

https://github.com/dennypage/dpinger/issues/24

Offline loonylion

  • Jr. Member
  • **
  • Posts: 34
  • Karma: +3/-0
    • View Profile
Re: dpinger multiple targets - aka gwmond $2,500
« Reply #8 on: December 09, 2017, 03:29:02 pm »
First version of gwmond available here: www.miscstuff.org/pfSense-pkg-Gwmond-0.2.4.txz No graphing capability at present due to the version of rrdtool supplied with pfSense being compiled without graphing support.