travelping / conntrack-stats-exporter

Netfilter Conntrack Stats Exporter

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Conntrack Statistics Exporter

The well known prometheus node exporter exports conntrack metrics off the /proc pseudo file system. The conntrack module developers consider that surface as deprecated and provide a CLI tool conntrack that shows some interesting metrics.

Motivation for this exporter was to survey insert_failed statistics due to a race condition in the Linux ipfilter conntrack kernel code. This is a subtle bug that in some circumstances escalates in high workload scenarios in Kubernetes clusters and causes drop of initial packets of NATted connections (both UDP, TCP.) The insert_failed statistic correlates with dropped connections due to this bug.

Helm Chart

See Prometheus Community Charts. Kudos to @monotek!

Further information about the conntrack race bug and its effect on Kubernetes

About

Netfilter Conntrack Stats Exporter

License:GNU General Public License v3.0


Languages

Language:Go 85.0%Language:Shell 11.7%Language:Mustache 2.4%Language:Dockerfile 0.9%