Add SNMP data collection and resource graph definitions for pfSense firewall / router

Description

From http://www.pfsense.org/

pfSense is a free, open source customized distribution of FreeBSD tailored for use as a firewall and router. In addition to being a powerful, flexible firewalling and routing platform, it includes a long list of related features and a package system allowing further expandability without adding bloat and potential security vulnerabilities to the base distribution. pfSense is a popular project with more than 1 million downloads since its inception, and proven in countless installations ranging from small home networks protecting a PC and an Xbox to large corporations, universities and other organizations protecting thousands of network devices.

This project started in 2004 as a fork of the m0n0wall project, but focused towards full PC installations rather than the embedded hardware focus of m0n0wall. pfSense also offers an embedded image for Compact Flash based installations, however it is not our primary focus.

Acceptance / Success Criteria

None

Attachments

1
  • 24 May 2012, 04:00 PM

Lucidchart Diagrams

Activity

Jeff Gehlbach May 24, 2012 at 4:00 PM

For the curious, here's a PDF of available resource graphs depicting data from the pfSense instance in use at my coworking space on a fairly sleepy afternoon.

Jeff Gehlbach May 24, 2012 at 3:47 PM

Work committed and pushed to 1.10.

Jeff Gehlbach May 24, 2012 at 3:43 PM

Caveats as implemented:

  • The SNMP agent included with pfSense supports the hrStorageTable, but it returns over 200 instances, most of which are pretty useless to most people most of the time. Rather than figure out a way to collect only the important ones (e.g. by forking, again, the hrStorageIndex resource-type and using a custom persistence selector this time) I'm punting for now on collecting these objects. Users are free to uncomment the reference in datacollection/pfsense.xml.

  • My instances of pfSense do not have any labels configured, so I'm also punting on collecting label-related statistics by default. Anybody who is able to test this is encouraged to do so and to round out the configuration by also making resource graph definitions for these stats.

Fixed

Details

Assignee

Reporter

Fix versions

Affects versions

Priority

PagerDuty

Created May 24, 2012 at 3:39 PM
Updated January 27, 2017 at 4:19 PM
Resolved May 24, 2012 at 3:47 PM

Flag notifications