add proc_net_stat_synproxy charts info (#11581)
Ilya Mashchenko committed
Sep 28, 2021 at 15:40 UTC
59f17d921e71aeb649135b28a45b414e97e65ea8
1 file changed
+24
-1
web/gui/dashboard_info.js
+24
-1
@@ -770,7 +770,15 @@ netdataDashboard.submenu = {
770
771
'netfilter.synproxy': {
772
title: 'DDoS protection',
773
- info: 'DDoS protection performance metrics. <a href="https://github.com/firehol/firehol/wiki/Working-with-SYNPROXY" target="_blank">SYNPROXY</a> is a TCP SYN packets proxy. It is used to protect any TCP server (like a web server) from SYN floods and similar DDoS attacks. It is a netfilter module, in the Linux kernel (since version 3.12). It is optimized to handle millions of packets per second utilizing all CPUs available without any concurrency locking between the connections. It can be used for any kind of TCP traffic (even encrypted), since it does not interfere with the content itself.'
773
+ info: 'DDoS protection performance metrics. <a href="https://github.com/firehol/firehol/wiki/Working-with-SYNPROXY" target="_blank">SYNPROXY</a> '+
774
+ 'is a TCP SYN packets proxy. '+
775
+ 'It is used to protect any TCP server (like a web server) from SYN floods and similar DDoS attacks. '+
776
+ 'SYNPROXY intercepts new TCP connections and handles the initial 3-way handshake using syncookies '+
777
+ 'instead of conntrack to establish the connection. '+
778
+ 'It is optimized to handle millions of packets per second utilizing all CPUs available without '+
779
+ 'any concurrency locking between the connections. '+
780
+ 'It can be used for any kind of TCP traffic (even encrypted), '+
781
+ 'since it does not interfere with the content itself.'
782
},
783
784
'ipfw.dynamic_rules': {
@@ -1929,6 +1937,21 @@ netdataDashboard.context = {
1937
'<b>EarlyDrop</b> - dropped conntrack entries to make room for new ones, if maximum table size was reached.</p>'
1938
},
1939
1940
+ 'netfilter.synproxy_syn_received': {
1941
+ info: 'The number of initial TCP SYN packets received from clients.'
1942
+ },
1943
+
1944
+ 'netfilter.synproxy_conn_reopened': {
1945
+ info: 'The number of reopened connections by new TCP SYN packets directly from the TIME-WAIT state.'
1946
+ },
1947
+
1948
+ 'netfilter.synproxy_cookies': {
1949
+ info: '<p>SYNPROXY cookie statistics.</p>'+
1950
+ '<p><b>Valid</b>, <b>Invalid</b> - result of cookie validation in TCP ACK packets received from clients. '+
1951
+ '<b>Retransmits</b> - TCP SYN packets retransmitted to the server. '+
1952
+ 'It happens when the client repeats TCP ACK and the connection to the server is not yet established.</p>'
1953
+ },
1954
+
1955
// ------------------------------------------------------------------------
1956
// APPS
1957