netsec-ethz / scionlab

SCIONLab user interface and administration
https://www.scionlab.org
Apache License 2.0
9 stars 16 forks source link

Provide metrics & status on the scionlab website #301

Open cmeury opened 4 years ago

cmeury commented 4 years ago

Goals

Ideas

Examples

cmeury commented 4 years ago

Quick research done:

AnotherKamila commented 4 years ago

This is not entirely on-topic, because it is about alerts rather than metrics, but a long long time ago me and a certain awesome person hacked together evilham/prometheus-adlermanager. The interesting thing there is the whitelisting by labels, so that we can selectively only show some data to the public instead of exposing potentially sensitive information. Maybe that code could be useful? That way we might be able to create e.g. a "public" Grafana instance that through an Adlermanager-like proxy only has access to whitelisted metrics, or something like that.

EDIT: Um actually this was so long ago I can't find the relevant code XD But anyway, the point was that we might want to consider proxying Prometheus to only let the public see whitelisted metrics, and then use Prometheus-compatible tools to display/query/whatever.

(Also, but this is completely OT: do we want to deploy Adlermanager as a SCIONLab status page? The code was a result of a 48h hackathon, so it needs some love, but it could be in better shape with a day or two of work.)