DumbMonit
ИнтеграцииСеть и межсетевые экраны
Мониторинг OpenVPN server в DumbMonit
An OpenVPN server through its management interface: version, whether it reports itself connected, and every client currently in session with its addresses and traffic.
ДокументацияОфициальный сайт: OpenVPN
Описания на английском, как в самом продукте. Подписи на странице — на вашем языке.
Что проверяет DumbMonit
OpenVPN's server process exposes its own control channel, the management interface: a local TCP listener, separate from the VPN itself, made for a monitoring tool rather than for a VPN client. DumbMonit reads it like any management client: the server's version, whether it reports itself connected, and every client currently in session, with its real and virtual address and its traffic. Nothing is ever sent that would change the server's state or disconnect a client. Clients are transient by nature — a laptop that goes to sleep simply disappears from the next reading. DumbMonit does not try to remember who was connected five minutes ago; it reports only who is connected now, plus the client…
Типичное применение. OpenVPN server through its management interface: version, state, connected clients
Примеры
- OpenVPN Access Server
- A plain openvpn --server on Linux
- pfSense or OPNsense OpenVPN (management enabled)
Как подключается
Что понадобится
- Management passwordThe shared password set by the third argument of the server's "management" directive.
Учётная запись не нужна.
Сетевые порты, которые нужно открыть
7505/TCPManagement interface (default)
Шаги настройки: Turn on the management interface
Add this line to the server's configuration (server.conf, or as.conf on OpenVPN Access Server) and restart OpenVPN.
management 0.0.0.0 7505Recommended: protect it with a password, put in a file readable by the OpenVPN process alone and added as a third argument.
management 0.0.0.0 7505 /etc/openvpn/management-passwordIn DumbMonit, enter the server's address (vpn.lan, port 7505) and the management password if one is set.
Обратите внимание. Anyone who reaches the management port and knows the password can disconnect clients and reconfigure the running server: allow only the DumbMonit host in the firewall and set a password.