Hi Saku,
aggregate [DSTAS]: label, dst_as, peer_dst_as, out_iface
aggregate [SRCAS]: label, src_as, peer_src_as, in_iface
aggregate[IP]: label, dst_as, src_host, out_iface, in_iface
And a script goes over this output to relate ifindex to ifalias from
also influxdb SNMP counter DB (where the ifalias is stored) ( script has
to be smart to know which port flows to store, as in edge ports for
hosters for example cause you wouldnt want ibgp flow info in your DST AS
database)
I'm attaching only the graph for IP aggregate series. And Cpu never goes
above 30%.
As i said, per IP, per iface, per dst As information stored, cant get
more pretties and betetr than this for a capacity manager :D
And if you add another tag adding a price per mbit to a carrier/port,
you can find out how much a single customer is costing you for network
usage based on per IP aggregation !!!!!!!!!!!!!!!!!!!!
You have to be "smart" with duration of your retention policy and
continuous queries though :D
(again, Thanks Paulo for PMACCT!!! )
( and as an addition, we have a telegram bot you send a message to like
"/dst as#",
and this pulls the graph from grafana, renders it and sends it to
telegram chat :D
I worked at a few Hosting companies, and I haven't seen anything like
this :D )
The idea is to put this whole thing on github but i need to make time
for that...
And "aint nobody got time for that" :P
On 02-01-19 13:59, Saku Ytti wrote:
Hey,
On Wed, 2 Jan 2019 at 14:40, H I Baysal <hibay...@gmail.com> wrote:
That absolutely depends on the amount of TAGs you use, and how you aggregate,
etc.
I am collecting DSTAS, SRCAS, en DST AS per IP. And influx is not even sweating
a single drop....
We have a 4 Tbps of traffic during peak, and as well as pmacct and influxdb or
running very very smooth.
How many series do you have in the DB?
Your explanation makes it unclear to me what labels you have 'per IP'
is ambiguous to me. If only DST_IP is tag and you have low amount of
IPs in or behind your network, it seems very feasible indeed.
