IPsec Exporter to Monitor Stronswan Metrics

Prometheus exporter for ipsec metrics, written in Go.

Inspired By : https://github.com/dennisstritzke/ipsec_exporter

Functionality

The IPsec exporter is determining the state of the configured IPsec tunnels via the following procedure.

1. Starting up the /etc/strongswan/ipsec.conf is read. All tunnels configured via the conn keyword are observed.
2. If the /metrics endpoint is queried, the exporter calls strongswan status <tunnel name> for each configured connection. The output is parsed.
   • If the output contains ESTABLISHED, we assume that only the connection is up.
   • If the output contains INSTALLED, we assume that the tunnel is up and running.
   • If the output contains no match, we assume that the connection is down.

Value Definition

Metric	Value	Description
ipsec_status	0	The connection is established and tunnel is installed. The tunnel is up and running.
ipsec_status	1	The connection is established, but the tunnel is not up.
ipsec_status	2	The tunnel is down.
ipsec_status	3	The tunnel is in an unknown state.
ipsec_status	4	The tunnel is ignored.