Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

wireguard - invalid check parameter + doesn't show active peers #185

Open
dnlldl opened this issue Dec 6, 2024 · 1 comment
Open

wireguard - invalid check parameter + doesn't show active peers #185

dnlldl opened this issue Dec 6, 2024 · 1 comment

Comments

@dnlldl
Copy link

dnlldl commented Dec 6, 2024

Here is the output of the check plugin:

<<<wireguard:sep(9)>>>
[[wg0]]
(censored)    (wan_ip):(port)     10.99.1.2/32    1733461693      118546  1325844 off

It produces the 2 following checks:

WireGuard wg0	1 configured peer(s), 0 active peer(s)	
Timeout: 	-1, -1

WireGuard wg0 Peer (censored)
endpoint: (wan_ip):(port), allowed IPs: 10.99.1.2/32, latest handshake 6 minutes 25 seconds ago
Invalid check parameter: Undefined key 'allowed-ips' in the dictionary. Allowed are timeout.
Variable: checkgroup_parameters:wireguard_data
Parameters:
{'allowed-ips': '10.99.1.2/32', 'timeout': (-1, -1)}

There is an error with the second check. Looking at the code, I'm a little bit confused at the active peer calculation; it seems like it requires a timeout rule defined, but that same timeout is also used as a criteria for WARN/CRIT? I want both checks to stay OK as long as the tunnel is up but would also like to have the active peer chart work.

@dnlldl
Copy link
Author

dnlldl commented Dec 20, 2024

The errors also prevent updates on the server side, the plugin must be disabled before updating and re-enabled after.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant