WireGuard monitoring with Netdata
WireGuard is an extremely simple yet fast and modern VPN that utilizes state-of-the-art cryptography.
This module monitors WireGuard VPN network interfaces and peers traffic.
Requirements
Grant
CAP_NET_ADMIN
capability togo.d.plugin
.sudo setcap CAP_NET_ADMIN+epi <INSTALL_PREFIX>/usr/libexec/netdata/plugins.d/go.d.plugin
Metrics
All metrics have "wireguard." prefix.
Metric | Scope | Dimensions | Units |
---|---|---|---|
device_peers | device | peers | peers |
device_network_io | device | receive, transmit | B/s |
peer_network_io | peer | receive, transmit | B/s |
peer_latest_handshake_ago | peer | time | seconds |
Configuration
No configuration needed.
Troubleshooting
To troubleshoot issues with the wireguard
collector, run the go.d.plugin
with the debug option enabled. The output
should give you clues as to why the collector isn't working.
First, navigate to your plugins' directory, usually at /usr/libexec/netdata/plugins.d/
. If that's not the case on your
system, open netdata.conf
and look for the setting plugins directory
. Once you're in the plugin's directory, switch
to the netdata
user.
cd /usr/libexec/netdata/plugins.d/
sudo -u netdata -s
You can now run the go.d.plugin
to debug the collector:
./go.d.plugin -d -m wireguard
Was this page helpful?
Contribute
- Join our community forum
- Learn how to contribute to Netdata's open-source project
- Submit a feature request