I spent some time learning and configuring my firewall, then displayed it in form of SVG graph on Glance. I’m pretty happy about the result so I wanted to share it :)

  • Mouette@jlai.luOPEnglish
    2·
    3 days ago

    Glance is cool I love the style and it is well implemented so you can easily add custom HTML and CSS which is what I did to do this custom monitoring. Data are gathered from iptables counters that periodically reset, the hardest and most interesting part was to understand networking and to track packet through applications based on if they were port binded or reverse proxyed (I use Caddy for web facing app I want access to without a VPN). I’ll definitively check more advanced solution, I just needed to do it manually first to actually understand what I’m doing (which took me like 2 weeks until I finally found this gem on ArchLinux wiki https://www.frozentux.net/iptables-tutorial/iptables-tutorial.html)

    • irmadlad@lemmy.worldEnglish
      3·
      3 days ago

      Do you have persistent IPtables then?

      counters that periodically reset,

      Yes, reading comprehension on my part. Doh!

      • Mouette@jlai.luOPEnglish
        2·
        3 days ago

        Yes the full recipe is:

        • 1 Flask API for sending custom HTML to Glance
        • 1 systemd unit + python script for the right graph (last 60 minutes, resetting counter and collecting data via nftables python module)
        • 1 systemd unit + python script for the left graph (last 24h, aggregate data from the last hour collevted by the first script And that’s it, the systemd units are used to schedule python scripts and all the data are stored in flat csv file (forgot one bash script +systemd unit to to flush docker rules at boot and apply custom ones)