1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
|
# File 'modules/profile/manifests/dns/auth/monitoring.pp', line 1
class profile::dns::auth::monitoring {
include ::network::constants
include ::profile::base::firewall
# Metrics!
class { 'prometheus::node_gdnsd': }
# Monitor gdnsd checkconf via NRPE
class { 'gdnsd::monitor_conf': }
# This monitors the specific authdns server directly via
# its own fqdn, which won't generally be one of the listener
# addresses we really care about. This gives a more-direct
# view of reality, though, as the mapping of listener addresses
# to real hosts could be fluid due to routing/anycast.
monitoring::service { 'auth dns':
description => 'Auth DNS',
check_command => 'check_dns_query_auth_port!5353!www.wikipedia.org',
notes_url => 'https://wikitech.wikimedia.org/wiki/DNS',
}
# port 5353 monitoring listeners (which humans and other tools may hit!)
ferm::service { 'udp_dns_auth_monitor':
proto => 'udp',
notrack => true,
port => '5353',
srange => "(${network::constants::aggregate_networks.join(' ')})",
}
ferm::service { 'tcp_dns_auth_monitor':
proto => 'tcp',
notrack => true,
port => '5353',
srange => "(${network::constants::aggregate_networks.join(' ')})",
}
}
|