Scripts and config to monitor PfSense with Zabbix. Forked from https://github.com/rbicelli/pfsense-zabbix-template
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
400 lines
11 KiB
400 lines
11 KiB
<?php
|
|
/***
|
|
pfsense_zbx.php - pfSense Zabbix Interface
|
|
Version 0.9.0 - 12/12/2019
|
|
|
|
Written by Riccardo Bicelli <r.bicelli@gmail.com>
|
|
This program is licensed under Apache 2.0 License
|
|
*/
|
|
|
|
require_once('globals.inc');
|
|
require_once('functions.inc');
|
|
require_once('config.inc');
|
|
require_once('util.inc');
|
|
|
|
require_once('interfaces.inc');
|
|
|
|
//For OpenVPN Discovery
|
|
require_once('openvpn.inc');
|
|
|
|
//For Service Discovery
|
|
require_once("service-utils.inc");
|
|
|
|
//For System
|
|
require_once('pkg-utils.inc');
|
|
|
|
|
|
//Testing function, for template creating purpose
|
|
function pfz_test(){
|
|
|
|
$ovpn_servers = pfz_openvpn_get_all_servers();
|
|
echo "OPENVPN Servers:\n";
|
|
print_r($ovpn_servers);
|
|
echo "-------------------\n";
|
|
|
|
$ovpn_clients = openvpn_get_active_clients();
|
|
echo "OPENVPN Servers:\n";
|
|
print_r($ovpn_clients);
|
|
echo "-------------------\n";
|
|
|
|
echo "Network Interfaces:\n";
|
|
$ifdescrs = get_configured_interface_with_descr(true);
|
|
$ifaces=array();
|
|
foreach ($ifdescrs as $ifdescr => $ifname){
|
|
$ifinfo = get_interface_info($ifdescr);
|
|
$ifaces[$ifname] = $ifinfo;
|
|
}
|
|
print_r($ifaces);
|
|
|
|
print_r(get_interface_arr());
|
|
print_r(get_configured_interface_list());
|
|
|
|
echo "Services: \n";
|
|
$services = get_services();
|
|
print_r($services);
|
|
|
|
}
|
|
|
|
|
|
// Interface Discovery
|
|
// Improved performance, but need testing
|
|
function pfz_interface_discovery() {
|
|
$ifdescrs = get_configured_interface_with_descr(true);
|
|
$ifaces = get_interface_arr();
|
|
|
|
$json_string = '{"data":[';
|
|
|
|
foreach ($ifdescrs as $ifdescr => $ifname){
|
|
$ifinfo = get_interface_info($ifdescr);
|
|
$ifaces[$ifname] = $ifinfo;
|
|
}
|
|
|
|
foreach ($ifaces as $iface=>$ifdescr) {
|
|
$json_string .= '{"{#IFNAME}":"' . $iface . '"';
|
|
|
|
$descr = $ifdescr;
|
|
if($descr === null){ $descr = $iface; }
|
|
|
|
$json_string .= ',"{#IFDESCR}":"' . $descr . '"';
|
|
$json_string .= '},';
|
|
}
|
|
$json_string = rtrim($json_string,",");
|
|
$json_string .= "]}";
|
|
|
|
echo $json_string;
|
|
|
|
}
|
|
|
|
//OpenVPN Server Discovery
|
|
function pfz_openvpn_get_all_servers(){
|
|
$servers = openvpn_get_active_servers();
|
|
$sk_servers = openvpn_get_active_servers("p2p");
|
|
$servers = array_merge($servers,$sk_servers);
|
|
return ($servers);
|
|
}
|
|
|
|
|
|
function pfz_openvpn_serverdiscovery() {
|
|
$servers = pfz_openvpn_get_all_servers();
|
|
|
|
$json_string = '{"data":[';
|
|
|
|
foreach ($servers as $server){
|
|
$name = trim(preg_replace('/\w{3}(\d)?\:\d{4,5}/i', '', $server['name']));
|
|
$json_string .= '{"{#SERVER}":"' . $server['vpnid'] . '"';
|
|
$json_string .= ',"{#NAME}":"' . $name . '"';
|
|
$json_string .= '},';
|
|
}
|
|
|
|
$json_string = rtrim($json_string,",");
|
|
$json_string .= "]}";
|
|
|
|
echo $json_string;
|
|
}
|
|
|
|
|
|
/*
|
|
* Get OpenVPN Server Value
|
|
* TODO: If the server type is user auth consider the server Up/Listening if status is "none"
|
|
*/
|
|
function pfz_openvpn_servervalue($server_id,$valuekey){
|
|
$servers = pfz_openvpn_get_all_servers();
|
|
foreach($servers as $server) {
|
|
if($server['vpnid']==$server_id)
|
|
$value = $server[$valuekey];
|
|
}
|
|
|
|
//Client Connections: isan array so it is sufficient to count elements
|
|
if ($valuekey=="conns"){
|
|
$value=count($conns);
|
|
if ($value=="") $value="0";
|
|
}
|
|
|
|
if ($value=="") $value="none";
|
|
echo $value;
|
|
}
|
|
|
|
|
|
//OpenVPN Client Discovery
|
|
function pfz_openvpn_clientdiscovery() {
|
|
$clients = openvpn_get_active_clients();
|
|
|
|
$json_string = '{"data":[';
|
|
|
|
foreach ($clients as $client){
|
|
$name = trim(preg_replace('/\w{3}(\d)?\:\d{4,5}/i', '', $client['name']));
|
|
$json_string .= '{"{#CLIENT}":"' . $client['vpnid'] . '"';
|
|
$json_string .= ',"{#NAME}":"' . $name . '"';
|
|
$json_string .= '},';
|
|
}
|
|
|
|
$json_string = rtrim($json_string,",");
|
|
$json_string .= "]}";
|
|
|
|
echo $json_string;
|
|
}
|
|
|
|
|
|
function pfz_openvpn_clientvalue($client_id, $valuekey){
|
|
$clients = openvpn_get_active_clients();
|
|
foreach($clients as $client) {
|
|
if($client['vpnid']==$client_id)
|
|
$value = $client[$valuekey];
|
|
}
|
|
if ($value=="") $value="none";
|
|
echo $value;
|
|
}
|
|
|
|
|
|
//Services Discovery
|
|
function pfz_services_discovery(){
|
|
$services = get_services();
|
|
|
|
$json_string = '{"data":[';
|
|
|
|
foreach ($services as $service){
|
|
if (!empty($service['name'])) {
|
|
|
|
$status = get_service_status($service);
|
|
if ($status="") $status = 0;
|
|
|
|
$id="";
|
|
//id for OpenVPN
|
|
if (!empty($service['id'])) $id = "." . $service["id"];
|
|
//zone for Captive Portal
|
|
if (!empty($service['zone'])) $id = "." . $service["zone"];
|
|
|
|
$json_string .= '{"{#SERVICE}":"' . $service['name'] . $id . '"';
|
|
$json_string .= ',"{#DESCRIPTION}":"' . $service['description'] . '"';
|
|
$json_string .= '},';
|
|
}
|
|
}
|
|
$json_string = rtrim($json_string,",");
|
|
$json_string .= "]}";
|
|
|
|
echo $json_string;
|
|
|
|
}
|
|
|
|
|
|
function pfz_service_value($name,$value){
|
|
$services = get_services();
|
|
|
|
//List of service which are stopped on CARP Slave.
|
|
//For now this is the best way i found for filtering out the triggers
|
|
//Waiting for a way in Zabbix to use Global Regexp in triggers with items discovery
|
|
$stopped_on_carp_slave = array("haproxy","openvpn.");
|
|
|
|
foreach ($services as $service){
|
|
$namecfr=$service["name"];
|
|
$carpcfr=$service["name"];
|
|
|
|
//OpenVPN
|
|
if (!empty($service['id'])) {
|
|
$namecfr = $service['name'] . "." . $service["id"];
|
|
$carpcfr = $service['name'] . ".";
|
|
}
|
|
|
|
//Captive Portal
|
|
if (!empty($service['zone'])) {
|
|
$namecfr = $service['name'] . "." . $service["zone"];
|
|
$carpcfr = $service['name'] . ".";
|
|
}
|
|
|
|
if ($namecfr == $name){
|
|
switch ($value) {
|
|
|
|
case "status":
|
|
$status = get_service_status($service);
|
|
if ($status=="") $status = 0;
|
|
echo $status;
|
|
break;
|
|
|
|
case "name":
|
|
echo $namecfr;
|
|
break;
|
|
|
|
case "enabled":
|
|
if (is_service_enabled($service['name']))
|
|
echo 1;
|
|
else
|
|
echo 0;
|
|
break;
|
|
|
|
case "run_on_carp_slave":
|
|
if (in_array($carpcfr,$stopped_on_carp_slave))
|
|
echo 0;
|
|
else
|
|
echo 1;
|
|
default:
|
|
echo $service[$value];
|
|
break;
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
|
|
//Gateway Discovery
|
|
function pfz_gw_rawstatus() {
|
|
//Return a Raw Gateway Status, useful for action Scripts (e.g. Update Cloudflare DNS config)
|
|
$gws = return_gateways_status(true);
|
|
$gw_string="";
|
|
foreach ($gws as $gw){
|
|
$gw_string .= ($gw['name'] . '.' . $gw['status'] .",");
|
|
}
|
|
echo rtrim($gw_string,",");
|
|
}
|
|
|
|
|
|
function pfz_gw_discovery() {
|
|
$gws = return_gateways_status(true);
|
|
|
|
$json_string = '{"data":[';
|
|
foreach ($gws as $gw){
|
|
$json_string .= '{"{#GATEWAY}":"' . $gw['name'] . '"';
|
|
$json_string .= '},';
|
|
}
|
|
$json_string = rtrim($json_string,",");
|
|
$json_string .= "]}";
|
|
|
|
echo $json_string;
|
|
}
|
|
|
|
|
|
function pfz_gw_value($gw, $valuekey) {
|
|
$gws = return_gateways_status(true);
|
|
if(array_key_exists($gw,$gws))
|
|
echo $gws[$gw][$valuekey];
|
|
}
|
|
|
|
|
|
function pfz_carp_status(){
|
|
//Detect CARP Status
|
|
global $config;
|
|
$status_return = 0;
|
|
$status = get_carp_status();
|
|
$carp_detected_problems = get_single_sysctl("net.inet.carp.demotion");
|
|
|
|
if ($status != 0) { //CARP is enabled
|
|
|
|
if ($carp_detected_problems != 0) {
|
|
echo 4; //There's some Major Problems with CARP
|
|
return true;
|
|
}
|
|
|
|
$status_changed = false;
|
|
$prev_status = "";
|
|
foreach ($config['virtualip']['vip'] as $carp) {
|
|
if ($carp['mode'] != "carp") {
|
|
continue;
|
|
}
|
|
$if_status = get_carp_interface_status("_vip{$carp['uniqid']}");
|
|
|
|
if ( ($prev_status != $if_status) && (empty($if_status)==false) ) { //Some glitches with GUI
|
|
if ($prev_status!="") $status_changed = true;
|
|
$prev_status = $if_status;
|
|
}
|
|
}
|
|
if ($status_changed) {
|
|
//CARP Status is inconsistent across interfaces
|
|
echo 3;
|
|
} else {
|
|
if ($prev_status=="MASTER")
|
|
echo 1;
|
|
else
|
|
echo 2;
|
|
}
|
|
} else {
|
|
//CARP is Disabled
|
|
echo 0;
|
|
}
|
|
}
|
|
|
|
|
|
//System Information
|
|
function pfz_get_system_value($section){
|
|
switch ($section){
|
|
case "version":
|
|
echo( get_system_pkg_version()['version']);
|
|
break;
|
|
case "installed_version":
|
|
echo( get_system_pkg_version()['installed_version']);
|
|
break;
|
|
|
|
}
|
|
}
|
|
|
|
//Argument parsers
|
|
function pfz_discovery($section){
|
|
switch (strtolower($section)){
|
|
case "gw":
|
|
pfz_gw_discovery();
|
|
break;
|
|
case "openvpn_server":
|
|
pfz_openvpn_serverdiscovery();
|
|
break;
|
|
case "openvpn_client":
|
|
pfz_openvpn_clientdiscovery();
|
|
break;
|
|
case "services":
|
|
pfz_services_discovery();
|
|
break;
|
|
case "interfaces":
|
|
pfz_interface_discovery();
|
|
break;
|
|
}
|
|
}
|
|
|
|
|
|
switch (strtolower($argv[1])){
|
|
case "discovery":
|
|
pfz_discovery($argv[2]);
|
|
break;
|
|
case "gw_value":
|
|
pfz_gw_value($argv[2],$argv[3]);
|
|
break;
|
|
case "gw_status":
|
|
pfz_gw_rawstatus();
|
|
break;
|
|
case "openvpn_servervalue":
|
|
pfz_openvpn_servervalue($argv[2],$argv[3]);
|
|
break;
|
|
case "openvpn_clientvalue":
|
|
pfz_openvpn_clientvalue($argv[2],$argv[3]);
|
|
break;
|
|
case "service_value":
|
|
pfz_service_value($argv[2],$argv[3]);
|
|
break;
|
|
case "carp_status":
|
|
pfz_carp_status();
|
|
break;
|
|
case "if_name":
|
|
pfz_get_if_name($argv[2]);
|
|
break;
|
|
case "system":
|
|
pfz_get_system_value($argv[2]);
|
|
break;
|
|
default:
|
|
pfz_test();
|
|
}
|
|
|