From owner-freebsd-jail@FreeBSD.ORG Wed Jan 21 20:18:51 2009 Return-Path: Delivered-To: freebsd-jail@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 0FEF8106568B for ; Wed, 21 Jan 2009 20:18:51 +0000 (UTC) (envelope-from shteryana@gmail.com) Received: from fg-out-1718.google.com (fg-out-1718.google.com [72.14.220.155]) by mx1.freebsd.org (Postfix) with ESMTP id 8DBBA8FC16 for ; Wed, 21 Jan 2009 20:18:50 +0000 (UTC) (envelope-from shteryana@gmail.com) Received: by fg-out-1718.google.com with SMTP id l26so2278629fgb.35 for ; Wed, 21 Jan 2009 12:18:49 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:sender:reply-to:received :in-reply-to:references:date:x-google-sender-auth:message-id:subject :from:to:cc:content-type:content-transfer-encoding; bh=pylIGtZ+5KQOoF182Ik+viia5YnARdQE92BR1pgPM/g=; b=V9kWcIdKWu0mPSjuvjEqy3PDkuNZHfwE2/VRFgPsi+SIvF2WDiK7o8K7XCRjJM7HVR CJZzY4zqOai4J7//yiPqz7DBVRMir4nsIE64NUqQlcEGqHAB+a4E1R6lL6f/HCqqawxx iTcl4ILRL6lRDcCokrUMeAOPfWY3NDkfxSRB8= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:sender:reply-to:in-reply-to:references:date :x-google-sender-auth:message-id:subject:from:to:cc:content-type :content-transfer-encoding; b=OND/H8/e9XFdDzR402g5dtBcGn7MB/n8YfW6FOgZOVZEz7vPwwi6k1Yd+8XDm6rw74 5oJPY8GhSVK4+WYySyNew5X+8LJ0P0sRRemtLN+W3FBRCBJQH2Nns68lmN2WsoUpZT3e 0fneFZCZc3NaSSAuIlCU7dppPox4tMJqABAQ0= MIME-Version: 1.0 Sender: shteryana@gmail.com Received: by 10.181.159.11 with SMTP id l11mr1703784bko.186.1232567265483; Wed, 21 Jan 2009 11:47:45 -0800 (PST) In-Reply-To: <20090121160023.960DC8C2862@mx.npubs.com> References: <20090120011951.D26228C282E@mx.npubs.com> <4975B8F3.7010008@quip.cz> <20090121032610.548568C2A3D@mx.npubs.com> <497719E9.1080107@quip.cz> <20090121131105.P45399@maildrop.int.zabbadoz.net> <20090121160023.960DC8C2862@mx.npubs.com> Date: Wed, 21 Jan 2009 21:47:45 +0200 X-Google-Sender-Auth: ec836fa293e103b3 Message-ID: <61b573980901211147y48188ec1t2606faa420c67f40@mail.gmail.com> From: Shteryana Shopova To: stef@memberwebs.com Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Cc: "Bjoern A. Zeeb" , freebsd-jail@freebsd.org Subject: Re: bsnmp module for monitoring jails: bsnmp-jails X-BeenThere: freebsd-jail@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: syrinx@FreeBSD.org List-Id: "Discussion about FreeBSD jail\(8\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 21 Jan 2009 20:18:52 -0000 Hi, Just to elaborate Bjoern's opinion - * traffic monitoring per ip/flow might not be of interest to jails only and I believe it belongs to a separate module * in terms of jail resource monitoring (and limits) I believe the direction to go is using jtune (Cris Jones'es SoC 2006 patch) even if we have to live with #ifdef JTUNE inside bsnmp_jails until it hits the tree (which I hope it will at one point) * the module badly needs to list the IP addresses of a jail - which I believe should be done in a separate table - e.g indexed by jail id and IP address - the question here is how to handle IPv4 vs IPv6 - separate tables or a common table adding a InetAddress column as index - the latter will not work with bsnmptools until they're fixed to support it; I am also guessing we need a RowStatus column so that one can assign IP addresses to a jail via SNMP Furthermore - * there is no way to create or destroy a jail via snmp-jail - jailEntry is missing a RowStatus column maybe? * I am missing a column for the jail's root * jailname, number of IPv4, IPv6'es in terms of jails in CURRENT? * SNMP equivalents for the controls under security.jail sysctl MIB? * I don't like the fact the the module includes pre-generated jails_oid.h, jails_tree.h and jails_tree.c - we have a bsd.snmpmod.mk for this, which puts all files in place (e.g MIB, def) I can try summing up my ideas in a MIB and publishing it for discussion these days but unfotunatelly I don't have the time to do any coding on this right now. One last thought, we certainly want a bsnmp_jails (the notation so far is to use underscore in the name) module as part of base but it should cover as wide as usage scenarios of jail(8) as possible. cheers, Shteryana P.P. Please keep me in the CC list as I am not subscribed to (this) list