Re: guarding an UDP service (openVPN)

Ronny Trommer <[email protected]> Thu, 30 Nov 2017 12:17:48 +0100
Newsgroups	gmane.network.opennms.general
Message-ID	<[email protected]>
The problem is the nature of UDP. For TCP you can implement a generic monitor which tests if a TCP session to a given port can be established. There are no sessions in UDP so if you send a UDP packet to 1194 you will never now if the receiver got it or not :)

With UDP you have to implement the specific application protocol, this is the reason you have a DNS, NTP monitor and not a generic UDP monitor. To solve your use-case you probably have several possibilities quickly out of my head:

- openvpn process
- Tunnel interface status
- Tunnel IP reachable


> On 23. Nov 2017, at 21:31, the outsider <[email protected]> wrote:
> 
> I know i did it once before in the past with a previous version but I lost that setup and can’t remember how I did it.
> 
> I want to guard the OpenVPN service on some machines and that service is listening on UDP 1194.
> The standard TCP monitor can not be used for this, but I don’t know which monitor to use for UDP services.
> 
> 
> ------------------------------------------------------------------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org <http://slashdot.org/>! http://sdm.link/slashdot_______________________________________________ <http://sdm.link/slashdot_______________________________________________>
> Please read the OpenNMS Mailing List FAQ:
> http://www.opennms.org/index.php/Mailing_List_FAQ <http://www.opennms.org/index.php/Mailing_List_FAQ>
> 
> opennms-discuss mailing list
> 
> To *unsubscribe* or change your subscription options, see the bottom of this page:
> https://lists.sourceforge.net/lists/listinfo/opennms-discuss <https://lists.sourceforge.net/lists/listinfo/opennms-discuss>

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot

_______________________________________________
Please read the OpenNMS Mailing List FAQ:
http://www.opennms.org/index.php/Mailing_List_FAQ

opennms-discuss mailing list

To *unsubscribe* or change your subscription options, see the bottom of this page:
https://lists.sourceforge.net/lists/listinfo/opennms-discuss
signature.asc (application/pgp-signature, 529 B)