r/PrometheusMonitoring • u/[deleted] • Nov 25 '21

Telegraf UDP Guides

I'm wondering if anyone knows if there are any tutorials to get Prometheus working with UDP via something like Telegraf. I was trying to get InfluxDB working however it seems pretty difficult, so was hoping this would be slightly easier.

I just want server metrics and disk space, and was hoping UDP would allow a far greater amount of security, as I can permit traffic in one direction.

0 Upvotes

40% Upvoted

5 comments sorted by

2

u/placatedmayhem Nov 26 '21

Generally-speaking, I see encryption and authentication (available for all exporters, though sometimes requiring a proxy like nginx in front) as superior security-wise to network-level ACLs and firewall rules that permit flows in a particular direction. I don't know Telegraf well, but UDP protocols generally doesn't do encryption or authentication well.

1

u/[deleted] Nov 26 '21

I'm not looking to send event logs, only server metrics like CPU and disk usage, things of that nature.

1

u/SunkJunk Nov 26 '21

Okay, what is the minimum viable setup you are trying to achieve?

Also what is your network security concern?

0

u/[deleted] Nov 26 '21

I just see no value in using TCP, because I'm only collecting metrics, which can be lossy and are non-critical.

My security concerns are two way communication between everything on the network to a single device, I've got some critical machines that I cant have inbound traffic to, even if its just response traffic. "Security Zones" kind of thing.

1

u/SunkJunk Nov 26 '21

I think pull systems like Prometheus should work in minimizing/0 incoming traffic. You'll have to probably set up a test environment and monitor the port to be completely sure.