Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[v2] Access/Audit Logging from network observer #1827

Open
c-kruse opened this issue Dec 10, 2024 · 1 comment
Open

[v2] Access/Audit Logging from network observer #1827

c-kruse opened this issue Dec 10, 2024 · 1 comment

Comments

@c-kruse
Copy link
Contributor

c-kruse commented Dec 10, 2024

In v1, the flow-collector logs an event when the collector first adds a vanflow record and again when the collector deletes that record. This compromise kept log noise low enough for the always-on nature of the collector logging, and managed to expose enough information for 1. developers and operators to attempt to debug collector and network issues and 2. to serve as a plausible audit trail answering the question "which service was a skupper network connection or request routed to?".

Moving forward, we should consider a dedicated facility for the later case, in the form of a configurable "network access logging" option to the network-observer.

  • Should be configurable (method and granularity TBD)
  • Should emit predictable structured events, with the fullest amount of relevant context known (source and dest host, process, site, proxy host, router trace path, etc.)
  • [non functional] Appears familiar to end users who understand traditional network and application load balancer access logs, but are not "skupper nerds."
@c-kruse c-kruse changed the title [v2] Audit Logging from network observer [v2] Access/Audit Logging from network observer Dec 19, 2024
@c-kruse
Copy link
Contributor Author

c-kruse commented Dec 19, 2024

@Karen-Schoener this one made me think of you all with the work you've been doing on flow metrics. Would be curious to hear your thoughts sometime. I suspect our horizon for this would be post-2.0, so no rush!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant